./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4c4adbf609ddd472cb6a462753c6f5cc9af64c97af02da4060f4102700285790 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 10:52:58,808 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 10:52:58,810 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 10:52:58,852 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 10:52:58,853 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 10:52:58,854 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 10:52:58,855 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 10:52:58,857 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 10:52:58,862 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 10:52:58,868 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 10:52:58,869 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 10:52:58,872 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 10:52:58,872 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 10:52:58,876 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 10:52:58,878 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 10:52:58,880 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 10:52:58,882 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 10:52:58,883 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 10:52:58,885 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 10:52:58,892 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 10:52:58,894 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 10:52:58,896 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 10:52:58,898 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 10:52:58,899 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 10:52:58,909 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 10:52:58,910 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 10:52:58,910 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 10:52:58,912 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 10:52:58,912 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 10:52:58,913 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 10:52:58,914 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 10:52:58,914 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 10:52:58,916 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 10:52:58,917 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 10:52:58,919 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 10:52:58,920 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 10:52:58,921 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 10:52:58,921 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 10:52:58,921 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 10:52:58,923 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 10:52:58,923 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 10:52:58,924 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 10:52:58,981 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 10:52:58,981 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 10:52:58,982 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 10:52:58,982 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 10:52:58,983 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 10:52:58,983 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 10:52:58,984 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 10:52:58,984 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 10:52:58,984 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 10:52:58,985 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 10:52:58,986 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 10:52:58,987 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 10:52:58,987 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 10:52:58,987 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 10:52:58,987 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 10:52:58,987 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 10:52:58,988 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 10:52:58,988 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 10:52:58,988 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 10:52:58,988 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:52:58,988 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 10:52:58,989 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 10:52:58,989 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 10:52:58,989 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 10:52:58,990 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 10:52:58,990 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 10:52:58,990 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 10:52:58,990 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 10:52:58,990 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4c4adbf609ddd472cb6a462753c6f5cc9af64c97af02da4060f4102700285790 [2022-11-20 10:52:59,270 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 10:52:59,315 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 10:52:59,318 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 10:52:59,319 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 10:52:59,320 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 10:52:59,321 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2022-11-20 10:53:02,288 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 10:53:02,556 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 10:53:02,557 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2022-11-20 10:53:02,571 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/data/87e82955d/020c4000b6194f8c8f54c987c485010e/FLAGd3e34fc43 [2022-11-20 10:53:02,595 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/data/87e82955d/020c4000b6194f8c8f54c987c485010e [2022-11-20 10:53:02,598 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 10:53:02,604 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 10:53:02,609 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 10:53:02,609 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 10:53:02,613 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 10:53:02,614 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:53:02" (1/1) ... [2022-11-20 10:53:02,615 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c44a43d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:02, skipping insertion in model container [2022-11-20 10:53:02,616 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:53:02" (1/1) ... [2022-11-20 10:53:02,651 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 10:53:02,698 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 10:53:02,952 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8617,8630] [2022-11-20 10:53:03,049 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:53:03,061 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 10:53:03,095 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8617,8630] [2022-11-20 10:53:03,125 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:53:03,144 INFO L208 MainTranslator]: Completed translation [2022-11-20 10:53:03,144 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03 WrapperNode [2022-11-20 10:53:03,144 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 10:53:03,146 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 10:53:03,146 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 10:53:03,146 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 10:53:03,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,168 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,210 INFO L138 Inliner]: procedures = 54, calls = 100, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 194 [2022-11-20 10:53:03,211 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 10:53:03,212 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 10:53:03,212 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 10:53:03,212 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 10:53:03,222 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,223 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,237 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,238 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,241 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,246 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,247 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,249 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,251 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 10:53:03,252 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 10:53:03,252 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 10:53:03,253 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 10:53:03,254 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (1/1) ... [2022-11-20 10:53:03,262 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:53:03,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:53:03,306 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 10:53:03,325 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 10:53:03,351 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 10:53:03,351 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 10:53:03,352 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 10:53:03,353 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 10:53:03,353 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 10:53:03,354 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 10:53:03,355 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 10:53:03,357 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 10:53:03,358 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 10:53:03,358 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 10:53:03,358 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 10:53:03,358 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 10:53:03,359 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 10:53:03,359 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 10:53:03,359 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 10:53:03,359 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 10:53:03,359 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 10:53:03,360 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 10:53:03,360 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 10:53:03,360 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 10:53:03,438 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 10:53:03,440 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 10:53:03,755 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 10:53:03,762 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 10:53:03,762 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 10:53:03,764 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:53:03 BoogieIcfgContainer [2022-11-20 10:53:03,765 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 10:53:03,768 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 10:53:03,768 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 10:53:03,771 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 10:53:03,771 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 10:53:02" (1/3) ... [2022-11-20 10:53:03,772 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c659e2c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:53:03, skipping insertion in model container [2022-11-20 10:53:03,772 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:53:03" (2/3) ... [2022-11-20 10:53:03,773 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c659e2c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:53:03, skipping insertion in model container [2022-11-20 10:53:03,773 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:53:03" (3/3) ... [2022-11-20 10:53:03,775 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product45.cil.c [2022-11-20 10:53:03,833 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 10:53:03,847 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 10:53:03,910 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 10:53:03,916 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@17eb1754, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 10:53:03,916 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 10:53:03,920 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-20 10:53:03,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-20 10:53:03,932 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:03,933 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:03,934 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:03,940 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:03,940 INFO L85 PathProgramCache]: Analyzing trace with hash 1088804663, now seen corresponding path program 1 times [2022-11-20 10:53:03,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:03,952 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003867248] [2022-11-20 10:53:03,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:03,953 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:04,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 10:53:04,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,175 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:04,182 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:04,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003867248] [2022-11-20 10:53:04,183 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003867248] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:04,183 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:04,184 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 10:53:04,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [926393399] [2022-11-20 10:53:04,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:04,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 10:53:04,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:04,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 10:53:04,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:53:04,245 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:04,329 INFO L93 Difference]: Finished difference Result 182 states and 247 transitions. [2022-11-20 10:53:04,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 10:53:04,333 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-20 10:53:04,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:04,352 INFO L225 Difference]: With dead ends: 182 [2022-11-20 10:53:04,367 INFO L226 Difference]: Without dead ends: 86 [2022-11-20 10:53:04,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:53:04,374 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:04,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:53:04,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-11-20 10:53:04,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-11-20 10:53:04,444 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 10:53:04,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-11-20 10:53:04,460 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-11-20 10:53:04,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:04,462 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-11-20 10:53:04,463 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,464 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-11-20 10:53:04,466 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-20 10:53:04,469 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:04,469 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:04,470 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 10:53:04,470 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:04,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:04,473 INFO L85 PathProgramCache]: Analyzing trace with hash 913970031, now seen corresponding path program 1 times [2022-11-20 10:53:04,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:04,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [68927720] [2022-11-20 10:53:04,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:04,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:04,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:53:04,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:04,607 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:04,608 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [68927720] [2022-11-20 10:53:04,608 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [68927720] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:04,608 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:04,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 10:53:04,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2114200357] [2022-11-20 10:53:04,609 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:04,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 10:53:04,611 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:04,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 10:53:04,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:53:04,612 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:04,632 INFO L93 Difference]: Finished difference Result 138 states and 178 transitions. [2022-11-20 10:53:04,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 10:53:04,633 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-20 10:53:04,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:04,635 INFO L225 Difference]: With dead ends: 138 [2022-11-20 10:53:04,635 INFO L226 Difference]: Without dead ends: 77 [2022-11-20 10:53:04,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:53:04,637 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 12 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:04,638 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 180 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:53:04,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-20 10:53:04,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-20 10:53:04,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 10:53:04,649 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-11-20 10:53:04,649 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-11-20 10:53:04,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:04,650 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-11-20 10:53:04,650 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,650 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-11-20 10:53:04,651 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-20 10:53:04,652 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:04,652 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:04,652 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 10:53:04,653 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:04,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:04,654 INFO L85 PathProgramCache]: Analyzing trace with hash 1563838683, now seen corresponding path program 1 times [2022-11-20 10:53:04,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:04,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [466815433] [2022-11-20 10:53:04,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:04,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:04,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:53:04,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:04,772 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:04,772 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [466815433] [2022-11-20 10:53:04,772 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [466815433] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:04,773 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:04,773 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 10:53:04,773 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538125085] [2022-11-20 10:53:04,773 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:04,774 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 10:53:04,774 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:04,774 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 10:53:04,775 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:53:04,775 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:04,812 INFO L93 Difference]: Finished difference Result 147 states and 192 transitions. [2022-11-20 10:53:04,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 10:53:04,813 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-20 10:53:04,814 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:04,817 INFO L225 Difference]: With dead ends: 147 [2022-11-20 10:53:04,817 INFO L226 Difference]: Without dead ends: 77 [2022-11-20 10:53:04,818 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:53:04,821 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:04,823 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 97 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:53:04,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-20 10:53:04,847 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-20 10:53:04,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 10:53:04,849 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 98 transitions. [2022-11-20 10:53:04,849 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 98 transitions. Word has length 30 [2022-11-20 10:53:04,849 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:04,849 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 98 transitions. [2022-11-20 10:53:04,850 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:53:04,850 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 98 transitions. [2022-11-20 10:53:04,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-20 10:53:04,851 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:04,852 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:04,852 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 10:53:04,852 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:04,853 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:04,853 INFO L85 PathProgramCache]: Analyzing trace with hash 1485355981, now seen corresponding path program 1 times [2022-11-20 10:53:04,853 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:04,854 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [709130945] [2022-11-20 10:53:04,854 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:04,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:04,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:04,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:53:04,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:53:05,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 10:53:05,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,032 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:05,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:05,037 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [709130945] [2022-11-20 10:53:05,037 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [709130945] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:05,037 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:05,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 10:53:05,038 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710372386] [2022-11-20 10:53:05,038 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:05,038 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 10:53:05,039 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:05,039 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 10:53:05,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:53:05,040 INFO L87 Difference]: Start difference. First operand 77 states and 98 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 10:53:05,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:05,345 INFO L93 Difference]: Finished difference Result 230 states and 292 transitions. [2022-11-20 10:53:05,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:53:05,346 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-11-20 10:53:05,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:05,348 INFO L225 Difference]: With dead ends: 230 [2022-11-20 10:53:05,348 INFO L226 Difference]: Without dead ends: 160 [2022-11-20 10:53:05,350 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-20 10:53:05,351 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 202 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:05,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 289 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:53:05,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-20 10:53:05,418 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 154. [2022-11-20 10:53:05,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 117 states have (on average 1.264957264957265) internal successors, (148), 125 states have internal predecessors, (148), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-20 10:53:05,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 189 transitions. [2022-11-20 10:53:05,420 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 189 transitions. Word has length 40 [2022-11-20 10:53:05,421 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:05,421 INFO L495 AbstractCegarLoop]: Abstraction has 154 states and 189 transitions. [2022-11-20 10:53:05,421 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 10:53:05,422 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 189 transitions. [2022-11-20 10:53:05,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-20 10:53:05,423 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:05,423 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:05,424 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 10:53:05,424 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:05,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:05,425 INFO L85 PathProgramCache]: Analyzing trace with hash -1430117211, now seen corresponding path program 1 times [2022-11-20 10:53:05,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:05,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [90833645] [2022-11-20 10:53:05,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:05,426 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:05,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:53:05,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:05,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-20 10:53:05,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:05,617 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:05,618 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:05,618 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [90833645] [2022-11-20 10:53:05,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [90833645] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:05,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:05,620 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:53:05,625 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1812016436] [2022-11-20 10:53:05,625 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:05,627 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:53:05,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:05,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:53:05,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:53:05,629 INFO L87 Difference]: Start difference. First operand 154 states and 189 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:53:05,998 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:05,999 INFO L93 Difference]: Finished difference Result 399 states and 509 transitions. [2022-11-20 10:53:05,999 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 10:53:06,000 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-20 10:53:06,000 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:06,002 INFO L225 Difference]: With dead ends: 399 [2022-11-20 10:53:06,003 INFO L226 Difference]: Without dead ends: 252 [2022-11-20 10:53:06,004 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-20 10:53:06,005 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 141 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:06,006 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 349 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:53:06,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2022-11-20 10:53:06,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 244. [2022-11-20 10:53:06,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 185 states have (on average 1.2540540540540541) internal successors, (232), 196 states have internal predecessors, (232), 30 states have call successors, (30), 26 states have call predecessors, (30), 28 states have return successors, (40), 30 states have call predecessors, (40), 30 states have call successors, (40) [2022-11-20 10:53:06,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 302 transitions. [2022-11-20 10:53:06,040 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 302 transitions. Word has length 46 [2022-11-20 10:53:06,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:06,040 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 302 transitions. [2022-11-20 10:53:06,041 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:53:06,041 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 302 transitions. [2022-11-20 10:53:06,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 10:53:06,043 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:06,043 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:06,043 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 10:53:06,044 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:06,044 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:06,044 INFO L85 PathProgramCache]: Analyzing trace with hash 1782384523, now seen corresponding path program 1 times [2022-11-20 10:53:06,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:06,045 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504614511] [2022-11-20 10:53:06,045 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:06,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:06,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:06,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:06,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:06,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:53:06,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:06,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:06,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:06,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 10:53:06,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:06,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:06,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:06,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504614511] [2022-11-20 10:53:06,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504614511] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:06,229 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:06,229 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 10:53:06,229 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010182500] [2022-11-20 10:53:06,229 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:06,230 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 10:53:06,230 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:06,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 10:53:06,231 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:53:06,231 INFO L87 Difference]: Start difference. First operand 244 states and 302 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:06,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:06,849 INFO L93 Difference]: Finished difference Result 586 states and 757 transitions. [2022-11-20 10:53:06,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-20 10:53:06,850 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-20 10:53:06,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:06,854 INFO L225 Difference]: With dead ends: 586 [2022-11-20 10:53:06,854 INFO L226 Difference]: Without dead ends: 439 [2022-11-20 10:53:06,855 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-20 10:53:06,856 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 302 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 361 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 306 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 361 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:06,856 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [306 Valid, 329 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 361 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 10:53:06,858 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2022-11-20 10:53:06,958 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 405. [2022-11-20 10:53:06,959 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 306 states have (on average 1.2287581699346406) internal successors, (376), 326 states have internal predecessors, (376), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-20 10:53:06,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 503 transitions. [2022-11-20 10:53:06,962 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 503 transitions. Word has length 50 [2022-11-20 10:53:06,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:06,963 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 503 transitions. [2022-11-20 10:53:06,963 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:06,964 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 503 transitions. [2022-11-20 10:53:06,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 10:53:06,965 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:06,965 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:06,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 10:53:06,966 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:06,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:06,967 INFO L85 PathProgramCache]: Analyzing trace with hash 1648371017, now seen corresponding path program 1 times [2022-11-20 10:53:06,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:06,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [29126313] [2022-11-20 10:53:06,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:06,968 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:06,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:07,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:53:07,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:07,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 10:53:07,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,072 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:07,073 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:07,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [29126313] [2022-11-20 10:53:07,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [29126313] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:07,073 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:07,074 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:53:07,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055363860] [2022-11-20 10:53:07,074 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:07,076 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:53:07,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:07,078 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:53:07,078 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:53:07,079 INFO L87 Difference]: Start difference. First operand 405 states and 503 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:07,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:07,415 INFO L93 Difference]: Finished difference Result 751 states and 939 transitions. [2022-11-20 10:53:07,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-20 10:53:07,416 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-20 10:53:07,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:07,419 INFO L225 Difference]: With dead ends: 751 [2022-11-20 10:53:07,420 INFO L226 Difference]: Without dead ends: 439 [2022-11-20 10:53:07,421 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-20 10:53:07,422 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 163 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:07,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 283 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:53:07,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2022-11-20 10:53:07,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 405. [2022-11-20 10:53:07,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 306 states have (on average 1.2254901960784315) internal successors, (375), 326 states have internal predecessors, (375), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-20 10:53:07,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 502 transitions. [2022-11-20 10:53:07,466 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 502 transitions. Word has length 50 [2022-11-20 10:53:07,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:07,466 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 502 transitions. [2022-11-20 10:53:07,467 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:07,467 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 502 transitions. [2022-11-20 10:53:07,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 10:53:07,468 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:07,469 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:07,469 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 10:53:07,469 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:07,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:07,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1867225735, now seen corresponding path program 1 times [2022-11-20 10:53:07,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:07,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1789762121] [2022-11-20 10:53:07,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:07,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:07,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:07,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:53:07,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:07,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 10:53:07,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:07,598 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:53:07,602 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:07,602 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1789762121] [2022-11-20 10:53:07,602 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1789762121] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:07,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:07,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 10:53:07,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1332204634] [2022-11-20 10:53:07,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:07,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 10:53:07,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:07,604 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 10:53:07,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:53:07,605 INFO L87 Difference]: Start difference. First operand 405 states and 502 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:07,984 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:07,984 INFO L93 Difference]: Finished difference Result 832 states and 1043 transitions. [2022-11-20 10:53:07,985 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 10:53:07,985 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-20 10:53:07,985 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:07,988 INFO L225 Difference]: With dead ends: 832 [2022-11-20 10:53:07,988 INFO L226 Difference]: Without dead ends: 434 [2022-11-20 10:53:07,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-20 10:53:07,991 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 165 mSDsluCounter, 279 mSDsCounter, 0 mSdLazyCounter, 286 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:07,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 348 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 286 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:53:07,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 434 states. [2022-11-20 10:53:08,041 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 434 to 408. [2022-11-20 10:53:08,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 311 states have (on average 1.2186495176848875) internal successors, (379), 330 states have internal predecessors, (379), 49 states have call successors, (49), 38 states have call predecessors, (49), 47 states have return successors, (76), 50 states have call predecessors, (76), 49 states have call successors, (76) [2022-11-20 10:53:08,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 504 transitions. [2022-11-20 10:53:08,047 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 504 transitions. Word has length 50 [2022-11-20 10:53:08,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:08,049 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 504 transitions. [2022-11-20 10:53:08,050 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:53:08,050 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 504 transitions. [2022-11-20 10:53:08,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-20 10:53:08,051 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:08,052 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:08,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 10:53:08,052 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:08,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:08,053 INFO L85 PathProgramCache]: Analyzing trace with hash 88017873, now seen corresponding path program 1 times [2022-11-20 10:53:08,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:08,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680933380] [2022-11-20 10:53:08,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:08,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:08,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:08,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:53:08,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:08,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:08,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-20 10:53:08,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:08,316 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:53:08,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:08,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680933380] [2022-11-20 10:53:08,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680933380] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:08,316 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:08,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-20 10:53:08,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1667146931] [2022-11-20 10:53:08,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:08,317 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-20 10:53:08,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:08,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-20 10:53:08,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-20 10:53:08,319 INFO L87 Difference]: Start difference. First operand 408 states and 504 transitions. Second operand has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 10:53:09,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:09,300 INFO L93 Difference]: Finished difference Result 1196 states and 1541 transitions. [2022-11-20 10:53:09,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-20 10:53:09,301 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-20 10:53:09,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:09,305 INFO L225 Difference]: With dead ends: 1196 [2022-11-20 10:53:09,305 INFO L226 Difference]: Without dead ends: 795 [2022-11-20 10:53:09,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=243, Invalid=1017, Unknown=0, NotChecked=0, Total=1260 [2022-11-20 10:53:09,308 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 331 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 955 mSolverCounterSat, 157 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 857 SdHoareTripleChecker+Invalid, 1112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 157 IncrementalHoareTripleChecker+Valid, 955 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:09,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [338 Valid, 857 Invalid, 1112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [157 Valid, 955 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-20 10:53:09,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 795 states. [2022-11-20 10:53:09,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 795 to 758. [2022-11-20 10:53:09,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 568 states have (on average 1.1883802816901408) internal successors, (675), 602 states have internal predecessors, (675), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (166), 98 states have call predecessors, (166), 97 states have call successors, (166) [2022-11-20 10:53:09,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 938 transitions. [2022-11-20 10:53:09,378 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 938 transitions. Word has length 59 [2022-11-20 10:53:09,379 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:09,379 INFO L495 AbstractCegarLoop]: Abstraction has 758 states and 938 transitions. [2022-11-20 10:53:09,379 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.8333333333333335) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 10:53:09,379 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 938 transitions. [2022-11-20 10:53:09,381 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-20 10:53:09,381 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:09,382 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:09,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 10:53:09,382 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:09,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:09,383 INFO L85 PathProgramCache]: Analyzing trace with hash -229819681, now seen corresponding path program 1 times [2022-11-20 10:53:09,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:09,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1372080313] [2022-11-20 10:53:09,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:09,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:09,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:09,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:53:09,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:09,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:09,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-20 10:53:09,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:09,507 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:53:09,508 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:09,508 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1372080313] [2022-11-20 10:53:09,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1372080313] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:09,508 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:09,508 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-20 10:53:09,509 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [33929702] [2022-11-20 10:53:09,509 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:09,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-20 10:53:09,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:09,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-20 10:53:09,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-11-20 10:53:09,510 INFO L87 Difference]: Start difference. First operand 758 states and 938 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-20 10:53:10,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:10,128 INFO L93 Difference]: Finished difference Result 1518 states and 1878 transitions. [2022-11-20 10:53:10,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-20 10:53:10,129 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-20 10:53:10,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:10,133 INFO L225 Difference]: With dead ends: 1518 [2022-11-20 10:53:10,133 INFO L226 Difference]: Without dead ends: 767 [2022-11-20 10:53:10,135 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 59 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=115, Invalid=305, Unknown=0, NotChecked=0, Total=420 [2022-11-20 10:53:10,136 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 299 mSDsluCounter, 374 mSDsCounter, 0 mSdLazyCounter, 463 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 478 SdHoareTripleChecker+Invalid, 565 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 463 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:10,137 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 478 Invalid, 565 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 463 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 10:53:10,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 767 states. [2022-11-20 10:53:10,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 767 to 758. [2022-11-20 10:53:10,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 568 states have (on average 1.1742957746478873) internal successors, (667), 602 states have internal predecessors, (667), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (147), 98 states have call predecessors, (147), 97 states have call successors, (147) [2022-11-20 10:53:10,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 911 transitions. [2022-11-20 10:53:10,200 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 911 transitions. Word has length 60 [2022-11-20 10:53:10,201 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:10,201 INFO L495 AbstractCegarLoop]: Abstraction has 758 states and 911 transitions. [2022-11-20 10:53:10,201 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-20 10:53:10,201 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 911 transitions. [2022-11-20 10:53:10,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-20 10:53:10,204 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:10,205 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:10,205 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-20 10:53:10,205 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:10,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:10,206 INFO L85 PathProgramCache]: Analyzing trace with hash -168137563, now seen corresponding path program 1 times [2022-11-20 10:53:10,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:10,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047678394] [2022-11-20 10:53:10,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:10,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:10,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:53:10,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 10:53:10,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:10,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:10,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 10:53:10,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-20 10:53:10,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-20 10:53:10,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:10,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-20 10:53:10,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,358 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-20 10:53:10,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:10,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047678394] [2022-11-20 10:53:10,359 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047678394] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:10,359 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:53:10,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-20 10:53:10,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1047681206] [2022-11-20 10:53:10,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:10,360 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-20 10:53:10,360 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:10,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-20 10:53:10,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-20 10:53:10,361 INFO L87 Difference]: Start difference. First operand 758 states and 911 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-20 10:53:10,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:10,673 INFO L93 Difference]: Finished difference Result 1513 states and 1844 transitions. [2022-11-20 10:53:10,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 10:53:10,674 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 97 [2022-11-20 10:53:10,674 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:10,678 INFO L225 Difference]: With dead ends: 1513 [2022-11-20 10:53:10,678 INFO L226 Difference]: Without dead ends: 762 [2022-11-20 10:53:10,681 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-11-20 10:53:10,682 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 180 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 266 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 329 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 266 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:10,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 338 Invalid, 329 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 266 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:53:10,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 762 states. [2022-11-20 10:53:10,749 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 762 to 762. [2022-11-20 10:53:10,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 762 states, 570 states have (on average 1.1666666666666667) internal successors, (665), 604 states have internal predecessors, (665), 97 states have call successors, (97), 76 states have call predecessors, (97), 94 states have return successors, (150), 98 states have call predecessors, (150), 97 states have call successors, (150) [2022-11-20 10:53:10,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 762 states to 762 states and 912 transitions. [2022-11-20 10:53:10,755 INFO L78 Accepts]: Start accepts. Automaton has 762 states and 912 transitions. Word has length 97 [2022-11-20 10:53:10,755 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:10,755 INFO L495 AbstractCegarLoop]: Abstraction has 762 states and 912 transitions. [2022-11-20 10:53:10,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-20 10:53:10,755 INFO L276 IsEmpty]: Start isEmpty. Operand 762 states and 912 transitions. [2022-11-20 10:53:10,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-20 10:53:10,765 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:10,765 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:10,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-20 10:53:10,765 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:10,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:10,769 INFO L85 PathProgramCache]: Analyzing trace with hash -2079180121, now seen corresponding path program 1 times [2022-11-20 10:53:10,769 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:10,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984039579] [2022-11-20 10:53:10,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:10,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:10,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:53:10,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 10:53:10,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:10,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:10,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:10,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 10:53:10,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-20 10:53:11,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-20 10:53:11,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:11,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-20 10:53:11,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,020 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-20 10:53:11,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:11,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984039579] [2022-11-20 10:53:11,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984039579] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:53:11,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1133393400] [2022-11-20 10:53:11,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:11,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:53:11,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:53:11,027 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:53:11,038 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 10:53:11,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,138 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 10:53:11,144 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:53:11,236 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-20 10:53:11,236 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 10:53:11,236 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1133393400] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:53:11,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 10:53:11,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2022-11-20 10:53:11,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [25240303] [2022-11-20 10:53:11,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:53:11,237 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 10:53:11,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:11,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 10:53:11,238 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2022-11-20 10:53:11,239 INFO L87 Difference]: Start difference. First operand 762 states and 912 transitions. Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-20 10:53:11,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:11,355 INFO L93 Difference]: Finished difference Result 1371 states and 1660 transitions. [2022-11-20 10:53:11,370 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 10:53:11,370 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) Word has length 97 [2022-11-20 10:53:11,371 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:11,374 INFO L225 Difference]: With dead ends: 1371 [2022-11-20 10:53:11,374 INFO L226 Difference]: Without dead ends: 616 [2022-11-20 10:53:11,376 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-20 10:53:11,376 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 11 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:11,377 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 279 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:53:11,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2022-11-20 10:53:11,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 616. [2022-11-20 10:53:11,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 460 states have (on average 1.1652173913043478) internal successors, (536), 488 states have internal predecessors, (536), 81 states have call successors, (81), 64 states have call predecessors, (81), 74 states have return successors, (110), 78 states have call predecessors, (110), 81 states have call successors, (110) [2022-11-20 10:53:11,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 727 transitions. [2022-11-20 10:53:11,471 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 727 transitions. Word has length 97 [2022-11-20 10:53:11,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:11,471 INFO L495 AbstractCegarLoop]: Abstraction has 616 states and 727 transitions. [2022-11-20 10:53:11,472 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-20 10:53:11,472 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 727 transitions. [2022-11-20 10:53:11,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-20 10:53:11,474 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:53:11,476 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:11,487 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-20 10:53:11,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:53:11,682 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:53:11,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:53:11,683 INFO L85 PathProgramCache]: Analyzing trace with hash 1353786525, now seen corresponding path program 1 times [2022-11-20 10:53:11,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:53:11,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483287799] [2022-11-20 10:53:11,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:11,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:53:11,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:53:11,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:53:11,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 10:53:11,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:53:11,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:11,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:11,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 10:53:12,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-20 10:53:12,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:53:12,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-20 10:53:12,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,026 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-20 10:53:12,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:53:12,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483287799] [2022-11-20 10:53:12,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483287799] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:53:12,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [434341444] [2022-11-20 10:53:12,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:53:12,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:53:12,027 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:53:12,028 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:53:12,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 10:53:12,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:53:12,139 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 10:53:12,142 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:53:12,376 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-20 10:53:12,377 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:53:12,778 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-20 10:53:12,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [434341444] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:53:12,778 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:53:12,778 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2022-11-20 10:53:12,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470542509] [2022-11-20 10:53:12,779 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:53:12,779 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 10:53:12,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:53:12,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 10:53:12,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-20 10:53:12,781 INFO L87 Difference]: Start difference. First operand 616 states and 727 transitions. Second operand has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-20 10:53:14,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:53:14,674 INFO L93 Difference]: Finished difference Result 1299 states and 1586 transitions. [2022-11-20 10:53:14,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-20 10:53:14,675 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 97 [2022-11-20 10:53:14,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:53:14,677 INFO L225 Difference]: With dead ends: 1299 [2022-11-20 10:53:14,677 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 10:53:14,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 280 GetRequests, 204 SyntacticMatches, 7 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1289 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1117, Invalid=3853, Unknown=0, NotChecked=0, Total=4970 [2022-11-20 10:53:14,684 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 1032 mSDsluCounter, 529 mSDsCounter, 0 mSdLazyCounter, 1166 mSolverCounterSat, 426 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1034 SdHoareTripleChecker+Valid, 577 SdHoareTripleChecker+Invalid, 1592 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 426 IncrementalHoareTripleChecker+Valid, 1166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:53:14,684 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1034 Valid, 577 Invalid, 1592 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [426 Valid, 1166 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-20 10:53:14,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 10:53:14,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 10:53:14,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 10:53:14,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 10:53:14,687 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2022-11-20 10:53:14,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:53:14,687 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 10:53:14,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-20 10:53:14,688 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 10:53:14,688 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 10:53:14,692 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 10:53:14,705 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 10:53:14,905 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-20 10:53:14,907 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 10:53:20,175 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 318 324) no Hoare annotation was computed. [2022-11-20 10:53:20,176 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 318 324) the Hoare annotation is: true [2022-11-20 10:53:20,176 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 119 130) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2022-11-20 10:53:20,176 INFO L899 garLoopResultBuilder]: For program point L123-1(lines 119 130) no Hoare annotation was computed. [2022-11-20 10:53:20,176 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 119 130) no Hoare annotation was computed. [2022-11-20 10:53:20,176 INFO L895 garLoopResultBuilder]: At program point L407(lines 402 409) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:53:20,177 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:53:20,177 INFO L899 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2022-11-20 10:53:20,177 INFO L895 garLoopResultBuilder]: At program point L168(lines 163 171) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse11 (and .cse4 .cse10 .cse5 .cse6 .cse12 .cse8)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse2 .cse9 .cse3 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse11) (or .cse1 .cse2 .cse9 .cse3) (or .cse0 .cse2 (and (<= 1 ~pumpRunning~0) .cse6 .cse12) .cse11 .cse3)))) [2022-11-20 10:53:20,177 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 294 317) no Hoare annotation was computed. [2022-11-20 10:53:20,177 INFO L895 garLoopResultBuilder]: At program point L358(line 358) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:53:20,178 INFO L899 garLoopResultBuilder]: For program point L358-1(line 358) no Hoare annotation was computed. [2022-11-20 10:53:20,178 INFO L899 garLoopResultBuilder]: For program point L69(lines 69 82) no Hoare annotation was computed. [2022-11-20 10:53:20,178 INFO L895 garLoopResultBuilder]: At program point L69-1(lines 54 86) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse16 (= 1 ~systemActive~0)) (.cse10 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse11 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse5 (not .cse11)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and .cse7 .cse3 .cse8 .cse16 .cse10 .cse11 .cse4 .cse12)) (.cse13 (not .cse1)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not .cse16)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6) (or (and .cse7 .cse8 .cse5) .cse1 .cse2 .cse9 (and .cse3 .cse8 .cse5) .cse6) (or (and .cse7 .cse8 .cse10 .cse11 .cse12) .cse2 .cse9 .cse13 .cse6 (and .cse3 .cse8 .cse10 .cse11 .cse12)) (or .cse14 .cse0 .cse15 .cse2 .cse13) (or .cse0 .cse15 .cse2 (and (<= 1 ~pumpRunning~0) .cse11 .cse4) .cse13 .cse6) (or .cse14 .cse2 .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))))) [2022-11-20 10:53:20,178 INFO L895 garLoopResultBuilder]: At program point L61(line 61) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse6 .cse9 .cse7 .cse4)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not .cse3) (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse6 .cse7 .cse8) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse9 .cse7 .cse8) .cse5)) (or .cse1 (and .cse9 .cse4) .cse3 .cse2 .cse5) (or .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2)))) [2022-11-20 10:53:20,178 INFO L899 garLoopResultBuilder]: For program point L61-1(line 61) no Hoare annotation was computed. [2022-11-20 10:53:20,179 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-11-20 10:53:20,179 INFO L895 garLoopResultBuilder]: At program point L371-1(lines 352 376) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse6 .cse9 .cse7 .cse4)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not .cse3) (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse6 .cse7 .cse8) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse9 .cse7 .cse8) .cse5)) (or .cse1 (and .cse9 .cse4) .cse3 .cse2 .cse5) (or .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2)))) [2022-11-20 10:53:20,179 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2022-11-20 10:53:20,179 INFO L899 garLoopResultBuilder]: For program point L590(line 590) no Hoare annotation was computed. [2022-11-20 10:53:20,179 INFO L899 garLoopResultBuilder]: For program point L99(lines 99 103) no Hoare annotation was computed. [2022-11-20 10:53:20,179 INFO L895 garLoopResultBuilder]: At program point L99-2(lines 95 106) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:53:20,180 INFO L895 garLoopResultBuilder]: At program point L591(lines 586 593) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:53:20,180 INFO L895 garLoopResultBuilder]: At program point L426(lines 421 429) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2))) [2022-11-20 10:53:20,181 INFO L899 garLoopResultBuilder]: For program point L298-1(lines 297 316) no Hoare annotation was computed. [2022-11-20 10:53:20,181 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 368) no Hoare annotation was computed. [2022-11-20 10:53:20,181 INFO L899 garLoopResultBuilder]: For program point L356(lines 356 373) no Hoare annotation was computed. [2022-11-20 10:53:20,181 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 83) no Hoare annotation was computed. [2022-11-20 10:53:20,182 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 294 317) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-11-20 10:53:20,182 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 294 317) no Hoare annotation was computed. [2022-11-20 10:53:20,182 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 590) no Hoare annotation was computed. [2022-11-20 10:53:20,182 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2022-11-20 10:53:20,182 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 189 218) the Hoare annotation is: true [2022-11-20 10:53:20,182 INFO L902 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2022-11-20 10:53:20,183 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2022-11-20 10:53:20,183 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-11-20 10:53:20,183 INFO L902 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2022-11-20 10:53:20,183 INFO L899 garLoopResultBuilder]: For program point L200(line 200) no Hoare annotation was computed. [2022-11-20 10:53:20,183 INFO L902 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2022-11-20 10:53:20,183 INFO L902 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2022-11-20 10:53:20,184 INFO L899 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2022-11-20 10:53:20,184 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 131 139) the Hoare annotation is: true [2022-11-20 10:53:20,184 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 131 139) no Hoare annotation was computed. [2022-11-20 10:53:20,184 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 131 139) no Hoare annotation was computed. [2022-11-20 10:53:20,184 INFO L895 garLoopResultBuilder]: At program point L539(lines 496 541) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (not .cse2) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3) (and .cse5 .cse2 .cse1 .cse3 .cse4))) [2022-11-20 10:53:20,184 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-11-20 10:53:20,185 INFO L899 garLoopResultBuilder]: For program point L506-1(lines 506 512) no Hoare annotation was computed. [2022-11-20 10:53:20,185 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 282) no Hoare annotation was computed. [2022-11-20 10:53:20,185 INFO L899 garLoopResultBuilder]: For program point L498(lines 498 502) no Hoare annotation was computed. [2022-11-20 10:53:20,185 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 282) no Hoare annotation was computed. [2022-11-20 10:53:20,185 INFO L895 garLoopResultBuilder]: At program point L581(lines 576 584) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:53:20,185 INFO L902 garLoopResultBuilder]: At program point L259(lines 252 261) the Hoare annotation is: true [2022-11-20 10:53:20,186 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 10:53:20,186 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 10:53:20,186 INFO L895 garLoopResultBuilder]: At program point L573(lines 569 575) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:53:20,186 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 10:53:20,186 INFO L902 garLoopResultBuilder]: At program point L284(lines 265 287) the Hoare annotation is: true [2022-11-20 10:53:20,186 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 536) no Hoare annotation was computed. [2022-11-20 10:53:20,187 INFO L895 garLoopResultBuilder]: At program point L532-2(lines 526 537) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-20 10:53:20,187 INFO L899 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2022-11-20 10:53:20,187 INFO L899 garLoopResultBuilder]: For program point L516-1(lines 516 522) no Hoare annotation was computed. [2022-11-20 10:53:20,187 INFO L902 garLoopResultBuilder]: At program point L545(lines 486 549) the Hoare annotation is: true [2022-11-20 10:53:20,187 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 10:53:20,187 INFO L895 garLoopResultBuilder]: At program point L508(line 508) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 (not .cse2) .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse3) (and .cse0 .cse6 .cse1 .cse3) (and .cse5 .cse2 .cse1 .cse3 .cse4))) [2022-11-20 10:53:20,188 INFO L895 garLoopResultBuilder]: At program point L248(lines 244 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:53:20,188 INFO L895 garLoopResultBuilder]: At program point L566(lines 562 568) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:53:20,188 INFO L895 garLoopResultBuilder]: At program point L542(lines 495 543) the Hoare annotation is: false [2022-11-20 10:53:20,188 INFO L899 garLoopResultBuilder]: For program point L497(lines 496 541) no Hoare annotation was computed. [2022-11-20 10:53:20,188 INFO L899 garLoopResultBuilder]: For program point L526(lines 526 537) no Hoare annotation was computed. [2022-11-20 10:53:20,188 INFO L895 garLoopResultBuilder]: At program point L518(line 518) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2022-11-20 10:53:20,189 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 107 118) no Hoare annotation was computed. [2022-11-20 10:53:20,189 INFO L899 garLoopResultBuilder]: For program point L111-1(lines 107 118) no Hoare annotation was computed. [2022-11-20 10:53:20,189 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 107 118) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3) (or .cse6 .cse1 .cse0 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse3))) [2022-11-20 10:53:20,189 INFO L895 garLoopResultBuilder]: At program point L481(lines 466 484) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse1 (not .cse5)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not .cse6)) (.cse3 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse4 .cse5 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1|) .cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 .cse1) (or .cse2 .cse0 .cse3 (and .cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (not (<= ~waterLevel~0 2)))))) [2022-11-20 10:53:20,190 INFO L895 garLoopResultBuilder]: At program point L382(lines 377 384) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~4#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (or .cse2 (= ~methaneLevelCritical~0 0) .cse0 .cse3) (or .cse2 .cse0 .cse1))) [2022-11-20 10:53:20,190 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2022-11-20 10:53:20,190 INFO L899 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2022-11-20 10:53:20,190 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:53:20,190 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 326 350) no Hoare annotation was computed. [2022-11-20 10:53:20,191 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 182) no Hoare annotation was computed. [2022-11-20 10:53:20,191 INFO L895 garLoopResultBuilder]: At program point L181(lines 172 185) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse3 (not .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 .cse1 (and .cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse2)))) [2022-11-20 10:53:20,191 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) (= ~pumpRunning~0 0) .cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_~tmp~2#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))))) [2022-11-20 10:53:20,191 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 326 350) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-11-20 10:53:20,191 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 342) no Hoare annotation was computed. [2022-11-20 10:53:20,192 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 326 350) no Hoare annotation was computed. [2022-11-20 10:53:20,192 INFO L899 garLoopResultBuilder]: For program point L330(lines 330 347) no Hoare annotation was computed. [2022-11-20 10:53:20,192 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 398) no Hoare annotation was computed. [2022-11-20 10:53:20,195 INFO L895 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 .cse1 .cse2))) [2022-11-20 10:53:20,196 INFO L895 garLoopResultBuilder]: At program point L392-2(lines 385 401) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse9 (not (<= ~waterLevel~0 2))) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse5 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) (.cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0)) (.cse7 (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|)) (.cse8 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (and (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~4#1| ~methaneLevelCritical~0) (= ~pumpRunning~0 0) .cse4 .cse5 .cse6 .cse7 .cse8) .cse9) (or .cse2 .cse0 (not .cse3) .cse9 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~4#1| 0) .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse2 .cse0 .cse1))) [2022-11-20 10:53:20,196 INFO L899 garLoopResultBuilder]: For program point L390-1(line 390) no Hoare annotation was computed. [2022-11-20 10:53:20,196 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 410 420) the Hoare annotation is: true [2022-11-20 10:53:20,196 INFO L902 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: true [2022-11-20 10:53:20,196 INFO L899 garLoopResultBuilder]: For program point L415-1(line 415) no Hoare annotation was computed. [2022-11-20 10:53:20,196 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 410 420) no Hoare annotation was computed. [2022-11-20 10:53:20,197 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 410 420) no Hoare annotation was computed. [2022-11-20 10:53:20,200 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:53:20,207 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 10:53:20,271 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 10:53:20 BoogieIcfgContainer [2022-11-20 10:53:20,281 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 10:53:20,282 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 10:53:20,282 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 10:53:20,282 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 10:53:20,283 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:53:03" (3/4) ... [2022-11-20 10:53:20,286 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 10:53:20,297 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 10:53:20,298 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 10:53:20,304 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2022-11-20 10:53:20,305 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 10:53:20,305 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 10:53:20,305 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:53:20,306 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:53:20,334 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:53:20,335 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) [2022-11-20 10:53:20,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) [2022-11-20 10:53:20,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:53:20,338 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:53:20,339 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((tmp == methaneLevelCritical && pumpRunning == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-20 10:53:20,339 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-20 10:53:20,340 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) [2022-11-20 10:53:20,340 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:53:20,340 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) [2022-11-20 10:53:20,341 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:53:20,382 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 10:53:20,382 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 10:53:20,383 INFO L158 Benchmark]: Toolchain (without parser) took 17779.27ms. Allocated memory was 138.4MB in the beginning and 268.4MB in the end (delta: 130.0MB). Free memory was 69.7MB in the beginning and 158.8MB in the end (delta: -89.1MB). Peak memory consumption was 43.4MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,383 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 138.4MB. Free memory was 111.7MB in the beginning and 111.6MB in the end (delta: 80.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 10:53:20,384 INFO L158 Benchmark]: CACSL2BoogieTranslator took 535.91ms. Allocated memory was 138.4MB in the beginning and 182.5MB in the end (delta: 44.0MB). Free memory was 69.5MB in the beginning and 137.2MB in the end (delta: -67.7MB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,385 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.62ms. Allocated memory is still 182.5MB. Free memory was 136.5MB in the beginning and 134.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,385 INFO L158 Benchmark]: Boogie Preprocessor took 39.83ms. Allocated memory is still 182.5MB. Free memory was 134.4MB in the beginning and 133.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,385 INFO L158 Benchmark]: RCFGBuilder took 512.51ms. Allocated memory is still 182.5MB. Free memory was 133.0MB in the beginning and 149.1MB in the end (delta: -16.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,386 INFO L158 Benchmark]: TraceAbstraction took 16513.93ms. Allocated memory was 182.5MB in the beginning and 268.4MB in the end (delta: 86.0MB). Free memory was 148.1MB in the beginning and 165.1MB in the end (delta: -17.0MB). Peak memory consumption was 159.1MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,386 INFO L158 Benchmark]: Witness Printer took 100.43ms. Allocated memory is still 268.4MB. Free memory was 165.1MB in the beginning and 158.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 10:53:20,389 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 138.4MB. Free memory was 111.7MB in the beginning and 111.6MB in the end (delta: 80.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 535.91ms. Allocated memory was 138.4MB in the beginning and 182.5MB in the end (delta: 44.0MB). Free memory was 69.5MB in the beginning and 137.2MB in the end (delta: -67.7MB). Peak memory consumption was 12.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.62ms. Allocated memory is still 182.5MB. Free memory was 136.5MB in the beginning and 134.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.83ms. Allocated memory is still 182.5MB. Free memory was 134.4MB in the beginning and 133.0MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 512.51ms. Allocated memory is still 182.5MB. Free memory was 133.0MB in the beginning and 149.1MB in the end (delta: -16.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 16513.93ms. Allocated memory was 182.5MB in the beginning and 268.4MB in the end (delta: 86.0MB). Free memory was 148.1MB in the beginning and 165.1MB in the end (delta: -17.0MB). Peak memory consumption was 159.1MB. Max. memory is 16.1GB. * Witness Printer took 100.43ms. Allocated memory is still 268.4MB. Free memory was 165.1MB in the beginning and 158.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 590]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.3s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2962 SdHoareTripleChecker+Valid, 3.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2919 mSDsluCounter, 4524 SdHoareTripleChecker+Invalid, 2.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3365 mSDsCounter, 1062 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4083 IncrementalHoareTripleChecker+Invalid, 5145 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1062 mSolverCounterUnsat, 1159 mSDtfsCounter, 4083 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 627 GetRequests, 421 SyntacticMatches, 7 SemanticMatches, 199 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1708 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=762occurred in iteration=11, InterpolantAutomatonStates: 170, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 154 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2383 PreInvPairs, 2626 NumberOfFragments, 1883 HoareAnnotationTreeSize, 2383 FomulaSimplifications, 152 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 43 FomulaSimplificationsInter, 10135 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 921 NumberOfCodeBlocks, 921 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1002 ConstructedInterpolants, 0 QuantifiedInterpolants, 1734 SizeOfPredicates, 6 NumberOfNonLiveVariables, 664 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 208/246 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && 1 == systemActive) && !(methaneLevelCritical == 0)) && splverifierCounter == 0) && waterLevel <= 2) || (((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) - InvariantResult [Line: 495]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 352]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 385]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((tmp == methaneLevelCritical && pumpRunning == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 2)) || ((((((1 <= pumpRunning && tmp == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) RESULT: Ultimate proved your program to be correct! [2022-11-20 10:53:20,437 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4f068cf-4f07-429a-8e43-aa167489f55d/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE