./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 11:08:03,461 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 11:08:03,463 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 11:08:03,492 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 11:08:03,495 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 11:08:03,499 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 11:08:03,501 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 11:08:03,505 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 11:08:03,507 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 11:08:03,509 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 11:08:03,510 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 11:08:03,511 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 11:08:03,512 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 11:08:03,513 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 11:08:03,514 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 11:08:03,515 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 11:08:03,516 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 11:08:03,517 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 11:08:03,519 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 11:08:03,520 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 11:08:03,522 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 11:08:03,523 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 11:08:03,524 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 11:08:03,525 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 11:08:03,528 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 11:08:03,529 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 11:08:03,529 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 11:08:03,530 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 11:08:03,530 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 11:08:03,531 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 11:08:03,532 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 11:08:03,533 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 11:08:03,533 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 11:08:03,535 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 11:08:03,536 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 11:08:03,537 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 11:08:03,538 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 11:08:03,539 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 11:08:03,539 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 11:08:03,541 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 11:08:03,541 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 11:08:03,542 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 11:08:03,576 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 11:08:03,579 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 11:08:03,579 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 11:08:03,580 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 11:08:03,581 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 11:08:03,581 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 11:08:03,582 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 11:08:03,582 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 11:08:03,582 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 11:08:03,582 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 11:08:03,584 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 11:08:03,584 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 11:08:03,584 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 11:08:03,584 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 11:08:03,584 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 11:08:03,585 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 11:08:03,585 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 11:08:03,585 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 11:08:03,585 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 11:08:03,585 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 11:08:03,586 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 11:08:03,586 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 11:08:03,586 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 11:08:03,586 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 11:08:03,587 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:08:03,587 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 11:08:03,587 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 11:08:03,587 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 11:08:03,587 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 11:08:03,588 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 11:08:03,588 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 11:08:03,588 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 11:08:03,589 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 11:08:03,589 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b [2022-11-20 11:08:03,876 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 11:08:03,898 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 11:08:03,901 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 11:08:03,903 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 11:08:03,903 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 11:08:03,904 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2022-11-20 11:08:06,919 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 11:08:07,161 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 11:08:07,161 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2022-11-20 11:08:07,172 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/data/362ecf0a8/e560dc5ded7e4af0ae312573c168a8ce/FLAG86398b332 [2022-11-20 11:08:07,189 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/data/362ecf0a8/e560dc5ded7e4af0ae312573c168a8ce [2022-11-20 11:08:07,195 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 11:08:07,197 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 11:08:07,202 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 11:08:07,202 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 11:08:07,206 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 11:08:07,207 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,208 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@841b16e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07, skipping insertion in model container [2022-11-20 11:08:07,209 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,217 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 11:08:07,279 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 11:08:07,538 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2022-11-20 11:08:07,649 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:08:07,661 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 11:08:07,700 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2022-11-20 11:08:07,743 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:08:07,760 INFO L208 MainTranslator]: Completed translation [2022-11-20 11:08:07,761 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07 WrapperNode [2022-11-20 11:08:07,761 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 11:08:07,762 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 11:08:07,762 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 11:08:07,762 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 11:08:07,770 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,797 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,837 INFO L138 Inliner]: procedures = 58, calls = 106, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 217 [2022-11-20 11:08:07,838 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 11:08:07,839 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 11:08:07,839 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 11:08:07,839 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 11:08:07,849 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,849 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,861 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,870 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,874 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,893 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,895 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,896 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,898 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 11:08:07,899 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 11:08:07,899 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 11:08:07,899 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 11:08:07,900 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (1/1) ... [2022-11-20 11:08:07,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:08:07,922 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:08:07,937 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 11:08:07,965 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 11:08:07,988 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 11:08:07,988 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 11:08:07,988 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 11:08:07,989 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 11:08:07,989 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 11:08:07,990 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 11:08:07,990 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 11:08:07,991 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 11:08:07,992 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 11:08:07,992 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:08:07,992 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:08:07,992 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 11:08:07,993 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 11:08:07,993 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:08:07,993 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:08:07,993 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 11:08:07,993 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 11:08:07,994 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 11:08:07,994 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 11:08:07,994 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 11:08:07,994 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 11:08:07,994 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 11:08:07,995 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 11:08:07,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 11:08:08,102 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 11:08:08,104 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 11:08:08,412 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 11:08:08,419 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 11:08:08,419 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 11:08:08,421 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:08:08 BoogieIcfgContainer [2022-11-20 11:08:08,421 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 11:08:08,436 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 11:08:08,436 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 11:08:08,439 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 11:08:08,440 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 11:08:07" (1/3) ... [2022-11-20 11:08:08,440 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d778953 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:08:08, skipping insertion in model container [2022-11-20 11:08:08,441 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:08:07" (2/3) ... [2022-11-20 11:08:08,441 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d778953 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:08:08, skipping insertion in model container [2022-11-20 11:08:08,441 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:08:08" (3/3) ... [2022-11-20 11:08:08,445 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product63.cil.c [2022-11-20 11:08:08,468 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 11:08:08,468 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 11:08:08,562 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 11:08:08,572 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2a6835b4, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 11:08:08,573 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 11:08:08,577 INFO L276 IsEmpty]: Start isEmpty. Operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-20 11:08:08,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-20 11:08:08,590 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:08,591 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:08,592 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:08,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:08,601 INFO L85 PathProgramCache]: Analyzing trace with hash 155128550, now seen corresponding path program 1 times [2022-11-20 11:08:08,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:08,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948389785] [2022-11-20 11:08:08,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:08,613 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:08,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:08,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 11:08:08,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:08,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:08:08,884 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:08,884 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948389785] [2022-11-20 11:08:08,885 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948389785] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:08,885 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:08,886 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 11:08:08,887 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37661653] [2022-11-20 11:08:08,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:08,892 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 11:08:08,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:08,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 11:08:08,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:08:08,936 INFO L87 Difference]: Start difference. First operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:09,000 INFO L93 Difference]: Finished difference Result 216 states and 293 transitions. [2022-11-20 11:08:09,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 11:08:09,003 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-20 11:08:09,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:09,037 INFO L225 Difference]: With dead ends: 216 [2022-11-20 11:08:09,037 INFO L226 Difference]: Without dead ends: 103 [2022-11-20 11:08:09,040 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:08:09,044 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:09,045 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:08:09,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2022-11-20 11:08:09,085 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 103. [2022-11-20 11:08:09,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-20 11:08:09,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 134 transitions. [2022-11-20 11:08:09,090 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 134 transitions. Word has length 23 [2022-11-20 11:08:09,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:09,091 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 134 transitions. [2022-11-20 11:08:09,092 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,092 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 134 transitions. [2022-11-20 11:08:09,094 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-20 11:08:09,094 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:09,095 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:09,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 11:08:09,095 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:09,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:09,096 INFO L85 PathProgramCache]: Analyzing trace with hash -389594040, now seen corresponding path program 1 times [2022-11-20 11:08:09,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:09,097 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101195309] [2022-11-20 11:08:09,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:09,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:09,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 11:08:09,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,198 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:08:09,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:09,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2101195309] [2022-11-20 11:08:09,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2101195309] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:09,198 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:09,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 11:08:09,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [664966300] [2022-11-20 11:08:09,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:09,200 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:08:09,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:09,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:08:09,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:08:09,209 INFO L87 Difference]: Start difference. First operand 103 states and 134 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:09,240 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2022-11-20 11:08:09,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:08:09,242 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-20 11:08:09,242 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:09,244 INFO L225 Difference]: With dead ends: 168 [2022-11-20 11:08:09,244 INFO L226 Difference]: Without dead ends: 94 [2022-11-20 11:08:09,251 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:08:09,252 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 16 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:09,253 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:08:09,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-20 11:08:09,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-11-20 11:08:09,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 11:08:09,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-11-20 11:08:09,267 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 24 [2022-11-20 11:08:09,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:09,267 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-11-20 11:08:09,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,267 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-11-20 11:08:09,269 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-20 11:08:09,269 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:09,269 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:09,269 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 11:08:09,269 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:09,272 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:09,272 INFO L85 PathProgramCache]: Analyzing trace with hash -2116148500, now seen corresponding path program 1 times [2022-11-20 11:08:09,272 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:09,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003381985] [2022-11-20 11:08:09,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:09,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:09,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:08:09,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:08:09,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:09,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003381985] [2022-11-20 11:08:09,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003381985] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:09,451 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:09,451 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 11:08:09,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462792882] [2022-11-20 11:08:09,452 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:09,452 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:08:09,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:09,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:08:09,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:08:09,454 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:09,489 INFO L93 Difference]: Finished difference Result 267 states and 352 transitions. [2022-11-20 11:08:09,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:08:09,490 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-20 11:08:09,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:09,492 INFO L225 Difference]: With dead ends: 267 [2022-11-20 11:08:09,492 INFO L226 Difference]: Without dead ends: 180 [2022-11-20 11:08:09,493 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:08:09,494 INFO L413 NwaCegarLoop]: 153 mSDtfsCounter, 102 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:09,495 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 265 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:08:09,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2022-11-20 11:08:09,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 177. [2022-11-20 11:08:09,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2022-11-20 11:08:09,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 233 transitions. [2022-11-20 11:08:09,522 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 233 transitions. Word has length 28 [2022-11-20 11:08:09,523 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:09,523 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 233 transitions. [2022-11-20 11:08:09,523 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,523 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 233 transitions. [2022-11-20 11:08:09,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 11:08:09,525 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:09,526 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:09,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 11:08:09,526 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:09,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:09,527 INFO L85 PathProgramCache]: Analyzing trace with hash -1322411102, now seen corresponding path program 1 times [2022-11-20 11:08:09,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:09,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [731744783] [2022-11-20 11:08:09,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:09,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:09,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:08:09,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:09,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:08:09,675 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:09,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [731744783] [2022-11-20 11:08:09,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [731744783] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:09,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:09,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 11:08:09,676 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1209172251] [2022-11-20 11:08:09,676 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:09,677 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 11:08:09,677 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:09,677 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 11:08:09,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 11:08:09,678 INFO L87 Difference]: Start difference. First operand 177 states and 233 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:09,795 INFO L93 Difference]: Finished difference Result 461 states and 620 transitions. [2022-11-20 11:08:09,796 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-20 11:08:09,796 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-20 11:08:09,797 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:09,799 INFO L225 Difference]: With dead ends: 461 [2022-11-20 11:08:09,799 INFO L226 Difference]: Without dead ends: 291 [2022-11-20 11:08:09,801 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:08:09,802 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 75 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:09,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 456 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 11:08:09,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-11-20 11:08:09,839 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 278. [2022-11-20 11:08:09,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 201 states have (on average 1.2885572139303483) internal successors, (259), 220 states have internal predecessors, (259), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2022-11-20 11:08:09,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 355 transitions. [2022-11-20 11:08:09,843 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 355 transitions. Word has length 32 [2022-11-20 11:08:09,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:09,844 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 355 transitions. [2022-11-20 11:08:09,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 11:08:09,844 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 355 transitions. [2022-11-20 11:08:09,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 11:08:09,846 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:09,847 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:09,847 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 11:08:09,847 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:09,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:09,848 INFO L85 PathProgramCache]: Analyzing trace with hash -1980945601, now seen corresponding path program 1 times [2022-11-20 11:08:09,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:09,849 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277088270] [2022-11-20 11:08:09,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:09,849 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:09,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:08:10,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:10,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:10,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:10,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-20 11:08:10,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,118 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:08:10,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:10,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277088270] [2022-11-20 11:08:10,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277088270] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:10,119 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:10,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 11:08:10,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2042619970] [2022-11-20 11:08:10,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:10,121 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 11:08:10,121 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:10,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 11:08:10,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 11:08:10,122 INFO L87 Difference]: Start difference. First operand 278 states and 355 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 11:08:10,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:10,370 INFO L93 Difference]: Finished difference Result 619 states and 814 transitions. [2022-11-20 11:08:10,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 11:08:10,371 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-20 11:08:10,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:10,374 INFO L225 Difference]: With dead ends: 619 [2022-11-20 11:08:10,374 INFO L226 Difference]: Without dead ends: 348 [2022-11-20 11:08:10,377 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 11:08:10,378 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 76 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:10,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 388 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:08:10,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2022-11-20 11:08:10,416 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 336. [2022-11-20 11:08:10,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 336 states, 245 states have (on average 1.2612244897959184) internal successors, (309), 264 states have internal predecessors, (309), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-20 11:08:10,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 423 transitions. [2022-11-20 11:08:10,420 INFO L78 Accepts]: Start accepts. Automaton has 336 states and 423 transitions. Word has length 59 [2022-11-20 11:08:10,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:10,421 INFO L495 AbstractCegarLoop]: Abstraction has 336 states and 423 transitions. [2022-11-20 11:08:10,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 11:08:10,421 INFO L276 IsEmpty]: Start isEmpty. Operand 336 states and 423 transitions. [2022-11-20 11:08:10,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 11:08:10,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:10,424 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:10,424 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 11:08:10,424 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:10,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:10,425 INFO L85 PathProgramCache]: Analyzing trace with hash -1706185987, now seen corresponding path program 1 times [2022-11-20 11:08:10,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:10,425 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680486673] [2022-11-20 11:08:10,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:10,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:10,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:08:10,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:10,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:10,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:10,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-20 11:08:10,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,581 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:08:10,581 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:10,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680486673] [2022-11-20 11:08:10,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680486673] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:10,582 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:10,582 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 11:08:10,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557191053] [2022-11-20 11:08:10,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:10,583 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 11:08:10,583 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:10,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 11:08:10,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 11:08:10,585 INFO L87 Difference]: Start difference. First operand 336 states and 423 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 11:08:10,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:10,830 INFO L93 Difference]: Finished difference Result 683 states and 886 transitions. [2022-11-20 11:08:10,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 11:08:10,831 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-20 11:08:10,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:10,835 INFO L225 Difference]: With dead ends: 683 [2022-11-20 11:08:10,835 INFO L226 Difference]: Without dead ends: 354 [2022-11-20 11:08:10,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:08:10,847 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 80 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:10,850 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 302 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:08:10,851 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2022-11-20 11:08:10,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 340. [2022-11-20 11:08:10,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 249 states have (on average 1.2570281124497993) internal successors, (313), 268 states have internal predecessors, (313), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2022-11-20 11:08:10,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 427 transitions. [2022-11-20 11:08:10,894 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 427 transitions. Word has length 59 [2022-11-20 11:08:10,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:10,894 INFO L495 AbstractCegarLoop]: Abstraction has 340 states and 427 transitions. [2022-11-20 11:08:10,895 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 11:08:10,895 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 427 transitions. [2022-11-20 11:08:10,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 11:08:10,897 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:10,897 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:10,898 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 11:08:10,898 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:10,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:10,899 INFO L85 PathProgramCache]: Analyzing trace with hash 344798011, now seen corresponding path program 1 times [2022-11-20 11:08:10,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:10,899 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016252127] [2022-11-20 11:08:10,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:10,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:10,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:10,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:08:10,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,011 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:11,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:11,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:11,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-20 11:08:11,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,061 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 11:08:11,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:11,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016252127] [2022-11-20 11:08:11,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016252127] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:11,062 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:11,062 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 11:08:11,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1838176869] [2022-11-20 11:08:11,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:11,063 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 11:08:11,063 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:11,063 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 11:08:11,063 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 11:08:11,064 INFO L87 Difference]: Start difference. First operand 340 states and 427 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 11:08:11,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:11,412 INFO L93 Difference]: Finished difference Result 941 states and 1230 transitions. [2022-11-20 11:08:11,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 11:08:11,412 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2022-11-20 11:08:11,413 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:11,418 INFO L225 Difference]: With dead ends: 941 [2022-11-20 11:08:11,418 INFO L226 Difference]: Without dead ends: 608 [2022-11-20 11:08:11,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:08:11,424 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 245 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 279 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:11,429 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [253 Valid, 335 Invalid, 279 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 11:08:11,431 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2022-11-20 11:08:11,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 601. [2022-11-20 11:08:11,517 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 601 states, 442 states have (on average 1.2330316742081449) internal successors, (545), 470 states have internal predecessors, (545), 81 states have call successors, (81), 71 states have call predecessors, (81), 77 states have return successors, (133), 82 states have call predecessors, (133), 81 states have call successors, (133) [2022-11-20 11:08:11,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 601 states to 601 states and 759 transitions. [2022-11-20 11:08:11,525 INFO L78 Accepts]: Start accepts. Automaton has 601 states and 759 transitions. Word has length 59 [2022-11-20 11:08:11,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:11,529 INFO L495 AbstractCegarLoop]: Abstraction has 601 states and 759 transitions. [2022-11-20 11:08:11,530 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 11:08:11,530 INFO L276 IsEmpty]: Start isEmpty. Operand 601 states and 759 transitions. [2022-11-20 11:08:11,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-20 11:08:11,534 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:11,534 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:11,535 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 11:08:11,535 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:11,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:11,536 INFO L85 PathProgramCache]: Analyzing trace with hash 616558741, now seen corresponding path program 1 times [2022-11-20 11:08:11,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:11,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [350606988] [2022-11-20 11:08:11,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:11,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:11,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:08:11,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:08:11,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:11,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:11,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:11,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-20 11:08:11,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:11,838 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 11:08:11,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:11,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [350606988] [2022-11-20 11:08:11,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [350606988] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:11,839 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:11,839 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-20 11:08:11,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100281287] [2022-11-20 11:08:11,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:11,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 11:08:11,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:11,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 11:08:11,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-20 11:08:11,845 INFO L87 Difference]: Start difference. First operand 601 states and 759 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-20 11:08:12,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:12,802 INFO L93 Difference]: Finished difference Result 2059 states and 2701 transitions. [2022-11-20 11:08:12,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-20 11:08:12,803 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2022-11-20 11:08:12,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:12,811 INFO L225 Difference]: With dead ends: 2059 [2022-11-20 11:08:12,811 INFO L226 Difference]: Without dead ends: 1465 [2022-11-20 11:08:12,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 128 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2022-11-20 11:08:12,815 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 382 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 590 mSolverCounterSat, 170 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 390 SdHoareTripleChecker+Valid, 362 SdHoareTripleChecker+Invalid, 760 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 170 IncrementalHoareTripleChecker+Valid, 590 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:12,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [390 Valid, 362 Invalid, 760 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [170 Valid, 590 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-20 11:08:12,817 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1465 states. [2022-11-20 11:08:12,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1465 to 1357. [2022-11-20 11:08:12,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1357 states, 988 states have (on average 1.2044534412955465) internal successors, (1190), 1059 states have internal predecessors, (1190), 194 states have call successors, (194), 142 states have call predecessors, (194), 174 states have return successors, (352), 200 states have call predecessors, (352), 194 states have call successors, (352) [2022-11-20 11:08:12,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1357 states to 1357 states and 1736 transitions. [2022-11-20 11:08:12,938 INFO L78 Accepts]: Start accepts. Automaton has 1357 states and 1736 transitions. Word has length 63 [2022-11-20 11:08:12,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:12,938 INFO L495 AbstractCegarLoop]: Abstraction has 1357 states and 1736 transitions. [2022-11-20 11:08:12,939 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-20 11:08:12,939 INFO L276 IsEmpty]: Start isEmpty. Operand 1357 states and 1736 transitions. [2022-11-20 11:08:12,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-11-20 11:08:12,941 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:12,941 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:12,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 11:08:12,942 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:12,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:12,942 INFO L85 PathProgramCache]: Analyzing trace with hash 1067655569, now seen corresponding path program 1 times [2022-11-20 11:08:12,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:12,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1226493733] [2022-11-20 11:08:12,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:12,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:12,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:08:13,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-20 11:08:13,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 11:08:13,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:13,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:13,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:13,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-20 11:08:13,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,406 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 11:08:13,406 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:13,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1226493733] [2022-11-20 11:08:13,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1226493733] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:08:13,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [860650952] [2022-11-20 11:08:13,407 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:13,407 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:08:13,408 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:08:13,411 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:08:13,443 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 11:08:13,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:13,514 INFO L263 TraceCheckSpWp]: Trace formula consists of 254 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 11:08:13,521 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:08:13,759 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:08:13,759 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 11:08:13,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [860650952] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:13,760 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 11:08:13,760 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-11-20 11:08:13,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1456360745] [2022-11-20 11:08:13,760 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:13,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 11:08:13,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:13,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 11:08:13,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2022-11-20 11:08:13,762 INFO L87 Difference]: Start difference. First operand 1357 states and 1736 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-20 11:08:14,065 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:14,065 INFO L93 Difference]: Finished difference Result 2641 states and 3397 transitions. [2022-11-20 11:08:14,066 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 11:08:14,066 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 67 [2022-11-20 11:08:14,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:14,073 INFO L225 Difference]: With dead ends: 2641 [2022-11-20 11:08:14,073 INFO L226 Difference]: Without dead ends: 1291 [2022-11-20 11:08:14,077 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=56, Invalid=364, Unknown=0, NotChecked=0, Total=420 [2022-11-20 11:08:14,078 INFO L413 NwaCegarLoop]: 225 mSDtfsCounter, 87 mSDsluCounter, 598 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 823 SdHoareTripleChecker+Invalid, 204 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:14,079 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 823 Invalid, 204 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:08:14,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1291 states. [2022-11-20 11:08:14,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1291 to 1287. [2022-11-20 11:08:14,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1287 states, 934 states have (on average 1.1927194860813704) internal successors, (1114), 1003 states have internal predecessors, (1114), 188 states have call successors, (188), 138 states have call predecessors, (188), 164 states have return successors, (308), 188 states have call predecessors, (308), 188 states have call successors, (308) [2022-11-20 11:08:14,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1287 states to 1287 states and 1610 transitions. [2022-11-20 11:08:14,182 INFO L78 Accepts]: Start accepts. Automaton has 1287 states and 1610 transitions. Word has length 67 [2022-11-20 11:08:14,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:14,182 INFO L495 AbstractCegarLoop]: Abstraction has 1287 states and 1610 transitions. [2022-11-20 11:08:14,182 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2022-11-20 11:08:14,183 INFO L276 IsEmpty]: Start isEmpty. Operand 1287 states and 1610 transitions. [2022-11-20 11:08:14,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2022-11-20 11:08:14,188 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:14,189 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:14,202 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 11:08:14,401 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:08:14,402 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:14,402 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:14,402 INFO L85 PathProgramCache]: Analyzing trace with hash -1513239529, now seen corresponding path program 1 times [2022-11-20 11:08:14,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:14,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1204325027] [2022-11-20 11:08:14,403 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:14,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:14,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,459 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:08:14,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:08:14,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:08:14,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:14,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:14,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:14,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-20 11:08:14,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-20 11:08:14,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2022-11-20 11:08:14,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:14,539 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 11:08:14,539 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:14,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1204325027] [2022-11-20 11:08:14,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1204325027] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:14,540 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:08:14,540 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-20 11:08:14,540 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [898091674] [2022-11-20 11:08:14,540 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:14,541 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 11:08:14,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:14,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 11:08:14,542 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-20 11:08:14,542 INFO L87 Difference]: Start difference. First operand 1287 states and 1610 transitions. Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-20 11:08:15,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:15,139 INFO L93 Difference]: Finished difference Result 1535 states and 1910 transitions. [2022-11-20 11:08:15,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-20 11:08:15,140 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 94 [2022-11-20 11:08:15,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:15,144 INFO L225 Difference]: With dead ends: 1535 [2022-11-20 11:08:15,144 INFO L226 Difference]: Without dead ends: 650 [2022-11-20 11:08:15,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-11-20 11:08:15,148 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 402 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 409 mSolverCounterSat, 161 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 411 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 570 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 161 IncrementalHoareTripleChecker+Valid, 409 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:15,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [411 Valid, 202 Invalid, 570 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [161 Valid, 409 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 11:08:15,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2022-11-20 11:08:15,206 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 630. [2022-11-20 11:08:15,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 630 states, 457 states have (on average 1.1575492341356675) internal successors, (529), 489 states have internal predecessors, (529), 91 states have call successors, (91), 68 states have call predecessors, (91), 81 states have return successors, (151), 92 states have call predecessors, (151), 91 states have call successors, (151) [2022-11-20 11:08:15,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 630 states and 771 transitions. [2022-11-20 11:08:15,217 INFO L78 Accepts]: Start accepts. Automaton has 630 states and 771 transitions. Word has length 94 [2022-11-20 11:08:15,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:15,217 INFO L495 AbstractCegarLoop]: Abstraction has 630 states and 771 transitions. [2022-11-20 11:08:15,218 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2022-11-20 11:08:15,218 INFO L276 IsEmpty]: Start isEmpty. Operand 630 states and 771 transitions. [2022-11-20 11:08:15,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2022-11-20 11:08:15,224 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:08:15,224 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:15,224 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-20 11:08:15,225 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:08:15,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:08:15,226 INFO L85 PathProgramCache]: Analyzing trace with hash 1984934984, now seen corresponding path program 1 times [2022-11-20 11:08:15,226 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:08:15,226 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519772585] [2022-11-20 11:08:15,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:15,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:08:15,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:08:15,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:08:15,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:08:15,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:15,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:08:15,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:15,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-20 11:08:15,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-20 11:08:15,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-20 11:08:15,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 11:08:15,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-20 11:08:15,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:08:15,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:08:15,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-11-20 11:08:15,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,611 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-11-20 11:08:15,612 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:08:15,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519772585] [2022-11-20 11:08:15,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1519772585] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:08:15,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1180344947] [2022-11-20 11:08:15,613 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:08:15,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:08:15,613 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:08:15,614 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:08:15,624 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 11:08:15,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:08:15,751 INFO L263 TraceCheckSpWp]: Trace formula consists of 383 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-20 11:08:15,758 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:08:15,934 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 11:08:15,934 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 11:08:15,934 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1180344947] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:08:15,934 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 11:08:15,935 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-11-20 11:08:15,935 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367420865] [2022-11-20 11:08:15,935 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:08:15,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 11:08:15,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:08:15,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 11:08:15,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2022-11-20 11:08:15,938 INFO L87 Difference]: Start difference. First operand 630 states and 771 transitions. Second operand has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:08:16,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:08:16,110 INFO L93 Difference]: Finished difference Result 1093 states and 1358 transitions. [2022-11-20 11:08:16,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 11:08:16,111 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2022-11-20 11:08:16,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:08:16,113 INFO L225 Difference]: With dead ends: 1093 [2022-11-20 11:08:16,113 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 11:08:16,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2022-11-20 11:08:16,117 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 75 mSDsluCounter, 675 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 871 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 11:08:16,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 871 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 11:08:16,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 11:08:16,118 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 11:08:16,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:08:16,118 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 11:08:16,119 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2022-11-20 11:08:16,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:08:16,119 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 11:08:16,119 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:08:16,120 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 11:08:16,120 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 11:08:16,122 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 11:08:16,140 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 11:08:16,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 11:08:16,342 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 11:08:21,802 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 199 206) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (= 1 ~systemActive~0)) .cse1) (or .cse0 (not (<= 2 ~waterLevel~0)) .cse1 (= 0 ~systemActive~0)))) [2022-11-20 11:08:21,803 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2022-11-20 11:08:21,803 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 199 206) no Hoare annotation was computed. [2022-11-20 11:08:21,803 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2022-11-20 11:08:21,803 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2022-11-20 11:08:21,803 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2022-11-20 11:08:21,804 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 11:08:21,807 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 11:08:21,808 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2022-11-20 11:08:21,808 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2022-11-20 11:08:21,810 INFO L895 garLoopResultBuilder]: At program point L986(lines 981 989) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 11:08:21,811 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 123 147) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,812 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,813 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2022-11-20 11:08:21,813 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2022-11-20 11:08:21,813 INFO L895 garLoopResultBuilder]: At program point L297(lines 282 300) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 11:08:21,813 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2022-11-20 11:08:21,814 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 914 925) the Hoare annotation is: (let ((.cse1 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse2 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= 0 ~systemActive~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse7 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2 .cse3 .cse5) (or .cse4 .cse6 .cse7 .cse5) (or .cse4 .cse0 .cse6 .cse7))) [2022-11-20 11:08:21,815 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 914 925) no Hoare annotation was computed. [2022-11-20 11:08:21,815 INFO L899 garLoopResultBuilder]: For program point L918-1(lines 914 925) no Hoare annotation was computed. [2022-11-20 11:08:21,815 INFO L902 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: true [2022-11-20 11:08:21,815 INFO L899 garLoopResultBuilder]: For program point L769-1(line 769) no Hoare annotation was computed. [2022-11-20 11:08:21,816 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 763 792) no Hoare annotation was computed. [2022-11-20 11:08:21,816 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 763 792) the Hoare annotation is: true [2022-11-20 11:08:21,817 INFO L902 garLoopResultBuilder]: At program point L788(lines 763 792) the Hoare annotation is: true [2022-11-20 11:08:21,817 INFO L899 garLoopResultBuilder]: For program point L784(line 784) no Hoare annotation was computed. [2022-11-20 11:08:21,817 INFO L899 garLoopResultBuilder]: For program point L777(lines 777 781) no Hoare annotation was computed. [2022-11-20 11:08:21,818 INFO L902 garLoopResultBuilder]: At program point L777-1(lines 777 781) the Hoare annotation is: true [2022-11-20 11:08:21,818 INFO L899 garLoopResultBuilder]: For program point L774(line 774) no Hoare annotation was computed. [2022-11-20 11:08:21,818 INFO L902 garLoopResultBuilder]: At program point L773-2(lines 773 787) the Hoare annotation is: true [2022-11-20 11:08:21,818 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 926 934) the Hoare annotation is: true [2022-11-20 11:08:21,818 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 926 934) no Hoare annotation was computed. [2022-11-20 11:08:21,818 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 926 934) no Hoare annotation was computed. [2022-11-20 11:08:21,819 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (or (<= 1 |timeShift_processEnvironment_~tmp~2#1|) .cse1 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,819 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 898) no Hoare annotation was computed. [2022-11-20 11:08:21,819 INFO L895 garLoopResultBuilder]: At program point L894-2(lines 890 901) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-20 11:08:21,820 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-20 11:08:21,820 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2022-11-20 11:08:21,820 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 0 ~systemActive~0))) (or (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2022-11-20 11:08:21,822 INFO L895 garLoopResultBuilder]: At program point L168-1(lines 149 173) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse3 .cse1 .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)))) [2022-11-20 11:08:21,822 INFO L899 garLoopResultBuilder]: For program point L391(line 391) no Hoare annotation was computed. [2022-11-20 11:08:21,822 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2022-11-20 11:08:21,822 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2022-11-20 11:08:21,823 INFO L895 garLoopResultBuilder]: At program point L392(lines 387 394) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= 0 ~systemActive~0))) (or (not (= 1 ~systemActive~0)) .cse0))) [2022-11-20 11:08:21,823 INFO L895 garLoopResultBuilder]: At program point L867(line 867) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse3 .cse1 .cse2 .cse4) (or .cse3 (and .cse0 .cse4) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-20 11:08:21,823 INFO L899 garLoopResultBuilder]: For program point L867-1(line 867) no Hoare annotation was computed. [2022-11-20 11:08:21,823 INFO L895 garLoopResultBuilder]: At program point L223(lines 218 226) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse0 .cse5 (and .cse7 .cse8 .cse6) .cse3) (or .cse4 (and .cse7 .cse8) .cse5) (or .cse4 .cse1 .cse2))) [2022-11-20 11:08:21,824 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2022-11-20 11:08:21,824 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2022-11-20 11:08:21,824 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 65 88) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= 1 ~systemActive~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (= 0 ~systemActive~0))))) [2022-11-20 11:08:21,824 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2022-11-20 11:08:21,824 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2022-11-20 11:08:21,825 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2022-11-20 11:08:21,825 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 391) no Hoare annotation was computed. [2022-11-20 11:08:21,825 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 882) no Hoare annotation was computed. [2022-11-20 11:08:21,826 INFO L895 garLoopResultBuilder]: At program point L869-1(lines 861 885) the Hoare annotation is: (let ((.cse10 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not .cse10)) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (< 0 (+ |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 1))) (.cse6 (<= |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 0))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or .cse0 (and .cse1 .cse5 .cse2 .cse6) .cse7 .cse8 .cse4) (or .cse0 .cse9 .cse8 .cse2) (or .cse9 .cse3 (and .cse1 .cse10)) (or .cse9 (and (<= 2 ~waterLevel~0) .cse5 .cse6) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse8 (and .cse1 .cse10 .cse5 .cse6))))) [2022-11-20 11:08:21,826 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2))) [2022-11-20 11:08:21,826 INFO L895 garLoopResultBuilder]: At program point L378(lines 329 379) the Hoare annotation is: false [2022-11-20 11:08:21,827 INFO L895 garLoopResultBuilder]: At program point L1006(lines 1002 1008) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-20 11:08:21,827 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 372) no Hoare annotation was computed. [2022-11-20 11:08:21,827 INFO L895 garLoopResultBuilder]: At program point L366-2(lines 360 373) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 0 ~methaneLevelCritical~0))) (or (and (= 1 ~systemActive~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (= 0 ~systemActive~0)))) [2022-11-20 11:08:21,827 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 11:08:21,828 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-11-20 11:08:21,828 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 11:08:21,828 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2022-11-20 11:08:21,828 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 11:08:21,830 INFO L895 garLoopResultBuilder]: At program point L313(lines 301 315) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 0 ~methaneLevelCritical~0) (= 0 ~systemActive~0)) [2022-11-20 11:08:21,830 INFO L895 garLoopResultBuilder]: At program point L375(lines 330 377) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-20 11:08:21,830 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-20 11:08:21,831 INFO L895 garLoopResultBuilder]: At program point L821(lines 817 823) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-20 11:08:21,831 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2022-11-20 11:08:21,831 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2022-11-20 11:08:21,831 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 11:08:21,831 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 854) no Hoare annotation was computed. [2022-11-20 11:08:21,832 INFO L899 garLoopResultBuilder]: For program point L847-2(lines 847 854) no Hoare annotation was computed. [2022-11-20 11:08:21,832 INFO L899 garLoopResultBuilder]: For program point L331(lines 330 377) no Hoare annotation was computed. [2022-11-20 11:08:21,832 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 373) no Hoare annotation was computed. [2022-11-20 11:08:21,832 INFO L895 garLoopResultBuilder]: At program point L352(line 352) the Hoare annotation is: (let ((.cse2 (<= 0 ~methaneLevelCritical~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2) (and .cse3 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse3 (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-20 11:08:21,832 INFO L902 garLoopResultBuilder]: At program point L831(lines 824 833) the Hoare annotation is: true [2022-11-20 11:08:21,833 INFO L895 garLoopResultBuilder]: At program point L1021(lines 1016 1024) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-20 11:08:21,833 INFO L902 garLoopResultBuilder]: At program point L381(lines 320 385) the Hoare annotation is: true [2022-11-20 11:08:21,833 INFO L902 garLoopResultBuilder]: At program point L856(lines 837 859) the Hoare annotation is: true [2022-11-20 11:08:21,834 INFO L895 garLoopResultBuilder]: At program point L1013(lines 1009 1015) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-20 11:08:21,834 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 346) no Hoare annotation was computed. [2022-11-20 11:08:21,834 INFO L899 garLoopResultBuilder]: For program point L340-1(lines 340 346) no Hoare annotation was computed. [2022-11-20 11:08:21,834 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse1 (<= 0 ~methaneLevelCritical~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~systemActive~0))) (and (= 1 ~systemActive~0) .cse0 .cse1))) [2022-11-20 11:08:21,834 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 336) no Hoare annotation was computed. [2022-11-20 11:08:21,835 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 97 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,835 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-20 11:08:21,835 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2022-11-20 11:08:21,835 INFO L899 garLoopResultBuilder]: For program point L971(lines 971 977) no Hoare annotation was computed. [2022-11-20 11:08:21,836 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2022-11-20 11:08:21,836 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2022-11-20 11:08:21,836 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,836 INFO L895 garLoopResultBuilder]: At program point L189-2(lines 182 198) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (<= 2 ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) .cse0) (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (<= 1 ~methaneLevelCritical~0))) (or .cse1 .cse0 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,837 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2022-11-20 11:08:21,837 INFO L895 garLoopResultBuilder]: At program point L278(lines 263 281) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0))) (let ((.cse0 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and .cse3 .cse4))))) [2022-11-20 11:08:21,838 INFO L895 garLoopResultBuilder]: At program point L179(lines 174 181) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (<= 2 ~waterLevel~0) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-20 11:08:21,838 INFO L895 garLoopResultBuilder]: At program point L976(lines 967 980) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|)) (.cse1 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2) (and .cse3 .cse1)) (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse4 .cse1 .cse2) (and .cse3 .cse4 .cse1) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)))))) [2022-11-20 11:08:21,839 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2022-11-20 11:08:21,839 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) .cse2)) (.cse1 (not .cse2))) (and (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)))))) [2022-11-20 11:08:21,839 INFO L899 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2022-11-20 11:08:21,839 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2022-11-20 11:08:21,840 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2022-11-20 11:08:21,840 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 902 913) no Hoare annotation was computed. [2022-11-20 11:08:21,840 INFO L899 garLoopResultBuilder]: For program point L906-1(lines 902 913) no Hoare annotation was computed. [2022-11-20 11:08:21,840 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 902 913) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-20 11:08:21,841 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 207 217) the Hoare annotation is: true [2022-11-20 11:08:21,841 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2022-11-20 11:08:21,841 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 207 217) no Hoare annotation was computed. [2022-11-20 11:08:21,841 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2022-11-20 11:08:21,841 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2022-11-20 11:08:21,845 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:08:21,848 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 11:08:21,887 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 11:08:21 BoogieIcfgContainer [2022-11-20 11:08:21,890 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 11:08:21,891 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 11:08:21,891 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 11:08:21,892 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 11:08:21,892 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:08:08" (3/4) ... [2022-11-20 11:08:21,895 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 11:08:21,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 11:08:21,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:08:21,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 11:08:21,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:08:21,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 11:08:21,916 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-20 11:08:21,917 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 11:08:21,918 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 11:08:21,918 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:08:21,918 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:08:21,953 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,954 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) [2022-11-20 11:08:21,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((((!(1 == systemActive) || ((2 <= waterLevel && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && tmp <= 0)) || !(0 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0)) [2022-11-20 11:08:21,957 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,957 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,958 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) [2022-11-20 11:08:21,958 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,958 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (!(1 == systemActive) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-20 11:08:21,963 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-11-20 11:08:22,002 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 11:08:22,003 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 11:08:22,003 INFO L158 Benchmark]: Toolchain (without parser) took 14806.80ms. Allocated memory was 142.6MB in the beginning and 213.9MB in the end (delta: 71.3MB). Free memory was 101.1MB in the beginning and 89.7MB in the end (delta: 11.3MB). Peak memory consumption was 84.9MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,004 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 113.2MB. Free memory is still 82.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 11:08:22,004 INFO L158 Benchmark]: CACSL2BoogieTranslator took 559.62ms. Allocated memory is still 142.6MB. Free memory was 100.5MB in the beginning and 81.5MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,004 INFO L158 Benchmark]: Boogie Procedure Inliner took 75.97ms. Allocated memory is still 142.6MB. Free memory was 81.5MB in the beginning and 79.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,005 INFO L158 Benchmark]: Boogie Preprocessor took 59.36ms. Allocated memory is still 142.6MB. Free memory was 79.5MB in the beginning and 77.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,005 INFO L158 Benchmark]: RCFGBuilder took 522.39ms. Allocated memory is still 142.6MB. Free memory was 77.4MB in the beginning and 59.7MB in the end (delta: 17.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,005 INFO L158 Benchmark]: TraceAbstraction took 13454.73ms. Allocated memory was 142.6MB in the beginning and 213.9MB in the end (delta: 71.3MB). Free memory was 59.2MB in the beginning and 96.0MB in the end (delta: -36.9MB). Peak memory consumption was 75.3MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,006 INFO L158 Benchmark]: Witness Printer took 111.64ms. Allocated memory is still 213.9MB. Free memory was 96.0MB in the beginning and 89.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 11:08:22,007 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 113.2MB. Free memory is still 82.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 559.62ms. Allocated memory is still 142.6MB. Free memory was 100.5MB in the beginning and 81.5MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 75.97ms. Allocated memory is still 142.6MB. Free memory was 81.5MB in the beginning and 79.5MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 59.36ms. Allocated memory is still 142.6MB. Free memory was 79.5MB in the beginning and 77.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 522.39ms. Allocated memory is still 142.6MB. Free memory was 77.4MB in the beginning and 59.7MB in the end (delta: 17.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13454.73ms. Allocated memory was 142.6MB in the beginning and 213.9MB in the end (delta: 71.3MB). Free memory was 59.2MB in the beginning and 96.0MB in the end (delta: -36.9MB). Peak memory consumption was 75.3MB. Max. memory is 16.1GB. * Witness Printer took 111.64ms. Allocated memory is still 213.9MB. Free memory was 96.0MB in the beginning and 89.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 391]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 112 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.3s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1588 SdHoareTripleChecker+Valid, 1.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1540 mSDsluCounter, 4368 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2955 mSDsCounter, 474 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1857 IncrementalHoareTripleChecker+Invalid, 2331 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 474 mSolverCounterUnsat, 1413 mSDtfsCounter, 1857 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 402 GetRequests, 300 SyntacticMatches, 2 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 248 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1357occurred in iteration=8, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 181 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2590 PreInvPairs, 2875 NumberOfFragments, 1584 HoareAnnotationTreeSize, 2590 FomulaSimplifications, 1339 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 51 FomulaSimplificationsInter, 15668 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 817 NumberOfCodeBlocks, 817 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 804 ConstructedInterpolants, 0 QuantifiedInterpolants, 1618 SizeOfPredicates, 6 NumberOfNonLiveVariables, 637 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 124/138 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 1016]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && tmp___0 == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && 0 == systemActive - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 861]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 0 < tmp + 1) && \old(waterLevel) == waterLevel) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel)) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && (((((!(1 == systemActive) || ((2 <= waterLevel && 0 < tmp + 1) && tmp <= 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && 0 < tmp + 1) && tmp <= 0)) || !(0 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 == systemActive) && 0 < tmp + 1) && tmp <= 0)) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || !(0 == systemActive)) && (!(1 == systemActive) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical <= tmp) && 2 <= waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: ((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) || (((pumpRunning == 0 && splverifierCounter == 0) && 0 <= methaneLevelCritical) && 0 == systemActive)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (1 <= \result && pumpRunning == 0)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || ((1 <= \result && pumpRunning == \old(pumpRunning)) && pumpRunning == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-20 11:08:22,047 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9ab1eaa7-48f9-4b7a-9a52-d6cf6a1029ff/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE