./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:34:44,028 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:34:44,034 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:34:44,058 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:34:44,059 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:34:44,064 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:34:44,067 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:34:44,071 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:34:44,074 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:34:44,081 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:34:44,082 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:34:44,083 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:34:44,083 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:34:44,084 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:34:44,085 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:34:44,086 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:34:44,087 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:34:44,088 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:34:44,089 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:34:44,091 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:34:44,096 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:34:44,098 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:34:44,101 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:34:44,102 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:34:44,114 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:34:44,114 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:34:44,114 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:34:44,116 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:34:44,117 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:34:44,118 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:34:44,119 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:34:44,120 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:34:44,121 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:34:44,123 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:34:44,123 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:34:44,124 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:34:44,124 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:34:44,124 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:34:44,125 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:34:44,125 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:34:44,126 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:34:44,127 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 20:34:44,167 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:34:44,171 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:34:44,172 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:34:44,172 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:34:44,173 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:34:44,173 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:34:44,174 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:34:44,174 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:34:44,174 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:34:44,175 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:34:44,176 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 20:34:44,176 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:34:44,176 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 20:34:44,177 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:34:44,177 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:34:44,177 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:34:44,177 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:34:44,177 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 20:34:44,178 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:34:44,178 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:34:44,178 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:34:44,178 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:34:44,178 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:34:44,179 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:34:44,179 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:34:44,179 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:34:44,181 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:34:44,181 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:34:44,181 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:34:44,182 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:34:44,182 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:34:44,182 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:34:44,182 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:34:44,183 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cbcb1e9315abec7fabb6a689d6a1c811fb94154c71589df191460c14d014c3cb [2022-11-18 20:34:44,509 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:34:44,546 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:34:44,548 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:34:44,550 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:34:44,551 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:34:44,552 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2022-11-18 20:34:44,613 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/data/fcaceaa80/551eeba153874c9eb756a7d6a5d00735/FLAGa2548f5c8 [2022-11-18 20:34:45,192 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:34:45,193 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2022-11-18 20:34:45,204 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/data/fcaceaa80/551eeba153874c9eb756a7d6a5d00735/FLAGa2548f5c8 [2022-11-18 20:34:45,473 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/data/fcaceaa80/551eeba153874c9eb756a7d6a5d00735 [2022-11-18 20:34:45,476 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:34:45,477 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:34:45,486 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:34:45,486 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:34:45,490 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:34:45,491 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,493 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@31656a84 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45, skipping insertion in model container [2022-11-18 20:34:45,493 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:45,501 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:34:45,563 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:34:45,809 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2022-11-18 20:34:45,888 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:34:45,897 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:34:45,919 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c[4478,4491] [2022-11-18 20:34:45,964 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:34:45,994 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:34:45,994 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45 WrapperNode [2022-11-18 20:34:45,994 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:34:45,996 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:34:45,996 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:34:45,996 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:34:46,004 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,019 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,052 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 228 [2022-11-18 20:34:46,053 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:34:46,053 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:34:46,054 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:34:46,054 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:34:46,064 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,064 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,070 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,088 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,094 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,099 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,100 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,102 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,111 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:34:46,122 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:34:46,123 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:34:46,123 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:34:46,124 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (1/1) ... [2022-11-18 20:34:46,133 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:34:46,145 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:34:46,157 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:34:46,161 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:34:46,197 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:34:46,197 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 20:34:46,197 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 20:34:46,198 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 20:34:46,198 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 20:34:46,198 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 20:34:46,198 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 20:34:46,198 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 20:34:46,198 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 20:34:46,198 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:34:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:34:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 20:34:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 20:34:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-18 20:34:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-18 20:34:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-18 20:34:46,199 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-18 20:34:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:34:46,199 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 20:34:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 20:34:46,200 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:34:46,200 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:34:46,284 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:34:46,286 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:34:46,710 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:34:46,718 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:34:46,718 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 20:34:46,721 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46 BoogieIcfgContainer [2022-11-18 20:34:46,721 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:34:46,723 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:34:46,724 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:34:46,728 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:34:46,728 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:34:45" (1/3) ... [2022-11-18 20:34:46,729 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f20d235 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:34:46, skipping insertion in model container [2022-11-18 20:34:46,729 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:34:45" (2/3) ... [2022-11-18 20:34:46,730 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f20d235 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:34:46, skipping insertion in model container [2022-11-18 20:34:46,730 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46" (3/3) ... [2022-11-18 20:34:46,732 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product54.cil.c [2022-11-18 20:34:46,752 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:34:46,753 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:34:46,812 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:34:46,819 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@12650a21, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:34:46,820 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:34:46,825 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-18 20:34:46,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 20:34:46,837 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:46,837 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:46,838 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:46,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:46,844 INFO L85 PathProgramCache]: Analyzing trace with hash 149329663, now seen corresponding path program 1 times [2022-11-18 20:34:46,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:46,855 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [380677833] [2022-11-18 20:34:46,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:46,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:46,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:34:47,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:47,099 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [380677833] [2022-11-18 20:34:47,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [380677833] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,101 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,102 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:34:47,103 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [263644561] [2022-11-18 20:34:47,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 20:34:47,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 20:34:47,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:34:47,154 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:47,246 INFO L93 Difference]: Finished difference Result 198 states and 269 transitions. [2022-11-18 20:34:47,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 20:34:47,249 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 20:34:47,249 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:47,266 INFO L225 Difference]: With dead ends: 198 [2022-11-18 20:34:47,266 INFO L226 Difference]: Without dead ends: 94 [2022-11-18 20:34:47,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:34:47,276 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:47,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:34:47,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-18 20:34:47,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-11-18 20:34:47,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-18 20:34:47,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-11-18 20:34:47,333 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2022-11-18 20:34:47,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:47,334 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-11-18 20:34:47,334 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,334 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-11-18 20:34:47,337 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 20:34:47,337 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:47,337 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:47,338 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:34:47,338 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:47,339 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:47,339 INFO L85 PathProgramCache]: Analyzing trace with hash 67554452, now seen corresponding path program 1 times [2022-11-18 20:34:47,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:47,339 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391628189] [2022-11-18 20:34:47,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:47,340 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:47,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 20:34:47,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,491 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:47,492 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,492 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391628189] [2022-11-18 20:34:47,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391628189] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,493 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,493 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:34:47,493 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1035888650] [2022-11-18 20:34:47,493 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,495 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:34:47,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,496 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:34:47,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,496 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:47,516 INFO L93 Difference]: Finished difference Result 153 states and 199 transitions. [2022-11-18 20:34:47,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:34:47,521 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 20:34:47,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:47,525 INFO L225 Difference]: With dead ends: 153 [2022-11-18 20:34:47,525 INFO L226 Difference]: Without dead ends: 85 [2022-11-18 20:34:47,526 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,527 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:47,528 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:34:47,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-18 20:34:47,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-18 20:34:47,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-18 20:34:47,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-18 20:34:47,557 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2022-11-18 20:34:47,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:47,557 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-18 20:34:47,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,558 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-18 20:34:47,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-18 20:34:47,564 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:47,564 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:47,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:34:47,564 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:47,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:47,565 INFO L85 PathProgramCache]: Analyzing trace with hash -6965766, now seen corresponding path program 1 times [2022-11-18 20:34:47,566 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:47,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1742482838] [2022-11-18 20:34:47,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:47,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:47,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:47,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,668 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:47,668 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1742482838] [2022-11-18 20:34:47,669 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1742482838] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,669 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,669 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:34:47,669 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1704585064] [2022-11-18 20:34:47,669 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,670 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:34:47,670 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:34:47,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,671 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,707 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:47,707 INFO L93 Difference]: Finished difference Result 163 states and 214 transitions. [2022-11-18 20:34:47,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:34:47,720 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-18 20:34:47,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:47,722 INFO L225 Difference]: With dead ends: 163 [2022-11-18 20:34:47,723 INFO L226 Difference]: Without dead ends: 85 [2022-11-18 20:34:47,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:34:47,729 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 104 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:47,730 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 108 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:34:47,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-18 20:34:47,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-18 20:34:47,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-18 20:34:47,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-11-18 20:34:47,745 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2022-11-18 20:34:47,745 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:47,745 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-11-18 20:34:47,745 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:34:47,746 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-11-18 20:34:47,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-18 20:34:47,747 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:47,747 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:47,748 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:34:47,748 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:47,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:47,760 INFO L85 PathProgramCache]: Analyzing trace with hash 1330354743, now seen corresponding path program 1 times [2022-11-18 20:34:47,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:47,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2089577372] [2022-11-18 20:34:47,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:47,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:47,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:47,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 20:34:47,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 20:34:47,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:47,887 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:34:47,888 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:47,888 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2089577372] [2022-11-18 20:34:47,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2089577372] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:47,889 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:47,889 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-18 20:34:47,889 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1340271854] [2022-11-18 20:34:47,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:47,890 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-18 20:34:47,890 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:47,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-18 20:34:47,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-18 20:34:47,891 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:34:48,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:48,123 INFO L93 Difference]: Finished difference Result 246 states and 320 transitions. [2022-11-18 20:34:48,124 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 20:34:48,124 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2022-11-18 20:34:48,125 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:48,133 INFO L225 Difference]: With dead ends: 246 [2022-11-18 20:34:48,134 INFO L226 Difference]: Without dead ends: 168 [2022-11-18 20:34:48,139 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:34:48,145 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 170 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 176 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:48,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [176 Valid, 227 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:48,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2022-11-18 20:34:48,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 162. [2022-11-18 20:34:48,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-18 20:34:48,196 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-11-18 20:34:48,197 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 44 [2022-11-18 20:34:48,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:48,197 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-11-18 20:34:48,197 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:34:48,198 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-11-18 20:34:48,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 20:34:48,199 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:48,200 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:48,200 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:34:48,200 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:48,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:48,201 INFO L85 PathProgramCache]: Analyzing trace with hash 1858639799, now seen corresponding path program 1 times [2022-11-18 20:34:48,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:48,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [85063756] [2022-11-18 20:34:48,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:48,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:48,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:48,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:48,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 20:34:48,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:48,375 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:48,375 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [85063756] [2022-11-18 20:34:48,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [85063756] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:48,376 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:48,376 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:48,376 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792456428] [2022-11-18 20:34:48,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:48,377 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:48,377 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:48,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:48,378 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:48,378 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:34:48,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:48,575 INFO L93 Difference]: Finished difference Result 325 states and 421 transitions. [2022-11-18 20:34:48,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:48,576 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-18 20:34:48,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:48,578 INFO L225 Difference]: With dead ends: 325 [2022-11-18 20:34:48,578 INFO L226 Difference]: Without dead ends: 170 [2022-11-18 20:34:48,579 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:34:48,580 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 71 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 433 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:48,581 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 433 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:34:48,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-11-18 20:34:48,598 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 165. [2022-11-18 20:34:48,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 125 states have (on average 1.28) internal successors, (160), 133 states have internal predecessors, (160), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-18 20:34:48,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 209 transitions. [2022-11-18 20:34:48,601 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 209 transitions. Word has length 50 [2022-11-18 20:34:48,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:48,601 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 209 transitions. [2022-11-18 20:34:48,602 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:34:48,602 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 209 transitions. [2022-11-18 20:34:48,603 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 20:34:48,603 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:48,603 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:48,604 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:34:48,604 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:48,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:48,605 INFO L85 PathProgramCache]: Analyzing trace with hash 2077494517, now seen corresponding path program 1 times [2022-11-18 20:34:48,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:48,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289182489] [2022-11-18 20:34:48,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:48,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:48,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:48,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:48,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 20:34:48,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:48,803 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:48,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:48,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289182489] [2022-11-18 20:34:48,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289182489] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:48,804 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:48,804 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:48,804 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1282087782] [2022-11-18 20:34:48,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:48,805 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:48,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:48,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:48,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:48,809 INFO L87 Difference]: Start difference. First operand 165 states and 209 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:34:49,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:49,059 INFO L93 Difference]: Finished difference Result 336 states and 440 transitions. [2022-11-18 20:34:49,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:49,060 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-18 20:34:49,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:49,064 INFO L225 Difference]: With dead ends: 336 [2022-11-18 20:34:49,064 INFO L226 Difference]: Without dead ends: 178 [2022-11-18 20:34:49,065 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:34:49,069 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 178 mSDsluCounter, 224 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 176 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:49,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 322 Invalid, 176 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:49,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 178 states. [2022-11-18 20:34:49,094 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 178 to 167. [2022-11-18 20:34:49,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 127 states have (on average 1.2755905511811023) internal successors, (162), 135 states have internal predecessors, (162), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-18 20:34:49,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 211 transitions. [2022-11-18 20:34:49,100 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 211 transitions. Word has length 50 [2022-11-18 20:34:49,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:49,101 INFO L495 AbstractCegarLoop]: Abstraction has 167 states and 211 transitions. [2022-11-18 20:34:49,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:34:49,102 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 211 transitions. [2022-11-18 20:34:49,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 20:34:49,108 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:49,108 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:49,108 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:34:49,108 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:49,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:49,109 INFO L85 PathProgramCache]: Analyzing trace with hash 1943481011, now seen corresponding path program 1 times [2022-11-18 20:34:49,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:49,109 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122166179] [2022-11-18 20:34:49,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:49,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:49,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:49,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:49,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 20:34:49,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:49,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:49,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122166179] [2022-11-18 20:34:49,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122166179] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:49,217 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:49,217 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:34:49,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [961168039] [2022-11-18 20:34:49,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:49,218 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:34:49,218 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:49,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:34:49,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:34:49,219 INFO L87 Difference]: Start difference. First operand 167 states and 211 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:34:49,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:49,526 INFO L93 Difference]: Finished difference Result 467 states and 611 transitions. [2022-11-18 20:34:49,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:49,526 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2022-11-18 20:34:49,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:49,529 INFO L225 Difference]: With dead ends: 467 [2022-11-18 20:34:49,529 INFO L226 Difference]: Without dead ends: 307 [2022-11-18 20:34:49,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:49,530 INFO L413 NwaCegarLoop]: 149 mSDtfsCounter, 228 mSDsluCounter, 195 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:49,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 344 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:49,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307 states. [2022-11-18 20:34:49,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307 to 299. [2022-11-18 20:34:49,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 299 states, 226 states have (on average 1.252212389380531) internal successors, (283), 238 states have internal predecessors, (283), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-18 20:34:49,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 299 states to 299 states and 381 transitions. [2022-11-18 20:34:49,560 INFO L78 Accepts]: Start accepts. Automaton has 299 states and 381 transitions. Word has length 50 [2022-11-18 20:34:49,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:49,561 INFO L495 AbstractCegarLoop]: Abstraction has 299 states and 381 transitions. [2022-11-18 20:34:49,561 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:34:49,561 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 381 transitions. [2022-11-18 20:34:49,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-18 20:34:49,562 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:49,563 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:49,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:34:49,563 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:49,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:49,563 INFO L85 PathProgramCache]: Analyzing trace with hash -432802525, now seen corresponding path program 1 times [2022-11-18 20:34:49,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:49,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135261829] [2022-11-18 20:34:49,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:49,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:49,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:49,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:49,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:49,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-18 20:34:49,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:49,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:49,703 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:49,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135261829] [2022-11-18 20:34:49,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135261829] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:49,703 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:49,703 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:49,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730707633] [2022-11-18 20:34:49,704 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:49,704 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:49,704 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:49,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:49,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:49,705 INFO L87 Difference]: Start difference. First operand 299 states and 381 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:34:49,959 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:49,959 INFO L93 Difference]: Finished difference Result 594 states and 757 transitions. [2022-11-18 20:34:49,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:34:49,960 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-11-18 20:34:49,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:49,962 INFO L225 Difference]: With dead ends: 594 [2022-11-18 20:34:49,962 INFO L226 Difference]: Without dead ends: 302 [2022-11-18 20:34:49,963 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:34:49,964 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 127 mSDsluCounter, 300 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:49,964 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 394 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 171 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:49,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2022-11-18 20:34:49,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 297. [2022-11-18 20:34:49,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 297 states, 224 states have (on average 1.2455357142857142) internal successors, (279), 236 states have internal predecessors, (279), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-18 20:34:49,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 297 states to 297 states and 377 transitions. [2022-11-18 20:34:49,991 INFO L78 Accepts]: Start accepts. Automaton has 297 states and 377 transitions. Word has length 52 [2022-11-18 20:34:49,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:49,991 INFO L495 AbstractCegarLoop]: Abstraction has 297 states and 377 transitions. [2022-11-18 20:34:49,992 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:34:49,992 INFO L276 IsEmpty]: Start isEmpty. Operand 297 states and 377 transitions. [2022-11-18 20:34:49,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-18 20:34:49,992 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:49,993 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:49,993 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:34:49,993 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:49,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:49,993 INFO L85 PathProgramCache]: Analyzing trace with hash -1117904615, now seen corresponding path program 1 times [2022-11-18 20:34:49,994 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:49,994 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [762251429] [2022-11-18 20:34:49,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:49,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:50,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:34:50,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:34:50,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:50,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-18 20:34:50,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:50,184 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:50,184 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [762251429] [2022-11-18 20:34:50,184 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [762251429] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:50,184 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:50,184 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:34:50,185 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [849807100] [2022-11-18 20:34:50,185 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:50,185 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:34:50,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:50,186 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:34:50,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:50,187 INFO L87 Difference]: Start difference. First operand 297 states and 377 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:34:50,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:50,626 INFO L93 Difference]: Finished difference Result 583 states and 752 transitions. [2022-11-18 20:34:50,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-18 20:34:50,626 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-18 20:34:50,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:50,629 INFO L225 Difference]: With dead ends: 583 [2022-11-18 20:34:50,629 INFO L226 Difference]: Without dead ends: 345 [2022-11-18 20:34:50,630 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=87, Invalid=185, Unknown=0, NotChecked=0, Total=272 [2022-11-18 20:34:50,633 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 239 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 416 mSolverCounterSat, 73 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 243 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 73 IncrementalHoareTripleChecker+Valid, 416 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:50,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [243 Valid, 476 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [73 Valid, 416 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 20:34:50,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2022-11-18 20:34:50,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 332. [2022-11-18 20:34:50,677 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 332 states, 251 states have (on average 1.2151394422310757) internal successors, (305), 266 states have internal predecessors, (305), 41 states have call successors, (41), 33 states have call predecessors, (41), 39 states have return successors, (58), 42 states have call predecessors, (58), 41 states have call successors, (58) [2022-11-18 20:34:50,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 332 states to 332 states and 404 transitions. [2022-11-18 20:34:50,681 INFO L78 Accepts]: Start accepts. Automaton has 332 states and 404 transitions. Word has length 54 [2022-11-18 20:34:50,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:50,683 INFO L495 AbstractCegarLoop]: Abstraction has 332 states and 404 transitions. [2022-11-18 20:34:50,683 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:34:50,683 INFO L276 IsEmpty]: Start isEmpty. Operand 332 states and 404 transitions. [2022-11-18 20:34:50,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-18 20:34:50,685 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:50,685 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:50,686 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 20:34:50,686 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:50,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:50,687 INFO L85 PathProgramCache]: Analyzing trace with hash -309751737, now seen corresponding path program 1 times [2022-11-18 20:34:50,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:50,687 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354320257] [2022-11-18 20:34:50,687 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:50,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:50,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:34:50,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:34:50,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:50,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:50,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:34:50,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:50,831 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:50,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:50,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354320257] [2022-11-18 20:34:50,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354320257] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:50,833 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:50,833 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:34:50,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1654851001] [2022-11-18 20:34:50,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:50,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:34:50,835 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:50,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:34:50,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:34:50,837 INFO L87 Difference]: Start difference. First operand 332 states and 404 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:51,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:51,101 INFO L93 Difference]: Finished difference Result 604 states and 746 transitions. [2022-11-18 20:34:51,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:34:51,102 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-11-18 20:34:51,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:51,105 INFO L225 Difference]: With dead ends: 604 [2022-11-18 20:34:51,105 INFO L226 Difference]: Without dead ends: 333 [2022-11-18 20:34:51,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-18 20:34:51,106 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 159 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 162 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:51,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [162 Valid, 265 Invalid, 308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:51,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-11-18 20:34:51,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 329. [2022-11-18 20:34:51,145 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 329 states, 248 states have (on average 1.2137096774193548) internal successors, (301), 263 states have internal predecessors, (301), 41 states have call successors, (41), 33 states have call predecessors, (41), 39 states have return successors, (58), 42 states have call predecessors, (58), 41 states have call successors, (58) [2022-11-18 20:34:51,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 329 states to 329 states and 400 transitions. [2022-11-18 20:34:51,148 INFO L78 Accepts]: Start accepts. Automaton has 329 states and 400 transitions. Word has length 56 [2022-11-18 20:34:51,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:51,149 INFO L495 AbstractCegarLoop]: Abstraction has 329 states and 400 transitions. [2022-11-18 20:34:51,149 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:51,149 INFO L276 IsEmpty]: Start isEmpty. Operand 329 states and 400 transitions. [2022-11-18 20:34:51,150 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-18 20:34:51,150 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:51,150 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:51,150 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 20:34:51,151 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:51,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:51,151 INFO L85 PathProgramCache]: Analyzing trace with hash -443765243, now seen corresponding path program 1 times [2022-11-18 20:34:51,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:51,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [675893734] [2022-11-18 20:34:51,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:51,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:51,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:34:51,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:34:51,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:51,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:34:51,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:34:51,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:34:51,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:51,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [675893734] [2022-11-18 20:34:51,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [675893734] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:34:51,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:34:51,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:34:51,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651953938] [2022-11-18 20:34:51,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:34:51,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:34:51,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:51,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:34:51,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:34:51,330 INFO L87 Difference]: Start difference. First operand 329 states and 400 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:51,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:51,656 INFO L93 Difference]: Finished difference Result 573 states and 705 transitions. [2022-11-18 20:34:51,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:34:51,657 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 56 [2022-11-18 20:34:51,658 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:51,659 INFO L225 Difference]: With dead ends: 573 [2022-11-18 20:34:51,660 INFO L226 Difference]: Without dead ends: 305 [2022-11-18 20:34:51,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:34:51,662 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 153 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 323 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 340 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 323 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:51,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 340 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 323 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:34:51,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-11-18 20:34:51,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 301. [2022-11-18 20:34:51,694 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 301 states, 228 states have (on average 1.2105263157894737) internal successors, (276), 242 states have internal predecessors, (276), 38 states have call successors, (38), 30 states have call predecessors, (38), 34 states have return successors, (49), 37 states have call predecessors, (49), 38 states have call successors, (49) [2022-11-18 20:34:51,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 301 states to 301 states and 363 transitions. [2022-11-18 20:34:51,695 INFO L78 Accepts]: Start accepts. Automaton has 301 states and 363 transitions. Word has length 56 [2022-11-18 20:34:51,697 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:51,697 INFO L495 AbstractCegarLoop]: Abstraction has 301 states and 363 transitions. [2022-11-18 20:34:51,697 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:34:51,697 INFO L276 IsEmpty]: Start isEmpty. Operand 301 states and 363 transitions. [2022-11-18 20:34:51,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-18 20:34:51,698 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:34:51,698 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:51,699 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-18 20:34:51,699 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:34:51,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:34:51,699 INFO L85 PathProgramCache]: Analyzing trace with hash 872263225, now seen corresponding path program 1 times [2022-11-18 20:34:51,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:34:51,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392770993] [2022-11-18 20:34:51,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:51,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:34:51,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:34:51,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:34:51,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:34:51,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:34:51,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-18 20:34:51,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-18 20:34:51,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-18 20:34:51,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-18 20:34:51,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:51,982 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 17 proven. 5 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 20:34:51,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:34:51,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392770993] [2022-11-18 20:34:51,983 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392770993] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:34:51,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [697491539] [2022-11-18 20:34:51,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:34:51,985 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:34:51,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:34:51,992 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:34:52,000 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:34:52,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:34:52,122 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-18 20:34:52,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:34:52,403 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-18 20:34:52,403 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:34:52,781 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-18 20:34:52,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [697491539] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:34:52,781 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:34:52,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 20 [2022-11-18 20:34:52,782 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1353982276] [2022-11-18 20:34:52,782 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:34:52,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-18 20:34:52,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:34:52,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-18 20:34:52,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=316, Unknown=0, NotChecked=0, Total=380 [2022-11-18 20:34:52,784 INFO L87 Difference]: Start difference. First operand 301 states and 363 transitions. Second operand has 20 states, 20 states have (on average 6.75) internal successors, (135), 14 states have internal predecessors, (135), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-18 20:34:54,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:34:54,799 INFO L93 Difference]: Finished difference Result 913 states and 1187 transitions. [2022-11-18 20:34:54,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-11-18 20:34:54,799 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 6.75) internal successors, (135), 14 states have internal predecessors, (135), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) Word has length 91 [2022-11-18 20:34:54,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:34:54,800 INFO L225 Difference]: With dead ends: 913 [2022-11-18 20:34:54,800 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 20:34:54,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 191 SyntacticMatches, 7 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1217 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1031, Invalid=3525, Unknown=0, NotChecked=0, Total=4556 [2022-11-18 20:34:54,805 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 1003 mSDsluCounter, 630 mSDsCounter, 0 mSdLazyCounter, 1412 mSolverCounterSat, 514 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1005 SdHoareTripleChecker+Valid, 704 SdHoareTripleChecker+Invalid, 1926 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 514 IncrementalHoareTripleChecker+Valid, 1412 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:34:54,805 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1005 Valid, 704 Invalid, 1926 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [514 Valid, 1412 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-18 20:34:54,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 20:34:54,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 20:34:54,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:34:54,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 20:34:54,807 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 91 [2022-11-18 20:34:54,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:34:54,807 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 20:34:54,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 6.75) internal successors, (135), 14 states have internal predecessors, (135), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-18 20:34:54,807 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 20:34:54,808 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 20:34:54,810 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 20:34:54,817 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-18 20:34:55,015 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-18 20:34:55,017 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 20:34:59,657 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 898 905) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) [2022-11-18 20:34:59,657 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 898 905) no Hoare annotation was computed. [2022-11-18 20:34:59,657 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 898 905) no Hoare annotation was computed. [2022-11-18 20:34:59,657 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2022-11-18 20:34:59,657 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2022-11-18 20:34:59,658 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 (not (= ~pumpRunning~0 1)) .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-18 20:34:59,658 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-18 20:34:59,658 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-18 20:34:59,658 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-18 20:34:59,659 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,659 INFO L895 garLoopResultBuilder]: At program point L911(line 911) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,659 INFO L899 garLoopResultBuilder]: For program point L911-1(line 911) no Hoare annotation was computed. [2022-11-18 20:34:59,659 INFO L899 garLoopResultBuilder]: For program point L267(line 267) no Hoare annotation was computed. [2022-11-18 20:34:59,659 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 781 804) no Hoare annotation was computed. [2022-11-18 20:34:59,659 INFO L899 garLoopResultBuilder]: For program point L292(lines 292 298) no Hoare annotation was computed. [2022-11-18 20:34:59,660 INFO L899 garLoopResultBuilder]: For program point L288(lines 288 301) no Hoare annotation was computed. [2022-11-18 20:34:59,660 INFO L895 garLoopResultBuilder]: At program point L288-1(lines 273 305) the Hoare annotation is: (let ((.cse14 (= ~methaneLevelCritical~0 0)) (.cse18 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0))) (let ((.cse8 (= ~pumpRunning~0 1)) (.cse9 (= ~pumpRunning~0 0)) (.cse2 (<= ~waterLevel~0 1)) (.cse15 (not .cse18)) (.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse3 (= 1 ~systemActive~0)) (.cse17 (not .cse14))) (let ((.cse4 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (or .cse18 .cse17)) (.cse0 (not .cse3)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (and .cse9 .cse2 .cse15 .cse3 .cse17 .cse5)) (.cse11 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (and .cse2 .cse15 .cse3 .cse17 .cse5 .cse8))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse2 .cse4 .cse5 .cse6 .cse7) .cse10 .cse11 .cse12) (or .cse13 .cse14 .cse0 .cse15 .cse11) (or (not (<= |old(~waterLevel~0)| 1)) .cse13 (and .cse9 .cse4 .cse16 .cse6 .cse7) .cse0 (and .cse9 .cse17 .cse16)) (or .cse13 .cse0 (and .cse16 .cse6 .cse8) .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse14 .cse0 .cse1 .cse10 .cse11 .cse12))))) [2022-11-18 20:34:59,660 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-11-18 20:34:59,661 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2022-11-18 20:34:59,661 INFO L899 garLoopResultBuilder]: For program point L280-1(line 280) no Hoare annotation was computed. [2022-11-18 20:34:59,661 INFO L895 garLoopResultBuilder]: At program point L879(line 879) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,661 INFO L895 garLoopResultBuilder]: At program point L268(lines 263 270) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,661 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,662 INFO L895 garLoopResultBuilder]: At program point L884(line 884) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2022-11-18 20:34:59,662 INFO L895 garLoopResultBuilder]: At program point L884-1(lines 865 889) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-11-18 20:34:59,662 INFO L895 garLoopResultBuilder]: At program point L913(lines 906 916) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-18 20:34:59,662 INFO L899 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2022-11-18 20:34:59,663 INFO L895 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0))) (let ((.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (= ~pumpRunning~0 0)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (or (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0) (not .cse1))) (.cse8 (= ~pumpRunning~0 1)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (let ((.cse4 (<= ~waterLevel~0 1)) (.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse10 .cse4 .cse5 .cse6 .cse7) .cse3)) (or .cse1 .cse2 .cse9 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or (and .cse10 .cse11 .cse6 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or .cse0 .cse2 (and .cse11 .cse6 .cse8) .cse3 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-11-18 20:34:59,663 INFO L899 garLoopResultBuilder]: For program point L282(lines 282 302) no Hoare annotation was computed. [2022-11-18 20:34:59,663 INFO L895 garLoopResultBuilder]: At program point L922(lines 917 925) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2) (or .cse0 .cse1 .cse2 (and (= |timeShift___utac_acc__Specification3_spec__1_~tmp~1#1| 0) (= |timeShift_isPumpRunning_#res#1| 1) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))))) [2022-11-18 20:34:59,664 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 781 804) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and .cse0 (= ~pumpRunning~0 1))))) [2022-11-18 20:34:59,664 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2022-11-18 20:34:59,664 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 881) no Hoare annotation was computed. [2022-11-18 20:34:59,664 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 267) no Hoare annotation was computed. [2022-11-18 20:34:59,664 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 886) no Hoare annotation was computed. [2022-11-18 20:34:59,665 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 163 192) no Hoare annotation was computed. [2022-11-18 20:34:59,665 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 163 192) the Hoare annotation is: true [2022-11-18 20:34:59,665 INFO L902 garLoopResultBuilder]: At program point L188(lines 163 192) the Hoare annotation is: true [2022-11-18 20:34:59,665 INFO L899 garLoopResultBuilder]: For program point L184(line 184) no Hoare annotation was computed. [2022-11-18 20:34:59,665 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 181) no Hoare annotation was computed. [2022-11-18 20:34:59,665 INFO L902 garLoopResultBuilder]: At program point L177-1(lines 177 181) the Hoare annotation is: true [2022-11-18 20:34:59,666 INFO L899 garLoopResultBuilder]: For program point L174(line 174) no Hoare annotation was computed. [2022-11-18 20:34:59,666 INFO L902 garLoopResultBuilder]: At program point L173-2(lines 173 187) the Hoare annotation is: true [2022-11-18 20:34:59,666 INFO L902 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: true [2022-11-18 20:34:59,666 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2022-11-18 20:34:59,666 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-18 20:34:59,666 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-11-18 20:34:59,666 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-18 20:34:59,667 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2022-11-18 20:34:59,667 INFO L899 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2022-11-18 20:34:59,667 INFO L895 garLoopResultBuilder]: At program point L337(lines 332 340) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:34:59,667 INFO L899 garLoopResultBuilder]: For program point L721(lines 721 725) no Hoare annotation was computed. [2022-11-18 20:34:59,667 INFO L895 garLoopResultBuilder]: At program point L329(lines 325 331) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:34:59,667 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 20:34:59,668 INFO L895 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2022-11-18 20:34:59,668 INFO L895 garLoopResultBuilder]: At program point L222(lines 218 224) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:34:59,668 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 20:34:59,668 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 20:34:59,668 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2022-11-18 20:34:59,668 INFO L895 garLoopResultBuilder]: At program point L322(lines 318 324) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:34:59,669 INFO L899 garLoopResultBuilder]: For program point L739-1(lines 739 745) no Hoare annotation was computed. [2022-11-18 20:34:59,669 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 20:34:59,669 INFO L895 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2022-11-18 20:34:59,669 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= ~waterLevel~0 2) (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2022-11-18 20:34:59,669 INFO L899 garLoopResultBuilder]: For program point L249(lines 249 256) no Hoare annotation was computed. [2022-11-18 20:34:59,669 INFO L899 garLoopResultBuilder]: For program point L249-2(lines 249 256) no Hoare annotation was computed. [2022-11-18 20:34:59,670 INFO L899 garLoopResultBuilder]: For program point L757(lines 757 761) no Hoare annotation was computed. [2022-11-18 20:34:59,670 INFO L895 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-18 20:34:59,670 INFO L899 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2022-11-18 20:34:59,670 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 762) no Hoare annotation was computed. [2022-11-18 20:34:59,670 INFO L895 garLoopResultBuilder]: At program point L1005(lines 1000 1007) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-18 20:34:59,671 INFO L902 garLoopResultBuilder]: At program point L233(lines 226 235) the Hoare annotation is: true [2022-11-18 20:34:59,671 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-18 20:34:59,671 INFO L902 garLoopResultBuilder]: At program point L770(lines 709 774) the Hoare annotation is: true [2022-11-18 20:34:59,671 INFO L902 garLoopResultBuilder]: At program point L258(lines 239 261) the Hoare annotation is: true [2022-11-18 20:34:59,671 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 813 837) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,672 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,672 INFO L899 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2022-11-18 20:34:59,672 INFO L895 garLoopResultBuilder]: At program point L977(lines 962 980) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (and .cse2 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) .cse3) (not (<= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse4) (or .cse0 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (not .cse3)) .cse1 .cse4))) [2022-11-18 20:34:59,672 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-18 20:34:59,672 INFO L899 garLoopResultBuilder]: For program point L971(lines 971 975) no Hoare annotation was computed. [2022-11-18 20:34:59,673 INFO L899 garLoopResultBuilder]: For program point L971-2(lines 971 975) no Hoare annotation was computed. [2022-11-18 20:34:59,673 INFO L895 garLoopResultBuilder]: At program point L895(lines 890 897) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 2 ~waterLevel~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~6#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0) (= ~pumpRunning~0 1)) (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,673 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2022-11-18 20:34:59,673 INFO L895 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,673 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 829) no Hoare annotation was computed. [2022-11-18 20:34:59,674 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= ~waterLevel~0 1))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse1 .cse3 (not .cse2)) (not (<= ~waterLevel~0 2)))) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse3)))) [2022-11-18 20:34:59,674 INFO L899 garLoopResultBuilder]: For program point L817(lines 817 834) no Hoare annotation was computed. [2022-11-18 20:34:59,674 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-18 20:34:59,674 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-18 20:34:59,675 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or .cse0 (not (= ~pumpRunning~0 1)) .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-11-18 20:34:59,675 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 839 863) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,675 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,675 INFO L895 garLoopResultBuilder]: At program point L849(line 849) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,676 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2022-11-18 20:34:59,676 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-11-18 20:34:59,676 INFO L895 garLoopResultBuilder]: At program point L996(lines 981 999) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,676 INFO L899 garLoopResultBuilder]: For program point L990(lines 990 994) no Hoare annotation was computed. [2022-11-18 20:34:59,676 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 839 863) no Hoare annotation was computed. [2022-11-18 20:34:59,677 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,677 INFO L899 garLoopResultBuilder]: For program point L990-2(lines 990 994) no Hoare annotation was computed. [2022-11-18 20:34:59,677 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-18 20:34:59,677 INFO L899 garLoopResultBuilder]: For program point L858-1(lines 839 863) no Hoare annotation was computed. [2022-11-18 20:34:59,681 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:34:59,683 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:34:59,713 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:34:59 BoogieIcfgContainer [2022-11-18 20:34:59,713 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:34:59,714 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:34:59,714 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:34:59,714 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:34:59,715 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:34:46" (3/4) ... [2022-11-18 20:34:59,718 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 20:34:59,725 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-18 20:34:59,725 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 20:34:59,725 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 20:34:59,725 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 20:34:59,726 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 20:34:59,726 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 20:34:59,726 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:34:59,726 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 20:34:59,726 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-18 20:34:59,734 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-18 20:34:59,734 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 20:34:59,735 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 20:34:59,736 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:34:59,736 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:34:59,769 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:34:59,771 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) [2022-11-18 20:34:59,773 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((((((waterLevel <= 1 && 1 == systemActive) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) && pumpRunning == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((waterLevel <= 1 && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && (tmp == 0 || !(methaneLevelCritical == 0))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((waterLevel <= 1 && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) [2022-11-18 20:34:59,773 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:34:59,773 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && (tmp == 0 || !(methaneLevelCritical == 0))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) [2022-11-18 20:34:59,774 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-18 20:34:59,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && !(\result == 0))) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2022-11-18 20:34:59,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-18 20:34:59,775 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && \result == 1) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) [2022-11-18 20:34:59,776 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp___0 == 0) && \result == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-18 20:34:59,780 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:34:59,780 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && 1 <= tmp) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) && pumpRunning == 1)) || !(waterLevel <= 2)) [2022-11-18 20:34:59,832 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:34:59,832 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:34:59,833 INFO L158 Benchmark]: Toolchain (without parser) took 14355.87ms. Allocated memory was 121.6MB in the beginning and 226.5MB in the end (delta: 104.9MB). Free memory was 79.9MB in the beginning and 126.3MB in the end (delta: -46.4MB). Peak memory consumption was 58.7MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,833 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 121.6MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:34:59,834 INFO L158 Benchmark]: CACSL2BoogieTranslator took 508.86ms. Allocated memory is still 121.6MB. Free memory was 79.7MB in the beginning and 88.3MB in the end (delta: -8.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,834 INFO L158 Benchmark]: Boogie Procedure Inliner took 57.27ms. Allocated memory is still 121.6MB. Free memory was 88.3MB in the beginning and 85.9MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,835 INFO L158 Benchmark]: Boogie Preprocessor took 68.13ms. Allocated memory is still 121.6MB. Free memory was 85.9MB in the beginning and 84.1MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,835 INFO L158 Benchmark]: RCFGBuilder took 598.79ms. Allocated memory is still 121.6MB. Free memory was 84.1MB in the beginning and 66.4MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,836 INFO L158 Benchmark]: TraceAbstraction took 12989.82ms. Allocated memory was 121.6MB in the beginning and 226.5MB in the end (delta: 104.9MB). Free memory was 66.0MB in the beginning and 131.6MB in the end (delta: -65.5MB). Peak memory consumption was 104.7MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,837 INFO L158 Benchmark]: Witness Printer took 118.60ms. Allocated memory is still 226.5MB. Free memory was 131.6MB in the beginning and 126.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 20:34:59,839 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 121.6MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 508.86ms. Allocated memory is still 121.6MB. Free memory was 79.7MB in the beginning and 88.3MB in the end (delta: -8.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 57.27ms. Allocated memory is still 121.6MB. Free memory was 88.3MB in the beginning and 85.9MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 68.13ms. Allocated memory is still 121.6MB. Free memory was 85.9MB in the beginning and 84.1MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 598.79ms. Allocated memory is still 121.6MB. Free memory was 84.1MB in the beginning and 66.4MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 12989.82ms. Allocated memory was 121.6MB in the beginning and 226.5MB in the end (delta: 104.9MB). Free memory was 66.0MB in the beginning and 131.6MB in the end (delta: -65.5MB). Peak memory consumption was 104.7MB. Max. memory is 16.1GB. * Witness Printer took 118.60ms. Allocated memory is still 226.5MB. Free memory was 131.6MB in the beginning and 126.3MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 267]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2484 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2445 mSDsluCounter, 3945 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2724 mSDsCounter, 895 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3134 IncrementalHoareTripleChecker+Invalid, 4029 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 895 mSolverCounterUnsat, 1221 mSDtfsCounter, 3134 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 430 GetRequests, 290 SyntacticMatches, 8 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1254 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=332occurred in iteration=9, InterpolantAutomatonStates: 125, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 56 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 1415 PreInvPairs, 1681 NumberOfFragments, 1661 HoareAnnotationTreeSize, 1415 FomulaSimplifications, 132 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 48 FomulaSimplificationsInter, 12012 FormulaSimplificationTreeSizeReductionInter, 4.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.4s InterpolantComputationTime, 676 NumberOfCodeBlocks, 676 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 753 ConstructedInterpolants, 0 QuantifiedInterpolants, 1415 SizeOfPredicates, 4 NumberOfNonLiveVariables, 317 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 63/84 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && 1 <= tmp) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) && pumpRunning == 1)) || !(waterLevel <= 2)) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && \result == 1) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) - InvariantResult [Line: 318]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || ((((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((pumpRunning == 0 && \old(waterLevel) == waterLevel) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && (tmp == 0 || !(methaneLevelCritical == 0))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0)) || !(2 <= waterLevel)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp___0 == 0) && \result == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: (((1 == systemActive && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) || pumpRunning == 1) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 865]: Loop Invariant Derived loop invariant: (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && !(\result == 0))) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 273]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((((((waterLevel <= 1 && 1 == systemActive) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1) && pumpRunning == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && waterLevel <= \old(waterLevel)) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((waterLevel <= 1 && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 <= 1) && \old(waterLevel) == waterLevel) && (tmp == 0 || !(methaneLevelCritical == 0))) && \result <= 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && !(methaneLevelCritical == 0)) && \old(waterLevel) == waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((\old(waterLevel) == waterLevel && (tmp == 0 || !(methaneLevelCritical == 0))) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || (((((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) || (((((waterLevel <= 1 && !(tmp == 0)) && 1 == systemActive) && !(methaneLevelCritical == 0)) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: (((1 == systemActive && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) RESULT: Ultimate proved your program to be correct! [2022-11-18 20:34:59,889 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b9adad89-5dba-4b09-89f8-08d88b58b0b6/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE