./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 21:11:22,461 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 21:11:22,464 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 21:11:22,490 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 21:11:22,491 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 21:11:22,492 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 21:11:22,493 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 21:11:22,499 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 21:11:22,503 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 21:11:22,505 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 21:11:22,507 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 21:11:22,509 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 21:11:22,511 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 21:11:22,515 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 21:11:22,517 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 21:11:22,520 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 21:11:22,522 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 21:11:22,529 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 21:11:22,531 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 21:11:22,533 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 21:11:22,534 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 21:11:22,538 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 21:11:22,542 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 21:11:22,543 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 21:11:22,546 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 21:11:22,552 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 21:11:22,552 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 21:11:22,553 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 21:11:22,555 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 21:11:22,556 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 21:11:22,556 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 21:11:22,557 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 21:11:22,558 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 21:11:22,560 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 21:11:22,562 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 21:11:22,563 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 21:11:22,564 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 21:11:22,564 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 21:11:22,565 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 21:11:22,566 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 21:11:22,567 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 21:11:22,568 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 21:11:22,603 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 21:11:22,603 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 21:11:22,604 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 21:11:22,604 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 21:11:22,605 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 21:11:22,606 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 21:11:22,606 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 21:11:22,607 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 21:11:22,607 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 21:11:22,607 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 21:11:22,608 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 21:11:22,609 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 21:11:22,609 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 21:11:22,609 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 21:11:22,609 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 21:11:22,610 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 21:11:22,610 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 21:11:22,610 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 21:11:22,610 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 21:11:22,610 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 21:11:22,611 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 21:11:22,611 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 21:11:22,611 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 21:11:22,611 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 21:11:22,612 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:11:22,612 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 21:11:22,613 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 21:11:22,614 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 21:11:22,614 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 21:11:22,614 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 21:11:22,614 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 21:11:22,615 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 21:11:22,615 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 21:11:22,615 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3cfb2febd3006e73b0e8309478193e665e2e7ddd381dfad7d5652117e74962c4 [2022-11-18 21:11:22,975 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 21:11:23,007 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 21:11:23,009 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 21:11:23,010 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 21:11:23,012 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 21:11:23,014 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2022-11-18 21:11:23,090 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/data/2b4fbbf28/2e1c9a4ed1e94ea39c7a99438e3d1b44/FLAG67be1b158 [2022-11-18 21:11:23,716 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 21:11:23,717 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2022-11-18 21:11:23,735 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/data/2b4fbbf28/2e1c9a4ed1e94ea39c7a99438e3d1b44/FLAG67be1b158 [2022-11-18 21:11:24,003 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/data/2b4fbbf28/2e1c9a4ed1e94ea39c7a99438e3d1b44 [2022-11-18 21:11:24,005 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 21:11:24,007 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 21:11:24,010 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 21:11:24,011 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 21:11:24,015 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 21:11:24,016 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,018 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1ca0cd49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24, skipping insertion in model container [2022-11-18 21:11:24,019 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,027 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 21:11:24,092 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 21:11:24,423 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2022-11-18 21:11:24,453 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:11:24,485 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 21:11:24,573 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c[13989,14002] [2022-11-18 21:11:24,593 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:11:24,613 INFO L208 MainTranslator]: Completed translation [2022-11-18 21:11:24,613 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24 WrapperNode [2022-11-18 21:11:24,613 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 21:11:24,615 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 21:11:24,615 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 21:11:24,615 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 21:11:24,623 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,636 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,664 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 224 [2022-11-18 21:11:24,664 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 21:11:24,665 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 21:11:24,665 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 21:11:24,665 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 21:11:24,675 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,676 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,678 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,679 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,685 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,690 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,692 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,694 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,697 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 21:11:24,698 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 21:11:24,698 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 21:11:24,698 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 21:11:24,699 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (1/1) ... [2022-11-18 21:11:24,716 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:11:24,728 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:11:24,757 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 21:11:24,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 21:11:24,818 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 21:11:24,819 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 21:11:24,819 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 21:11:24,819 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 21:11:24,819 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 21:11:24,819 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 21:11:24,820 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 21:11:24,820 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 21:11:24,820 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 21:11:24,820 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:11:24,820 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:11:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 21:11:24,821 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 21:11:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 21:11:24,821 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 21:11:24,821 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 21:11:24,822 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 21:11:24,822 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 21:11:24,912 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 21:11:24,915 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 21:11:25,367 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 21:11:25,379 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 21:11:25,382 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 21:11:25,387 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:11:25 BoogieIcfgContainer [2022-11-18 21:11:25,387 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 21:11:25,390 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 21:11:25,392 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 21:11:25,396 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 21:11:25,396 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 09:11:24" (1/3) ... [2022-11-18 21:11:25,397 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32d767ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:11:25, skipping insertion in model container [2022-11-18 21:11:25,397 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:11:24" (2/3) ... [2022-11-18 21:11:25,398 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@32d767ab and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:11:25, skipping insertion in model container [2022-11-18 21:11:25,398 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:11:25" (3/3) ... [2022-11-18 21:11:25,399 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product57.cil.c [2022-11-18 21:11:25,419 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 21:11:25,419 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 21:11:25,476 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 21:11:25,484 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@165e4c0f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 21:11:25,484 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 21:11:25,488 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-18 21:11:25,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 21:11:25,499 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:25,500 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:25,501 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:25,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:25,507 INFO L85 PathProgramCache]: Analyzing trace with hash 358613796, now seen corresponding path program 1 times [2022-11-18 21:11:25,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:25,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [69188369] [2022-11-18 21:11:25,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:25,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:25,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:25,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 21:11:25,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:25,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:25,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:25,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [69188369] [2022-11-18 21:11:25,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [69188369] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:25,853 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:25,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:11:25,856 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579400554] [2022-11-18 21:11:25,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:25,863 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 21:11:25,864 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:25,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 21:11:25,900 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:11:25,903 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:25,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:25,976 INFO L93 Difference]: Finished difference Result 178 states and 243 transitions. [2022-11-18 21:11:25,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 21:11:25,979 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 21:11:25,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:25,996 INFO L225 Difference]: With dead ends: 178 [2022-11-18 21:11:25,997 INFO L226 Difference]: Without dead ends: 84 [2022-11-18 21:11:26,002 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:11:26,006 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:26,007 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:11:26,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-18 21:11:26,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-11-18 21:11:26,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 21:11:26,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-11-18 21:11:26,105 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2022-11-18 21:11:26,105 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:26,105 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-11-18 21:11:26,106 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,106 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-11-18 21:11:26,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 21:11:26,108 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:26,109 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:26,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 21:11:26,109 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:26,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:26,110 INFO L85 PathProgramCache]: Analyzing trace with hash 1691145883, now seen corresponding path program 1 times [2022-11-18 21:11:26,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:26,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038074334] [2022-11-18 21:11:26,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:26,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:26,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 21:11:26,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,298 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:26,298 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:26,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038074334] [2022-11-18 21:11:26,299 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038074334] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:26,299 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:26,299 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:11:26,299 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [478411798] [2022-11-18 21:11:26,300 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:26,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:11:26,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:26,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:11:26,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:11:26,303 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:26,323 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2022-11-18 21:11:26,324 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:11:26,324 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 21:11:26,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:26,326 INFO L225 Difference]: With dead ends: 134 [2022-11-18 21:11:26,326 INFO L226 Difference]: Without dead ends: 75 [2022-11-18 21:11:26,327 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:11:26,329 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:26,329 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:11:26,331 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-18 21:11:26,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-18 21:11:26,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 21:11:26,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2022-11-18 21:11:26,342 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2022-11-18 21:11:26,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:26,342 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2022-11-18 21:11:26,343 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,343 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2022-11-18 21:11:26,344 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-18 21:11:26,344 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:26,345 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:26,345 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 21:11:26,345 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:26,346 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:26,346 INFO L85 PathProgramCache]: Analyzing trace with hash 1032855392, now seen corresponding path program 1 times [2022-11-18 21:11:26,346 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:26,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182778513] [2022-11-18 21:11:26,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:26,347 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:26,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 21:11:26,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:26,514 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:26,514 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182778513] [2022-11-18 21:11:26,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182778513] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:26,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:26,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:11:26,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650840127] [2022-11-18 21:11:26,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:26,518 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:11:26,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:26,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:11:26,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:11:26,520 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:26,654 INFO L93 Difference]: Finished difference Result 143 states and 188 transitions. [2022-11-18 21:11:26,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-18 21:11:26,655 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-18 21:11:26,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:26,657 INFO L225 Difference]: With dead ends: 143 [2022-11-18 21:11:26,657 INFO L226 Difference]: Without dead ends: 75 [2022-11-18 21:11:26,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:11:26,659 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 123 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:26,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 208 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:11:26,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-18 21:11:26,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-18 21:11:26,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 21:11:26,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-11-18 21:11:26,671 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2022-11-18 21:11:26,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:26,672 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-11-18 21:11:26,672 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,672 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-11-18 21:11:26,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-18 21:11:26,673 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:26,674 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:26,674 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 21:11:26,674 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:26,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:26,675 INFO L85 PathProgramCache]: Analyzing trace with hash 1487539860, now seen corresponding path program 1 times [2022-11-18 21:11:26,675 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:26,675 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [66396009] [2022-11-18 21:11:26,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:26,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:26,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 21:11:26,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:26,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:26,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:26,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [66396009] [2022-11-18 21:11:26,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [66396009] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:26,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:26,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:11:26,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536860621] [2022-11-18 21:11:26,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:26,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:11:26,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:26,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:11:26,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:11:26,765 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:26,831 INFO L93 Difference]: Finished difference Result 188 states and 246 transitions. [2022-11-18 21:11:26,832 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:11:26,832 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2022-11-18 21:11:26,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:26,834 INFO L225 Difference]: With dead ends: 188 [2022-11-18 21:11:26,837 INFO L226 Difference]: Without dead ends: 120 [2022-11-18 21:11:26,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:11:26,844 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 76 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:26,844 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:11:26,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 120 states. [2022-11-18 21:11:26,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 120 to 118. [2022-11-18 21:11:26,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 92 states have (on average 1.3043478260869565) internal successors, (120), 100 states have internal predecessors, (120), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-18 21:11:26,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 150 transitions. [2022-11-18 21:11:26,871 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 150 transitions. Word has length 38 [2022-11-18 21:11:26,872 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:26,872 INFO L495 AbstractCegarLoop]: Abstraction has 118 states and 150 transitions. [2022-11-18 21:11:26,872 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 21:11:26,873 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 150 transitions. [2022-11-18 21:11:26,876 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-18 21:11:26,877 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:26,877 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:26,877 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 21:11:26,878 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:26,878 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:26,878 INFO L85 PathProgramCache]: Analyzing trace with hash -703403747, now seen corresponding path program 1 times [2022-11-18 21:11:26,879 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:26,879 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624765965] [2022-11-18 21:11:26,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:26,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:26,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 21:11:27,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:27,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-18 21:11:27,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,106 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:27,108 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:27,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624765965] [2022-11-18 21:11:27,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624765965] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:27,112 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:27,112 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:11:27,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [140444444] [2022-11-18 21:11:27,114 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:27,115 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:11:27,115 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:27,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:11:27,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:11:27,117 INFO L87 Difference]: Start difference. First operand 118 states and 150 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:11:27,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:27,443 INFO L93 Difference]: Finished difference Result 349 states and 461 transitions. [2022-11-18 21:11:27,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 21:11:27,444 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-18 21:11:27,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:27,447 INFO L225 Difference]: With dead ends: 349 [2022-11-18 21:11:27,447 INFO L226 Difference]: Without dead ends: 238 [2022-11-18 21:11:27,448 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-18 21:11:27,450 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 138 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 365 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:27,450 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 365 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:11:27,451 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2022-11-18 21:11:27,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 230. [2022-11-18 21:11:27,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 230 states, 179 states have (on average 1.2793296089385475) internal successors, (229), 190 states have internal predecessors, (229), 26 states have call successors, (26), 22 states have call predecessors, (26), 24 states have return successors, (40), 26 states have call predecessors, (40), 26 states have call successors, (40) [2022-11-18 21:11:27,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 230 states to 230 states and 295 transitions. [2022-11-18 21:11:27,488 INFO L78 Accepts]: Start accepts. Automaton has 230 states and 295 transitions. Word has length 46 [2022-11-18 21:11:27,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:27,488 INFO L495 AbstractCegarLoop]: Abstraction has 230 states and 295 transitions. [2022-11-18 21:11:27,489 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:11:27,489 INFO L276 IsEmpty]: Start isEmpty. Operand 230 states and 295 transitions. [2022-11-18 21:11:27,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:11:27,490 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:27,491 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:27,491 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 21:11:27,491 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:27,492 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:27,492 INFO L85 PathProgramCache]: Analyzing trace with hash 1237679491, now seen corresponding path program 1 times [2022-11-18 21:11:27,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:27,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919558203] [2022-11-18 21:11:27,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:27,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:27,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:27,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:11:27,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:27,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 21:11:27,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:27,669 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:27,669 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:27,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [919558203] [2022-11-18 21:11:27,670 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [919558203] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:27,670 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:27,670 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 21:11:27,671 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601844660] [2022-11-18 21:11:27,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:27,671 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 21:11:27,671 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:27,672 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 21:11:27,672 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:11:27,673 INFO L87 Difference]: Start difference. First operand 230 states and 295 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:28,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:28,300 INFO L93 Difference]: Finished difference Result 606 states and 833 transitions. [2022-11-18 21:11:28,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-18 21:11:28,301 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-18 21:11:28,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:28,305 INFO L225 Difference]: With dead ends: 606 [2022-11-18 21:11:28,306 INFO L226 Difference]: Without dead ends: 469 [2022-11-18 21:11:28,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-18 21:11:28,308 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 315 mSDsluCounter, 277 mSDsCounter, 0 mSdLazyCounter, 346 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 318 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 346 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:28,309 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [318 Valid, 354 Invalid, 447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 346 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 21:11:28,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 469 states. [2022-11-18 21:11:28,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 469 to 405. [2022-11-18 21:11:28,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 315 states have (on average 1.253968253968254) internal successors, (395), 337 states have internal predecessors, (395), 46 states have call successors, (46), 32 states have call predecessors, (46), 43 states have return successors, (91), 48 states have call predecessors, (91), 46 states have call successors, (91) [2022-11-18 21:11:28,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 532 transitions. [2022-11-18 21:11:28,371 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 532 transitions. Word has length 50 [2022-11-18 21:11:28,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:28,372 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 532 transitions. [2022-11-18 21:11:28,372 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:28,372 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 532 transitions. [2022-11-18 21:11:28,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:11:28,374 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:28,374 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:28,374 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 21:11:28,375 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:28,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:28,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1103665985, now seen corresponding path program 1 times [2022-11-18 21:11:28,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:28,376 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1363911382] [2022-11-18 21:11:28,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:28,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:28,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:28,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,438 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:11:28,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:28,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 21:11:28,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,467 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:28,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:28,468 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1363911382] [2022-11-18 21:11:28,468 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1363911382] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:28,468 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:28,468 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:11:28,469 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451103871] [2022-11-18 21:11:28,469 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:28,469 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:11:28,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:28,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:11:28,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:11:28,471 INFO L87 Difference]: Start difference. First operand 405 states and 532 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:28,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:28,851 INFO L93 Difference]: Finished difference Result 781 states and 1049 transitions. [2022-11-18 21:11:28,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 21:11:28,852 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-18 21:11:28,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:28,856 INFO L225 Difference]: With dead ends: 781 [2022-11-18 21:11:28,856 INFO L226 Difference]: Without dead ends: 465 [2022-11-18 21:11:28,858 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-18 21:11:28,858 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 172 mSDsluCounter, 230 mSDsCounter, 0 mSdLazyCounter, 270 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 305 SdHoareTripleChecker+Invalid, 325 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 270 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:28,859 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 305 Invalid, 325 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 270 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 21:11:28,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 465 states. [2022-11-18 21:11:28,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 465 to 405. [2022-11-18 21:11:28,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 315 states have (on average 1.2507936507936508) internal successors, (394), 337 states have internal predecessors, (394), 46 states have call successors, (46), 32 states have call predecessors, (46), 43 states have return successors, (91), 48 states have call predecessors, (91), 46 states have call successors, (91) [2022-11-18 21:11:28,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 531 transitions. [2022-11-18 21:11:28,906 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 531 transitions. Word has length 50 [2022-11-18 21:11:28,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:28,907 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 531 transitions. [2022-11-18 21:11:28,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:28,908 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 531 transitions. [2022-11-18 21:11:28,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:11:28,909 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:28,909 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:28,909 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 21:11:28,910 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:28,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:28,910 INFO L85 PathProgramCache]: Analyzing trace with hash 1322520703, now seen corresponding path program 1 times [2022-11-18 21:11:28,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:28,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101037640] [2022-11-18 21:11:28,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:28,911 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:28,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:28,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:28,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:11:28,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:29,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-18 21:11:29,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,011 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:29,012 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:29,012 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2101037640] [2022-11-18 21:11:29,012 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2101037640] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:29,012 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:29,013 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 21:11:29,013 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965308517] [2022-11-18 21:11:29,013 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:29,013 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 21:11:29,014 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:29,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 21:11:29,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:11:29,015 INFO L87 Difference]: Start difference. First operand 405 states and 531 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:29,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:29,353 INFO L93 Difference]: Finished difference Result 858 states and 1156 transitions. [2022-11-18 21:11:29,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 21:11:29,354 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-18 21:11:29,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:29,357 INFO L225 Difference]: With dead ends: 858 [2022-11-18 21:11:29,358 INFO L226 Difference]: Without dead ends: 460 [2022-11-18 21:11:29,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-18 21:11:29,360 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 175 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 177 SdHoareTripleChecker+Valid, 376 SdHoareTripleChecker+Invalid, 330 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:29,361 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [177 Valid, 376 Invalid, 330 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 21:11:29,362 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 460 states. [2022-11-18 21:11:29,403 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 460 to 408. [2022-11-18 21:11:29,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 320 states have (on average 1.24375) internal successors, (398), 341 states have internal predecessors, (398), 45 states have call successors, (45), 31 states have call predecessors, (45), 42 states have return successors, (90), 47 states have call predecessors, (90), 45 states have call successors, (90) [2022-11-18 21:11:29,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 533 transitions. [2022-11-18 21:11:29,408 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 533 transitions. Word has length 50 [2022-11-18 21:11:29,408 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:29,408 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 533 transitions. [2022-11-18 21:11:29,408 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:29,409 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 533 transitions. [2022-11-18 21:11:29,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-18 21:11:29,410 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:29,410 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:29,410 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 21:11:29,411 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:29,411 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:29,411 INFO L85 PathProgramCache]: Analyzing trace with hash -782958681, now seen corresponding path program 1 times [2022-11-18 21:11:29,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:29,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [308965844] [2022-11-18 21:11:29,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:29,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:29,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:29,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:11:29,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:29,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-18 21:11:29,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,677 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 21:11:29,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:29,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [308965844] [2022-11-18 21:11:29,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [308965844] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:11:29,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [245457469] [2022-11-18 21:11:29,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:29,678 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:11:29,679 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:11:29,686 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:11:29,692 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 21:11:29,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:29,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 235 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-18 21:11:29,795 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:11:30,221 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:11:30,222 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 21:11:30,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [245457469] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:30,222 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 21:11:30,222 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-11-18 21:11:30,223 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842443186] [2022-11-18 21:11:30,223 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:30,224 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 21:11:30,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:30,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 21:11:30,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-11-18 21:11:30,225 INFO L87 Difference]: Start difference. First operand 408 states and 533 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:30,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:30,426 INFO L93 Difference]: Finished difference Result 1193 states and 1596 transitions. [2022-11-18 21:11:30,427 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 21:11:30,427 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-11-18 21:11:30,427 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:30,432 INFO L225 Difference]: With dead ends: 1193 [2022-11-18 21:11:30,432 INFO L226 Difference]: Without dead ends: 792 [2022-11-18 21:11:30,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 55 SyntacticMatches, 1 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-11-18 21:11:30,435 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 63 mSDsluCounter, 398 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 502 SdHoareTripleChecker+Invalid, 117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:30,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 502 Invalid, 117 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:11:30,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 792 states. [2022-11-18 21:11:30,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 792 to 790. [2022-11-18 21:11:30,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 618 states have (on average 1.233009708737864) internal successors, (762), 656 states have internal predecessors, (762), 89 states have call successors, (89), 62 states have call predecessors, (89), 82 states have return successors, (180), 91 states have call predecessors, (180), 89 states have call successors, (180) [2022-11-18 21:11:30,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 1031 transitions. [2022-11-18 21:11:30,518 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 1031 transitions. Word has length 55 [2022-11-18 21:11:30,519 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:30,519 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 1031 transitions. [2022-11-18 21:11:30,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:30,519 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 1031 transitions. [2022-11-18 21:11:30,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-18 21:11:30,521 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:30,521 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:30,538 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 21:11:30,728 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:11:30,728 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:30,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:30,729 INFO L85 PathProgramCache]: Analyzing trace with hash 844263809, now seen corresponding path program 1 times [2022-11-18 21:11:30,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:30,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807960554] [2022-11-18 21:11:30,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:30,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:30,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:30,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:30,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:30,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:11:30,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:30,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:30,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:30,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 21:11:30,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:30,866 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:11:30,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:30,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807960554] [2022-11-18 21:11:30,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807960554] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:30,867 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:30,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-18 21:11:30,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538493345] [2022-11-18 21:11:30,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:30,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-18 21:11:30,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:30,869 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-18 21:11:30,869 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-18 21:11:30,869 INFO L87 Difference]: Start difference. First operand 790 states and 1031 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:31,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:31,479 INFO L93 Difference]: Finished difference Result 1552 states and 2021 transitions. [2022-11-18 21:11:31,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-18 21:11:31,480 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-18 21:11:31,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:31,484 INFO L225 Difference]: With dead ends: 1552 [2022-11-18 21:11:31,484 INFO L226 Difference]: Without dead ends: 769 [2022-11-18 21:11:31,487 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=330, Unknown=0, NotChecked=0, Total=420 [2022-11-18 21:11:31,488 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 260 mSDsluCounter, 566 mSDsCounter, 0 mSdLazyCounter, 553 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 685 SdHoareTripleChecker+Invalid, 629 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 553 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:31,489 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 685 Invalid, 629 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 553 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 21:11:31,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-11-18 21:11:31,560 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 746. [2022-11-18 21:11:31,562 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 746 states, 586 states have (on average 1.204778156996587) internal successors, (706), 620 states have internal predecessors, (706), 81 states have call successors, (81), 62 states have call predecessors, (81), 78 states have return successors, (123), 82 states have call predecessors, (123), 81 states have call successors, (123) [2022-11-18 21:11:31,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 746 states to 746 states and 910 transitions. [2022-11-18 21:11:31,566 INFO L78 Accepts]: Start accepts. Automaton has 746 states and 910 transitions. Word has length 56 [2022-11-18 21:11:31,567 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:31,567 INFO L495 AbstractCegarLoop]: Abstraction has 746 states and 910 transitions. [2022-11-18 21:11:31,567 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 21:11:31,568 INFO L276 IsEmpty]: Start isEmpty. Operand 746 states and 910 transitions. [2022-11-18 21:11:31,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-18 21:11:31,569 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:31,569 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:31,570 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 21:11:31,570 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:31,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:31,571 INFO L85 PathProgramCache]: Analyzing trace with hash 605332931, now seen corresponding path program 1 times [2022-11-18 21:11:31,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:31,571 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [622263263] [2022-11-18 21:11:31,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:31,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:31,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:31,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 21:11:31,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 21:11:31,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:31,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-18 21:11:31,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:31,771 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 21:11:31,771 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:31,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [622263263] [2022-11-18 21:11:31,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [622263263] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:11:31,772 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:11:31,772 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-18 21:11:31,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [551669012] [2022-11-18 21:11:31,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:11:31,773 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-18 21:11:31,773 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:31,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-18 21:11:31,774 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2022-11-18 21:11:31,774 INFO L87 Difference]: Start difference. First operand 746 states and 910 transitions. Second operand has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 21:11:33,178 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:33,178 INFO L93 Difference]: Finished difference Result 1486 states and 1832 transitions. [2022-11-18 21:11:33,179 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-18 21:11:33,179 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-18 21:11:33,179 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:33,183 INFO L225 Difference]: With dead ends: 1486 [2022-11-18 21:11:33,183 INFO L226 Difference]: Without dead ends: 747 [2022-11-18 21:11:33,186 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 287 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=262, Invalid=1070, Unknown=0, NotChecked=0, Total=1332 [2022-11-18 21:11:33,187 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 310 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 1433 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 311 SdHoareTripleChecker+Valid, 298 SdHoareTripleChecker+Invalid, 1566 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 1433 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:33,187 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [311 Valid, 298 Invalid, 1566 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 1433 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 21:11:33,188 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 747 states. [2022-11-18 21:11:33,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 747 to 714. [2022-11-18 21:11:33,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 714 states, 554 states have (on average 1.1732851985559567) internal successors, (650), 588 states have internal predecessors, (650), 81 states have call successors, (81), 62 states have call predecessors, (81), 78 states have return successors, (117), 82 states have call predecessors, (117), 81 states have call successors, (117) [2022-11-18 21:11:33,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 714 states to 714 states and 848 transitions. [2022-11-18 21:11:33,267 INFO L78 Accepts]: Start accepts. Automaton has 714 states and 848 transitions. Word has length 59 [2022-11-18 21:11:33,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:33,267 INFO L495 AbstractCegarLoop]: Abstraction has 714 states and 848 transitions. [2022-11-18 21:11:33,268 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.0) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 21:11:33,268 INFO L276 IsEmpty]: Start isEmpty. Operand 714 states and 848 transitions. [2022-11-18 21:11:33,271 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-11-18 21:11:33,271 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:11:33,272 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:33,272 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-18 21:11:33,272 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:11:33,273 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:11:33,273 INFO L85 PathProgramCache]: Analyzing trace with hash 486604430, now seen corresponding path program 1 times [2022-11-18 21:11:33,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:11:33,273 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790271158] [2022-11-18 21:11:33,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:33,274 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:11:33,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 21:11:33,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-18 21:11:33,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 21:11:33,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 21:11:33,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 21:11:33,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-18 21:11:33,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,404 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-18 21:11:33,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:11:33,404 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790271158] [2022-11-18 21:11:33,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790271158] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:11:33,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1074323036] [2022-11-18 21:11:33,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:11:33,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:11:33,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:11:33,407 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:11:33,428 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 21:11:33,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:11:33,506 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-18 21:11:33,510 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:11:33,729 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-18 21:11:33,729 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:11:34,075 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-18 21:11:34,075 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1074323036] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:11:34,075 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 21:11:34,076 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2022-11-18 21:11:34,076 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065394281] [2022-11-18 21:11:34,076 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 21:11:34,077 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-18 21:11:34,077 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:11:34,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-18 21:11:34,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2022-11-18 21:11:34,078 INFO L87 Difference]: Start difference. First operand 714 states and 848 transitions. Second operand has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-18 21:11:35,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:11:35,240 INFO L93 Difference]: Finished difference Result 1453 states and 1801 transitions. [2022-11-18 21:11:35,240 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-18 21:11:35,241 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 87 [2022-11-18 21:11:35,241 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:11:35,242 INFO L225 Difference]: With dead ends: 1453 [2022-11-18 21:11:35,242 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 21:11:35,246 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 184 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 376 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=628, Invalid=1442, Unknown=0, NotChecked=0, Total=2070 [2022-11-18 21:11:35,247 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 455 mSDsluCounter, 548 mSDsCounter, 0 mSdLazyCounter, 814 mSolverCounterSat, 156 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 457 SdHoareTripleChecker+Valid, 641 SdHoareTripleChecker+Invalid, 970 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 156 IncrementalHoareTripleChecker+Valid, 814 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-18 21:11:35,247 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [457 Valid, 641 Invalid, 970 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [156 Valid, 814 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-18 21:11:35,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 21:11:35,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 21:11:35,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 21:11:35,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 21:11:35,249 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2022-11-18 21:11:35,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:11:35,249 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 21:11:35,249 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.235294117647059) internal successors, (123), 13 states have internal predecessors, (123), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-18 21:11:35,249 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 21:11:35,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 21:11:35,252 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 21:11:35,267 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-18 21:11:35,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-18 21:11:35,460 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 21:11:43,940 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 641 647) no Hoare annotation was computed. [2022-11-18 21:11:43,940 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 641 647) the Hoare annotation is: true [2022-11-18 21:11:43,941 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 450 461) the Hoare annotation is: (let ((.cse7 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse4 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (<= 0 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse7 .cse8 .cse2) (or .cse0 .cse7 .cse1 .cse8 .cse2) (or .cse6 .cse0 .cse2 .cse3 .cse4 .cse5))) [2022-11-18 21:11:43,941 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 450 461) no Hoare annotation was computed. [2022-11-18 21:11:43,941 INFO L899 garLoopResultBuilder]: For program point L454-1(lines 450 461) no Hoare annotation was computed. [2022-11-18 21:11:43,941 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 896 925) no Hoare annotation was computed. [2022-11-18 21:11:43,941 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 896 925) the Hoare annotation is: true [2022-11-18 21:11:43,942 INFO L902 garLoopResultBuilder]: At program point L921(lines 896 925) the Hoare annotation is: true [2022-11-18 21:11:43,942 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2022-11-18 21:11:43,942 INFO L899 garLoopResultBuilder]: For program point L910(lines 910 914) no Hoare annotation was computed. [2022-11-18 21:11:43,942 INFO L902 garLoopResultBuilder]: At program point L910-1(lines 910 914) the Hoare annotation is: true [2022-11-18 21:11:43,942 INFO L899 garLoopResultBuilder]: For program point L907(line 907) no Hoare annotation was computed. [2022-11-18 21:11:43,942 INFO L902 garLoopResultBuilder]: At program point L906-2(lines 906 920) the Hoare annotation is: true [2022-11-18 21:11:43,942 INFO L902 garLoopResultBuilder]: At program point L902(line 902) the Hoare annotation is: true [2022-11-18 21:11:43,942 INFO L899 garLoopResultBuilder]: For program point L902-1(line 902) no Hoare annotation was computed. [2022-11-18 21:11:43,942 INFO L899 garLoopResultBuilder]: For program point L576(lines 576 596) no Hoare annotation was computed. [2022-11-18 21:11:43,943 INFO L899 garLoopResultBuilder]: For program point L605(line 605) no Hoare annotation was computed. [2022-11-18 21:11:43,943 INFO L895 garLoopResultBuilder]: At program point L824(lines 809 827) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-18 21:11:43,943 INFO L895 garLoopResultBuilder]: At program point L750(lines 745 753) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2))) [2022-11-18 21:11:43,944 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 617 640) no Hoare annotation was computed. [2022-11-18 21:11:43,944 INFO L895 garLoopResultBuilder]: At program point L606(lines 601 608) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-18 21:11:43,944 INFO L895 garLoopResultBuilder]: At program point L499(lines 494 502) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (<= |timeShift_getWaterLevel_#res#1| 1))) (and (let ((.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6 .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (= |timeShift_processEnvironment_~tmp~5#1| 0) .cse4 .cse5))) (or .cse8 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse6 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse2 .cse3 .cse9) .cse8 .cse0 .cse6 (and (<= 1 ~pumpRunning~0) .cse9) .cse7)) (or .cse0 .cse1 .cse10 .cse7) (or .cse8 .cse0 .cse10 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse8 .cse0 .cse6 .cse5))) [2022-11-18 21:11:43,945 INFO L895 garLoopResultBuilder]: At program point L689(line 689) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (= |timeShift_processEnvironment_~tmp~5#1| 0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2))) [2022-11-18 21:11:43,945 INFO L899 garLoopResultBuilder]: For program point L586(lines 586 592) no Hoare annotation was computed. [2022-11-18 21:11:43,945 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 595) no Hoare annotation was computed. [2022-11-18 21:11:43,945 INFO L895 garLoopResultBuilder]: At program point L582-1(lines 567 599) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~3#1| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 1)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse11 (<= 1 ~pumpRunning~0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse4 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (= |timeShift_processEnvironment_~tmp~5#1| 0) .cse4) .cse6)) (or .cse7 .cse0 (and .cse2 .cse8 .cse9) .cse10 .cse6 (and .cse11 .cse8 .cse9)) (or .cse0 .cse1 .cse10 .cse9 .cse6) (or (and .cse2 .cse3 .cse8) .cse7 .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse5 (and .cse11 .cse8) .cse6))) [2022-11-18 21:11:43,946 INFO L895 garLoopResultBuilder]: At program point L574(line 574) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse2)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 .cse5) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse6 .cse7) .cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (= |timeShift_processEnvironment_~tmp~5#1| 0) .cse7) .cse5)) (or (and .cse1 .cse6 .cse2) .cse0 .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse8 .cse4 .cse5)))) [2022-11-18 21:11:43,946 INFO L899 garLoopResultBuilder]: For program point L574-1(line 574) no Hoare annotation was computed. [2022-11-18 21:11:43,946 INFO L895 garLoopResultBuilder]: At program point L731(lines 726 733) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1 .cse2))) [2022-11-18 21:11:43,946 INFO L895 garLoopResultBuilder]: At program point L694(line 694) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2))) [2022-11-18 21:11:43,947 INFO L895 garLoopResultBuilder]: At program point L694-1(lines 675 699) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (and (<= 1 ~pumpRunning~0) .cse2)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 .cse5) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 (not (<= 1 |old(~pumpRunning~0)|)) (and .cse1 .cse6 .cse7) .cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (= |timeShift_processEnvironment_~tmp~5#1| 0) .cse7) .cse5)) (or (and .cse1 .cse6 .cse2) .cse0 .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse8 .cse4 .cse5)))) [2022-11-18 21:11:43,947 INFO L899 garLoopResultBuilder]: For program point L628-1(lines 628 634) no Hoare annotation was computed. [2022-11-18 21:11:43,947 INFO L899 garLoopResultBuilder]: For program point L818(lines 818 822) no Hoare annotation was computed. [2022-11-18 21:11:43,947 INFO L899 garLoopResultBuilder]: For program point L818-2(lines 818 822) no Hoare annotation was computed. [2022-11-18 21:11:43,947 INFO L899 garLoopResultBuilder]: For program point L430(lines 430 434) no Hoare annotation was computed. [2022-11-18 21:11:43,947 INFO L895 garLoopResultBuilder]: At program point L430-2(lines 426 437) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-18 21:11:43,948 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 617 640) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2 .cse3))) [2022-11-18 21:11:43,948 INFO L899 garLoopResultBuilder]: For program point L621-1(lines 620 639) no Hoare annotation was computed. [2022-11-18 21:11:43,948 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 691) no Hoare annotation was computed. [2022-11-18 21:11:43,948 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 617 640) no Hoare annotation was computed. [2022-11-18 21:11:43,948 INFO L895 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-18 21:11:43,949 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 605) no Hoare annotation was computed. [2022-11-18 21:11:43,949 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 696) no Hoare annotation was computed. [2022-11-18 21:11:43,949 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 462 470) the Hoare annotation is: true [2022-11-18 21:11:43,949 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 462 470) no Hoare annotation was computed. [2022-11-18 21:11:43,949 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 462 470) no Hoare annotation was computed. [2022-11-18 21:11:43,949 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 887) the Hoare annotation is: false [2022-11-18 21:11:43,950 INFO L899 garLoopResultBuilder]: For program point L977(lines 977 984) no Hoare annotation was computed. [2022-11-18 21:11:43,950 INFO L895 garLoopResultBuilder]: At program point L560(lines 555 563) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 21:11:43,950 INFO L899 garLoopResultBuilder]: For program point L977-2(lines 977 984) no Hoare annotation was computed. [2022-11-18 21:11:43,950 INFO L899 garLoopResultBuilder]: For program point L841(lines 840 885) no Hoare annotation was computed. [2022-11-18 21:11:43,950 INFO L895 garLoopResultBuilder]: At program point L552(lines 548 554) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 21:11:43,950 INFO L899 garLoopResultBuilder]: For program point L870(lines 870 881) no Hoare annotation was computed. [2022-11-18 21:11:43,951 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 21:11:43,951 INFO L895 garLoopResultBuilder]: At program point L862(line 862) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-18 21:11:43,951 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 21:11:43,951 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 21:11:43,951 INFO L902 garLoopResultBuilder]: At program point L986(lines 967 989) the Hoare annotation is: true [2022-11-18 21:11:43,951 INFO L895 garLoopResultBuilder]: At program point L883(lines 840 885) the Hoare annotation is: (let ((.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3 .cse4 .cse5) (and (<= 1 ~pumpRunning~0) .cse1 .cse2 .cse3 .cse6 .cse4 .cse5) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse6 .cse5))) [2022-11-18 21:11:43,952 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 856) no Hoare annotation was computed. [2022-11-18 21:11:43,952 INFO L899 garLoopResultBuilder]: For program point L850-1(lines 850 856) no Hoare annotation was computed. [2022-11-18 21:11:43,952 INFO L899 garLoopResultBuilder]: For program point L842(lines 842 846) no Hoare annotation was computed. [2022-11-18 21:11:43,952 INFO L895 garLoopResultBuilder]: At program point L545(lines 541 547) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 21:11:43,952 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 21:11:43,952 INFO L895 garLoopResultBuilder]: At program point L954(lines 950 956) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-11-18 21:11:43,953 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2022-11-18 21:11:43,953 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 870 881) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-18 21:11:43,953 INFO L899 garLoopResultBuilder]: For program point L860(lines 860 866) no Hoare annotation was computed. [2022-11-18 21:11:43,953 INFO L899 garLoopResultBuilder]: For program point L860-1(lines 860 866) no Hoare annotation was computed. [2022-11-18 21:11:43,953 INFO L902 garLoopResultBuilder]: At program point L889(lines 830 893) the Hoare annotation is: true [2022-11-18 21:11:43,954 INFO L895 garLoopResultBuilder]: At program point L852(line 852) the Hoare annotation is: (let ((.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= ~waterLevel~0 2)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 .cse3 .cse4 .cse5) (and (<= 1 ~pumpRunning~0) .cse1 .cse2 .cse3 .cse6 .cse4 .cse5) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse6 .cse5))) [2022-11-18 21:11:43,954 INFO L902 garLoopResultBuilder]: At program point L964(lines 957 966) the Hoare annotation is: true [2022-11-18 21:11:43,954 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 649 673) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2)) .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= ~waterLevel~0 1))))) [2022-11-18 21:11:43,954 INFO L895 garLoopResultBuilder]: At program point L512(lines 503 516) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (<= ~waterLevel~0 1))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse2 (and .cse1 .cse3))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not .cse3)))) [2022-11-18 21:11:43,954 INFO L899 garLoopResultBuilder]: For program point L799(lines 799 803) no Hoare annotation was computed. [2022-11-18 21:11:43,955 INFO L899 garLoopResultBuilder]: For program point L799-2(lines 799 803) no Hoare annotation was computed. [2022-11-18 21:11:43,955 INFO L895 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) .cse1 (and (= ~pumpRunning~0 0) .cse2)))) [2022-11-18 21:11:43,955 INFO L899 garLoopResultBuilder]: For program point L657(lines 657 665) no Hoare annotation was computed. [2022-11-18 21:11:43,955 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 670) no Hoare annotation was computed. [2022-11-18 21:11:43,955 INFO L895 garLoopResultBuilder]: At program point L705(lines 700 707) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse12 (not (<= ~waterLevel~0 2))) (.cse3 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not .cse2)) (let ((.cse4 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or (and .cse3 .cse2 .cse4 .cse5) .cse6 .cse0 (and .cse3 .cse7 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11) (not (<= ~methaneLevelCritical~0 0)) .cse12 .cse1)) (or .cse6 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 (and .cse3 .cse2)))) [2022-11-18 21:11:43,956 INFO L895 garLoopResultBuilder]: At program point L668(line 668) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not (<= ~waterLevel~0 1))))) [2022-11-18 21:11:43,956 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 649 673) no Hoare annotation was computed. [2022-11-18 21:11:43,956 INFO L899 garLoopResultBuilder]: For program point L507(lines 507 513) no Hoare annotation was computed. [2022-11-18 21:11:43,956 INFO L899 garLoopResultBuilder]: For program point L668-1(lines 649 673) no Hoare annotation was computed. [2022-11-18 21:11:43,956 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 722) no Hoare annotation was computed. [2022-11-18 21:11:43,957 INFO L895 garLoopResultBuilder]: At program point L716-2(lines 709 725) the Hoare annotation is: (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (.cse5 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse9 (not (<= ~waterLevel~0 2))) (.cse10 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and (= ~pumpRunning~0 0) .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse0)) (or .cse2 (not (<= 1 |old(~pumpRunning~0)|)) .cse10 (not .cse0)) (let ((.cse11 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or (and .cse3 .cse0 .cse11 .cse12) .cse1 .cse2 (and .cse3 .cse4 .cse11 .cse12 .cse5 .cse6 .cse7 .cse8) (not (<= ~methaneLevelCritical~0 0)) .cse9 .cse10)))) [2022-11-18 21:11:43,957 INFO L895 garLoopResultBuilder]: At program point L805(lines 790 808) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (<= ~waterLevel~0 1))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= ~waterLevel~0 2)) .cse2 (and .cse0 .cse3))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2 (not .cse3)))) [2022-11-18 21:11:43,957 INFO L895 garLoopResultBuilder]: At program point L741(lines 734 744) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse10 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|)) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not .cse2)) (or (and .cse3 .cse2) .cse4 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)) (let ((.cse12 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or .cse4 (and .cse6 .cse7 .cse12 .cse8 .cse9 .cse10 .cse11) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse5 .cse1 (and .cse3 .cse2 .cse12))))) [2022-11-18 21:11:43,958 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1 (not .cse2)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))))) [2022-11-18 21:11:43,958 INFO L899 garLoopResultBuilder]: For program point L739-1(line 739) no Hoare annotation was computed. [2022-11-18 21:11:43,958 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 438 449) no Hoare annotation was computed. [2022-11-18 21:11:43,958 INFO L899 garLoopResultBuilder]: For program point L442-1(lines 438 449) no Hoare annotation was computed. [2022-11-18 21:11:43,958 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 438 449) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse4 .cse2) (or .cse1 (not (<= 1 ~pumpRunning~0)) .cse4 .cse2 .cse3))) [2022-11-18 21:11:43,962 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:11:43,964 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 21:11:43,994 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 09:11:43 BoogieIcfgContainer [2022-11-18 21:11:43,995 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 21:11:43,995 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 21:11:43,995 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 21:11:43,996 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 21:11:43,996 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:11:25" (3/4) ... [2022-11-18 21:11:43,999 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 21:11:44,005 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 21:11:44,006 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 21:11:44,006 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 21:11:44,006 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 21:11:44,006 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 21:11:44,007 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 21:11:44,007 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 21:11:44,013 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-18 21:11:44,014 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 21:11:44,014 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 21:11:44,015 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:11:44,015 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:11:44,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-11-18 21:11:44,040 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && tmp == 1 [2022-11-18 21:11:44,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) || ((((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && tmp == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) [2022-11-18 21:11:44,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,042 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && !(tmp == 0)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0))) && ((((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == 0 && tmp == 0) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && \result == methaneLevelCritical)) [2022-11-18 21:11:44,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \result == 1)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \result <= 1) [2022-11-18 21:11:44,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) [2022-11-18 21:11:44,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || (1 <= pumpRunning && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) [2022-11-18 21:11:44,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && waterLevel <= 1)) [2022-11-18 21:11:44,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-11-18 21:11:44,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) [2022-11-18 21:11:44,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:11:44,069 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 21:11:44,070 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 21:11:44,070 INFO L158 Benchmark]: Toolchain (without parser) took 20063.36ms. Allocated memory was 132.1MB in the beginning and 232.8MB in the end (delta: 100.7MB). Free memory was 92.5MB in the beginning and 112.2MB in the end (delta: -19.7MB). Peak memory consumption was 81.9MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,071 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 132.1MB. Free memory was 109.7MB in the beginning and 109.6MB in the end (delta: 118.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:11:44,071 INFO L158 Benchmark]: CACSL2BoogieTranslator took 603.71ms. Allocated memory is still 132.1MB. Free memory was 92.3MB in the beginning and 96.5MB in the end (delta: -4.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,071 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.71ms. Allocated memory is still 132.1MB. Free memory was 96.5MB in the beginning and 94.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,072 INFO L158 Benchmark]: Boogie Preprocessor took 31.94ms. Allocated memory is still 132.1MB. Free memory was 94.4MB in the beginning and 92.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:11:44,072 INFO L158 Benchmark]: RCFGBuilder took 690.16ms. Allocated memory is still 132.1MB. Free memory was 92.3MB in the beginning and 75.5MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,072 INFO L158 Benchmark]: TraceAbstraction took 18604.67ms. Allocated memory was 132.1MB in the beginning and 232.8MB in the end (delta: 100.7MB). Free memory was 74.4MB in the beginning and 118.5MB in the end (delta: -44.1MB). Peak memory consumption was 85.5MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,073 INFO L158 Benchmark]: Witness Printer took 74.36ms. Allocated memory is still 232.8MB. Free memory was 118.5MB in the beginning and 112.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 21:11:44,075 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 132.1MB. Free memory was 109.7MB in the beginning and 109.6MB in the end (delta: 118.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 603.71ms. Allocated memory is still 132.1MB. Free memory was 92.3MB in the beginning and 96.5MB in the end (delta: -4.2MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.71ms. Allocated memory is still 132.1MB. Free memory was 96.5MB in the beginning and 94.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.94ms. Allocated memory is still 132.1MB. Free memory was 94.4MB in the beginning and 92.9MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 690.16ms. Allocated memory is still 132.1MB. Free memory was 92.3MB in the beginning and 75.5MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 18604.67ms. Allocated memory was 132.1MB in the beginning and 232.8MB in the end (delta: 100.7MB). Free memory was 74.4MB in the beginning and 118.5MB in the end (delta: -44.1MB). Peak memory consumption was 85.5MB. Max. memory is 16.1GB. * Witness Printer took 74.36ms. Allocated memory is still 232.8MB. Free memory was 118.5MB in the beginning and 112.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 605]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.5s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2120 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2099 mSDsluCounter, 4201 SdHoareTripleChecker+Invalid, 2.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3110 mSDsCounter, 614 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4034 IncrementalHoareTripleChecker+Invalid, 4648 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 614 mSolverCounterUnsat, 1091 mSDtfsCounter, 4034 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 497 GetRequests, 324 SyntacticMatches, 8 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 797 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=790occurred in iteration=9, InterpolantAutomatonStates: 144, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 244 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2198 PreInvPairs, 2670 NumberOfFragments, 2083 HoareAnnotationTreeSize, 2198 FomulaSimplifications, 3498 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 43 FomulaSimplificationsInter, 24761 FormulaSimplificationTreeSizeReductionInter, 7.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 714 NumberOfCodeBlocks, 714 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 786 ConstructedInterpolants, 0 QuantifiedInterpolants, 1770 SizeOfPredicates, 8 NumberOfNonLiveVariables, 552 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 71/90 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 426]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && !(tmp == 0)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(tmp == 0)) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && tmp == 1) || ((((((1 <= pumpRunning && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && tmp == 1)) || ((((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == 1) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) || (1 <= pumpRunning && waterLevel <= 1)) - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 548]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \result == 1)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \result <= 1) - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 601]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(waterLevel <= 2)) || (((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0))) && ((((((!(\old(pumpRunning) == 0) || ((((((pumpRunning == 0 && tmp == 0) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && \result == methaneLevelCritical)) - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 809]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 745]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && !(\result == 0)) && \old(waterLevel) == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 950]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((((1 <= pumpRunning && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) || (((((pumpRunning == 0 && tmp == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || (1 <= pumpRunning && waterLevel <= 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((((((((1 <= pumpRunning && waterLevel <= 1) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && tmp == 0) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) && 1 <= \result) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: 0 RESULT: Ultimate proved your program to be correct! [2022-11-18 21:11:44,115 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bb3c1255-aef0-4ff8-a3b1-620760f41614/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE