./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 14:00:26,292 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 14:00:26,295 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 14:00:26,337 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 14:00:26,341 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 14:00:26,346 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 14:00:26,349 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 14:00:26,353 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 14:00:26,355 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 14:00:26,363 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 14:00:26,364 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 14:00:26,366 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 14:00:26,368 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 14:00:26,370 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 14:00:26,375 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 14:00:26,376 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 14:00:26,379 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 14:00:26,380 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 14:00:26,382 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 14:00:26,384 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 14:00:26,390 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 14:00:26,392 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 14:00:26,395 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 14:00:26,396 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 14:00:26,400 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 14:00:26,403 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 14:00:26,403 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 14:00:26,404 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 14:00:26,406 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 14:00:26,409 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 14:00:26,410 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 14:00:26,411 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 14:00:26,413 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 14:00:26,414 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 14:00:26,417 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 14:00:26,417 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 14:00:26,418 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 14:00:26,418 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 14:00:26,418 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 14:00:26,420 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 14:00:26,421 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 14:00:26,422 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-21 14:00:26,466 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 14:00:26,466 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 14:00:26,467 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-21 14:00:26,467 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-21 14:00:26,468 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-21 14:00:26,469 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-21 14:00:26,470 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 14:00:26,470 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 14:00:26,470 INFO L138 SettingsManager]: * Use SBE=true [2022-11-21 14:00:26,470 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 14:00:26,472 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-21 14:00:26,472 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 14:00:26,472 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-21 14:00:26,473 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 14:00:26,473 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-21 14:00:26,473 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-21 14:00:26,473 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-21 14:00:26,473 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-21 14:00:26,474 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 14:00:26,474 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 14:00:26,474 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-21 14:00:26,474 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 14:00:26,475 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-21 14:00:26,475 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-21 14:00:26,475 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 14:00:26,475 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 14:00:26,476 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-21 14:00:26,476 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-21 14:00:26,477 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-21 14:00:26,477 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-21 14:00:26,477 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-21 14:00:26,478 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-21 14:00:26,478 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-21 14:00:26,478 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea [2022-11-21 14:00:26,789 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 14:00:26,814 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 14:00:26,817 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 14:00:26,818 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 14:00:26,819 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 14:00:26,820 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-11-21 14:00:30,032 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 14:00:30,304 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 14:00:30,305 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-11-21 14:00:30,316 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/data/6e0e1a156/57a578ecee794b5abce9d052d1c5bd8a/FLAG1ac4c6bf7 [2022-11-21 14:00:30,333 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/data/6e0e1a156/57a578ecee794b5abce9d052d1c5bd8a [2022-11-21 14:00:30,336 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 14:00:30,338 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 14:00:30,340 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 14:00:30,340 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 14:00:30,349 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 14:00:30,350 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:30,355 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2567511f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30, skipping insertion in model container [2022-11-21 14:00:30,355 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:30,364 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 14:00:30,428 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 14:00:30,598 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-11-21 14:00:30,752 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 14:00:30,777 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 14:00:30,811 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-11-21 14:00:30,881 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 14:00:30,913 INFO L208 MainTranslator]: Completed translation [2022-11-21 14:00:30,913 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30 WrapperNode [2022-11-21 14:00:30,913 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 14:00:30,915 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 14:00:30,915 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 14:00:30,915 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 14:00:30,923 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:30,942 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:30,985 INFO L138 Inliner]: procedures = 55, calls = 101, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 185 [2022-11-21 14:00:30,985 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 14:00:30,987 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 14:00:30,987 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 14:00:30,987 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 14:00:30,998 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:30,998 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,011 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,026 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,031 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,036 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,037 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,040 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,043 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 14:00:31,044 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 14:00:31,044 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 14:00:31,044 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 14:00:31,045 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (1/1) ... [2022-11-21 14:00:31,066 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 14:00:31,082 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:00:31,096 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-21 14:00:31,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-21 14:00:31,149 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 14:00:31,150 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-21 14:00:31,150 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-21 14:00:31,150 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-21 14:00:31,150 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-21 14:00:31,151 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-21 14:00:31,151 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-21 14:00:31,151 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-21 14:00:31,152 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-21 14:00:31,152 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-21 14:00:31,152 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-21 14:00:31,153 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:00:31,153 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:00:31,153 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-21 14:00:31,153 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-21 14:00:31,153 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-21 14:00:31,154 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-21 14:00:31,154 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 14:00:31,154 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-21 14:00:31,154 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-21 14:00:31,154 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 14:00:31,155 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 14:00:31,300 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 14:00:31,303 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 14:00:31,699 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 14:00:31,708 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 14:00:31,708 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-21 14:00:31,711 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:00:31 BoogieIcfgContainer [2022-11-21 14:00:31,711 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 14:00:31,753 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-21 14:00:31,753 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-21 14:00:31,758 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-21 14:00:31,762 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 02:00:30" (1/3) ... [2022-11-21 14:00:31,763 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18f7fca6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 02:00:31, skipping insertion in model container [2022-11-21 14:00:31,764 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:00:30" (2/3) ... [2022-11-21 14:00:31,764 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@18f7fca6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 02:00:31, skipping insertion in model container [2022-11-21 14:00:31,764 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:00:31" (3/3) ... [2022-11-21 14:00:31,766 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2022-11-21 14:00:31,816 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-21 14:00:31,817 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-21 14:00:31,881 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-21 14:00:31,889 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6b227ab6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-21 14:00:31,890 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-21 14:00:31,895 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-21 14:00:31,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-21 14:00:31,908 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:31,909 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:31,910 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:31,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:31,917 INFO L85 PathProgramCache]: Analyzing trace with hash -707310338, now seen corresponding path program 1 times [2022-11-21 14:00:31,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:31,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1256998570] [2022-11-21 14:00:31,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:31,930 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:32,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-21 14:00:32,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,152 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:00:32,153 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:32,154 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1256998570] [2022-11-21 14:00:32,155 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1256998570] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:32,155 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:32,155 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-21 14:00:32,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518338843] [2022-11-21 14:00:32,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:32,164 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-21 14:00:32,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:32,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-21 14:00:32,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 14:00:32,202 INFO L87 Difference]: Start difference. First operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:32,247 INFO L93 Difference]: Finished difference Result 192 states and 259 transitions. [2022-11-21 14:00:32,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-21 14:00:32,250 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-21 14:00:32,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:32,262 INFO L225 Difference]: With dead ends: 192 [2022-11-21 14:00:32,262 INFO L226 Difference]: Without dead ends: 91 [2022-11-21 14:00:32,267 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 14:00:32,278 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:32,280 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:00:32,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-21 14:00:32,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-11-21 14:00:32,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-21 14:00:32,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2022-11-21 14:00:32,337 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 23 [2022-11-21 14:00:32,337 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:32,337 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2022-11-21 14:00:32,338 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,338 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-11-21 14:00:32,341 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-21 14:00:32,341 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:32,342 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:32,342 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-21 14:00:32,342 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:32,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:32,343 INFO L85 PathProgramCache]: Analyzing trace with hash 624156156, now seen corresponding path program 1 times [2022-11-21 14:00:32,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:32,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2045319690] [2022-11-21 14:00:32,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:32,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:32,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-21 14:00:32,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,460 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:00:32,461 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:32,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2045319690] [2022-11-21 14:00:32,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2045319690] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:32,462 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:32,462 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 14:00:32,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499555271] [2022-11-21 14:00:32,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:32,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 14:00:32,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:32,466 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 14:00:32,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:00:32,466 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,491 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:32,492 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-11-21 14:00:32,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 14:00:32,493 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-21 14:00:32,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:32,495 INFO L225 Difference]: With dead ends: 144 [2022-11-21 14:00:32,495 INFO L226 Difference]: Without dead ends: 82 [2022-11-21 14:00:32,496 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:00:32,498 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 16 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:32,499 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:00:32,500 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-21 14:00:32,510 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-11-21 14:00:32,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-21 14:00:32,512 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-11-21 14:00:32,513 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 24 [2022-11-21 14:00:32,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:32,513 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-11-21 14:00:32,514 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,514 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-11-21 14:00:32,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-21 14:00:32,516 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:32,516 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:32,516 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-21 14:00:32,517 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:32,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:32,518 INFO L85 PathProgramCache]: Analyzing trace with hash -1800989914, now seen corresponding path program 1 times [2022-11-21 14:00:32,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:32,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1526351351] [2022-11-21 14:00:32,519 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:32,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:32,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 14:00:32,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:32,616 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:00:32,617 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:32,617 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1526351351] [2022-11-21 14:00:32,618 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1526351351] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:32,618 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:32,618 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 14:00:32,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [658366977] [2022-11-21 14:00:32,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:32,619 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 14:00:32,619 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:32,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 14:00:32,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:00:32,621 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:32,676 INFO L93 Difference]: Finished difference Result 231 states and 301 transitions. [2022-11-21 14:00:32,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 14:00:32,677 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-21 14:00:32,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:32,680 INFO L225 Difference]: With dead ends: 231 [2022-11-21 14:00:32,683 INFO L226 Difference]: Without dead ends: 156 [2022-11-21 14:00:32,685 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:00:32,687 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:32,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 228 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:00:32,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-11-21 14:00:32,739 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 153. [2022-11-21 14:00:32,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 110 states have (on average 1.3363636363636364) internal successors, (147), 125 states have internal predecessors, (147), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-11-21 14:00:32,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 199 transitions. [2022-11-21 14:00:32,760 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 199 transitions. Word has length 28 [2022-11-21 14:00:32,760 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:32,760 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 199 transitions. [2022-11-21 14:00:32,761 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:32,761 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 199 transitions. [2022-11-21 14:00:32,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-21 14:00:32,763 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:32,763 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:32,764 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-21 14:00:32,764 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:32,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:32,765 INFO L85 PathProgramCache]: Analyzing trace with hash -40246052, now seen corresponding path program 1 times [2022-11-21 14:00:32,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:32,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [888410822] [2022-11-21 14:00:32,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:32,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:32,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-21 14:00:33,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:00:33,049 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:33,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [888410822] [2022-11-21 14:00:33,050 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [888410822] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:33,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:33,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-21 14:00:33,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390714660] [2022-11-21 14:00:33,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:33,051 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-21 14:00:33,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:33,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 14:00:33,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-21 14:00:33,054 INFO L87 Difference]: Start difference. First operand 153 states and 199 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:33,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:33,216 INFO L93 Difference]: Finished difference Result 405 states and 536 transitions. [2022-11-21 14:00:33,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-21 14:00:33,217 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-21 14:00:33,218 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:33,220 INFO L225 Difference]: With dead ends: 405 [2022-11-21 14:00:33,220 INFO L226 Difference]: Without dead ends: 259 [2022-11-21 14:00:33,221 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-21 14:00:33,223 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 68 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 398 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:33,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 398 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-21 14:00:33,225 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-21 14:00:33,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 246. [2022-11-21 14:00:33,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 179 states have (on average 1.2905027932960893) internal successors, (231), 196 states have internal predecessors, (231), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2022-11-21 14:00:33,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 311 transitions. [2022-11-21 14:00:33,287 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 311 transitions. Word has length 32 [2022-11-21 14:00:33,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:33,287 INFO L495 AbstractCegarLoop]: Abstraction has 246 states and 311 transitions. [2022-11-21 14:00:33,288 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 14:00:33,288 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 311 transitions. [2022-11-21 14:00:33,290 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-21 14:00:33,290 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:33,300 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:33,301 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-21 14:00:33,301 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:33,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:33,302 INFO L85 PathProgramCache]: Analyzing trace with hash -1083319393, now seen corresponding path program 1 times [2022-11-21 14:00:33,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:33,302 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030467307] [2022-11-21 14:00:33,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:33,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:33,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 14:00:33,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:33,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:33,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-21 14:00:33,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:33,565 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 14:00:33,567 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:33,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030467307] [2022-11-21 14:00:33,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1030467307] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:33,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:33,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 14:00:33,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280118378] [2022-11-21 14:00:33,574 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:33,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 14:00:33,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:33,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 14:00:33,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-21 14:00:33,576 INFO L87 Difference]: Start difference. First operand 246 states and 311 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 14:00:34,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:34,060 INFO L93 Difference]: Finished difference Result 569 states and 736 transitions. [2022-11-21 14:00:34,061 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-21 14:00:34,061 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-21 14:00:34,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:34,071 INFO L225 Difference]: With dead ends: 569 [2022-11-21 14:00:34,072 INFO L226 Difference]: Without dead ends: 330 [2022-11-21 14:00:34,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2022-11-21 14:00:34,083 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 248 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 212 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 288 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 212 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:34,090 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 394 Invalid, 288 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 212 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-21 14:00:34,091 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2022-11-21 14:00:34,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 294. [2022-11-21 14:00:34,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 217 states have (on average 1.2672811059907834) internal successors, (275), 234 states have internal predecessors, (275), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-21 14:00:34,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 369 transitions. [2022-11-21 14:00:34,144 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 369 transitions. Word has length 54 [2022-11-21 14:00:34,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:34,144 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 369 transitions. [2022-11-21 14:00:34,145 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 14:00:34,145 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 369 transitions. [2022-11-21 14:00:34,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-21 14:00:34,155 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:34,156 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:34,156 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-21 14:00:34,156 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:34,156 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:34,157 INFO L85 PathProgramCache]: Analyzing trace with hash -1105951647, now seen corresponding path program 1 times [2022-11-21 14:00:34,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:34,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1321229617] [2022-11-21 14:00:34,157 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:34,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:34,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 14:00:34,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:34,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:34,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-21 14:00:34,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,341 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 14:00:34,341 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:34,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1321229617] [2022-11-21 14:00:34,342 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1321229617] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:34,342 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:34,342 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 14:00:34,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802678324] [2022-11-21 14:00:34,342 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:34,343 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 14:00:34,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:34,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 14:00:34,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-21 14:00:34,344 INFO L87 Difference]: Start difference. First operand 294 states and 369 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 14:00:34,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:34,611 INFO L93 Difference]: Finished difference Result 599 states and 772 transitions. [2022-11-21 14:00:34,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-21 14:00:34,611 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-21 14:00:34,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:34,615 INFO L225 Difference]: With dead ends: 599 [2022-11-21 14:00:34,616 INFO L226 Difference]: Without dead ends: 312 [2022-11-21 14:00:34,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-21 14:00:34,620 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 67 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:34,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 334 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 14:00:34,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-11-21 14:00:34,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 300. [2022-11-21 14:00:34,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 223 states have (on average 1.2600896860986548) internal successors, (281), 240 states have internal predecessors, (281), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-21 14:00:34,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 375 transitions. [2022-11-21 14:00:34,664 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 375 transitions. Word has length 54 [2022-11-21 14:00:34,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:34,664 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 375 transitions. [2022-11-21 14:00:34,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 14:00:34,665 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 375 transitions. [2022-11-21 14:00:34,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-21 14:00:34,666 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:34,666 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:34,667 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-21 14:00:34,667 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:34,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:34,668 INFO L85 PathProgramCache]: Analyzing trace with hash -808559779, now seen corresponding path program 1 times [2022-11-21 14:00:34,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:34,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760056269] [2022-11-21 14:00:34,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:34,668 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:34,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 14:00:34,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:34,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:34,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-21 14:00:34,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:34,765 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 14:00:34,765 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:34,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760056269] [2022-11-21 14:00:34,766 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [760056269] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:34,766 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:34,766 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-21 14:00:34,767 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831209956] [2022-11-21 14:00:34,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:34,767 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-21 14:00:34,767 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:34,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 14:00:34,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-21 14:00:34,768 INFO L87 Difference]: Start difference. First operand 300 states and 375 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-21 14:00:35,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:35,084 INFO L93 Difference]: Finished difference Result 841 states and 1094 transitions. [2022-11-21 14:00:35,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-21 14:00:35,085 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 54 [2022-11-21 14:00:35,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:35,088 INFO L225 Difference]: With dead ends: 841 [2022-11-21 14:00:35,089 INFO L226 Difference]: Without dead ends: 548 [2022-11-21 14:00:35,090 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-21 14:00:35,091 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 222 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:35,092 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 293 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 14:00:35,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-21 14:00:35,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 541. [2022-11-21 14:00:35,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 541 states, 404 states have (on average 1.24009900990099) internal successors, (501), 430 states have internal predecessors, (501), 71 states have call successors, (71), 63 states have call predecessors, (71), 65 states have return successors, (109), 70 states have call predecessors, (109), 71 states have call successors, (109) [2022-11-21 14:00:35,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 541 states and 681 transitions. [2022-11-21 14:00:35,142 INFO L78 Accepts]: Start accepts. Automaton has 541 states and 681 transitions. Word has length 54 [2022-11-21 14:00:35,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:35,143 INFO L495 AbstractCegarLoop]: Abstraction has 541 states and 681 transitions. [2022-11-21 14:00:35,143 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-21 14:00:35,143 INFO L276 IsEmpty]: Start isEmpty. Operand 541 states and 681 transitions. [2022-11-21 14:00:35,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-21 14:00:35,145 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:35,145 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:35,145 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-21 14:00:35,146 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:35,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:35,146 INFO L85 PathProgramCache]: Analyzing trace with hash -734125181, now seen corresponding path program 1 times [2022-11-21 14:00:35,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:35,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548899024] [2022-11-21 14:00:35,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:35,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:35,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:00:35,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-21 14:00:35,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:35,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:35,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-21 14:00:35,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:35,470 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 14:00:35,470 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:35,470 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548899024] [2022-11-21 14:00:35,470 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548899024] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:35,471 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:35,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-21 14:00:35,471 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [636995844] [2022-11-21 14:00:35,471 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:35,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-21 14:00:35,472 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:35,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-21 14:00:35,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-21 14:00:35,473 INFO L87 Difference]: Start difference. First operand 541 states and 681 transitions. Second operand has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 14:00:36,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:36,634 INFO L93 Difference]: Finished difference Result 1801 states and 2387 transitions. [2022-11-21 14:00:36,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-21 14:00:36,635 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-11-21 14:00:36,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:36,642 INFO L225 Difference]: With dead ends: 1801 [2022-11-21 14:00:36,642 INFO L226 Difference]: Without dead ends: 1267 [2022-11-21 14:00:36,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-11-21 14:00:36,646 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 374 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 873 mSolverCounterSat, 156 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 543 SdHoareTripleChecker+Invalid, 1029 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 156 IncrementalHoareTripleChecker+Valid, 873 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:36,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 543 Invalid, 1029 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [156 Valid, 873 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-21 14:00:36,648 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1267 states. [2022-11-21 14:00:36,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1267 to 1171. [2022-11-21 14:00:36,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1171 states, 860 states have (on average 1.2093023255813953) internal successors, (1040), 925 states have internal predecessors, (1040), 168 states have call successors, (168), 122 states have call predecessors, (168), 142 states have return successors, (294), 166 states have call predecessors, (294), 168 states have call successors, (294) [2022-11-21 14:00:36,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1171 states to 1171 states and 1502 transitions. [2022-11-21 14:00:36,770 INFO L78 Accepts]: Start accepts. Automaton has 1171 states and 1502 transitions. Word has length 58 [2022-11-21 14:00:36,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:36,770 INFO L495 AbstractCegarLoop]: Abstraction has 1171 states and 1502 transitions. [2022-11-21 14:00:36,771 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 14:00:36,771 INFO L276 IsEmpty]: Start isEmpty. Operand 1171 states and 1502 transitions. [2022-11-21 14:00:36,774 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-21 14:00:36,774 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:36,774 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:36,775 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-21 14:00:36,775 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:36,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:36,775 INFO L85 PathProgramCache]: Analyzing trace with hash -353852961, now seen corresponding path program 1 times [2022-11-21 14:00:36,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:36,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1470866469] [2022-11-21 14:00:36,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:36,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:36,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:00:36,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-21 14:00:36,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:00:36,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:36,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:36,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-21 14:00:36,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-21 14:00:36,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-21 14:00:36,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:36,894 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-21 14:00:36,894 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:36,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1470866469] [2022-11-21 14:00:36,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1470866469] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:36,895 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:00:36,895 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-21 14:00:36,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112830406] [2022-11-21 14:00:36,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:36,896 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-21 14:00:36,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:36,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 14:00:36,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-21 14:00:36,897 INFO L87 Difference]: Start difference. First operand 1171 states and 1502 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-21 14:00:37,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:37,451 INFO L93 Difference]: Finished difference Result 1419 states and 1810 transitions. [2022-11-21 14:00:37,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-21 14:00:37,452 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 89 [2022-11-21 14:00:37,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:37,456 INFO L225 Difference]: With dead ends: 1419 [2022-11-21 14:00:37,456 INFO L226 Difference]: Without dead ends: 592 [2022-11-21 14:00:37,459 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-11-21 14:00:37,460 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 311 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 506 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:37,460 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 237 Invalid, 506 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-21 14:00:37,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-11-21 14:00:37,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 572. [2022-11-21 14:00:37,519 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 572 states, 420 states have (on average 1.1714285714285715) internal successors, (492), 450 states have internal predecessors, (492), 81 states have call successors, (81), 60 states have call predecessors, (81), 70 states have return successors, (144), 81 states have call predecessors, (144), 81 states have call successors, (144) [2022-11-21 14:00:37,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 572 states to 572 states and 717 transitions. [2022-11-21 14:00:37,523 INFO L78 Accepts]: Start accepts. Automaton has 572 states and 717 transitions. Word has length 89 [2022-11-21 14:00:37,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:37,524 INFO L495 AbstractCegarLoop]: Abstraction has 572 states and 717 transitions. [2022-11-21 14:00:37,524 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-21 14:00:37,524 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 717 transitions. [2022-11-21 14:00:37,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-21 14:00:37,526 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:00:37,527 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:37,527 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-21 14:00:37,527 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:00:37,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:00:37,527 INFO L85 PathProgramCache]: Analyzing trace with hash -753408287, now seen corresponding path program 1 times [2022-11-21 14:00:37,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:00:37,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927411197] [2022-11-21 14:00:37,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:37,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:00:37,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:00:37,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-21 14:00:37,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:00:37,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:00:37,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:37,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-21 14:00:37,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-21 14:00:37,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-21 14:00:37,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 14:00:37,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-21 14:00:37,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:00:37,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-11-21 14:00:37,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:37,894 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-21 14:00:37,894 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:00:37,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927411197] [2022-11-21 14:00:37,895 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927411197] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 14:00:37,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1796347444] [2022-11-21 14:00:37,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:00:37,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 14:00:37,895 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:00:37,902 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 14:00:37,908 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-21 14:00:38,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:00:38,068 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-21 14:00:38,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 14:00:38,352 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-21 14:00:38,352 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-21 14:00:38,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1796347444] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:00:38,353 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-21 14:00:38,353 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-11-21 14:00:38,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [701271752] [2022-11-21 14:00:38,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:00:38,354 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-21 14:00:38,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:00:38,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 14:00:38,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-21 14:00:38,355 INFO L87 Difference]: Start difference. First operand 572 states and 717 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-21 14:00:38,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:00:38,573 INFO L93 Difference]: Finished difference Result 1278 states and 1600 transitions. [2022-11-21 14:00:38,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-21 14:00:38,574 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-11-21 14:00:38,575 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:00:38,576 INFO L225 Difference]: With dead ends: 1278 [2022-11-21 14:00:38,576 INFO L226 Difference]: Without dead ends: 0 [2022-11-21 14:00:38,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-11-21 14:00:38,584 INFO L413 NwaCegarLoop]: 176 mSDtfsCounter, 72 mSDsluCounter, 701 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 877 SdHoareTripleChecker+Invalid, 118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-21 14:00:38,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 877 Invalid, 118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-21 14:00:38,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-21 14:00:38,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-21 14:00:38,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:00:38,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-21 14:00:38,587 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2022-11-21 14:00:38,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:00:38,587 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-21 14:00:38,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-21 14:00:38,587 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-21 14:00:38,588 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-21 14:00:38,590 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-21 14:00:38,598 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-21 14:00:38,798 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-21 14:00:38,800 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-21 14:00:43,609 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 342 349) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-21 14:00:43,609 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 342 349) no Hoare annotation was computed. [2022-11-21 14:00:43,609 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 342 349) no Hoare annotation was computed. [2022-11-21 14:00:43,609 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 258 264) no Hoare annotation was computed. [2022-11-21 14:00:43,610 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 258 264) the Hoare annotation is: true [2022-11-21 14:00:43,610 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 158 169) no Hoare annotation was computed. [2022-11-21 14:00:43,610 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 158 169) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or .cse2 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-11-21 14:00:43,610 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 158 169) no Hoare annotation was computed. [2022-11-21 14:00:43,610 INFO L899 garLoopResultBuilder]: For program point L897(line 897) no Hoare annotation was computed. [2022-11-21 14:00:43,611 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 876 905) no Hoare annotation was computed. [2022-11-21 14:00:43,611 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 876 905) the Hoare annotation is: true [2022-11-21 14:00:43,611 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2022-11-21 14:00:43,611 INFO L902 garLoopResultBuilder]: At program point L890-1(lines 890 894) the Hoare annotation is: true [2022-11-21 14:00:43,611 INFO L899 garLoopResultBuilder]: For program point L887(line 887) no Hoare annotation was computed. [2022-11-21 14:00:43,611 INFO L902 garLoopResultBuilder]: At program point L886-2(lines 886 900) the Hoare annotation is: true [2022-11-21 14:00:43,612 INFO L902 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: true [2022-11-21 14:00:43,612 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-11-21 14:00:43,612 INFO L902 garLoopResultBuilder]: At program point L901(lines 876 905) the Hoare annotation is: true [2022-11-21 14:00:43,612 INFO L895 garLoopResultBuilder]: At program point L366(lines 361 369) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (and .cse4 .cse5) .cse2) (or .cse0 .cse6 .cse7) (or .cse0 (and .cse4 .cse5 .cse3) .cse7) (or .cse1 .cse6))) [2022-11-21 14:00:43,612 INFO L899 garLoopResultBuilder]: For program point L238-1(lines 237 256) no Hoare annotation was computed. [2022-11-21 14:00:43,613 INFO L899 garLoopResultBuilder]: For program point L300(lines 300 308) no Hoare annotation was computed. [2022-11-21 14:00:43,613 INFO L899 garLoopResultBuilder]: For program point L296(lines 296 313) no Hoare annotation was computed. [2022-11-21 14:00:43,613 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 234 257) no Hoare annotation was computed. [2022-11-21 14:00:43,613 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2022-11-21 14:00:43,613 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2022-11-21 14:00:43,614 INFO L895 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0))) (let ((.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse8)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse3) .cse5) (or .cse0 .cse6 .cse7 .cse5) (or .cse1 .cse2 (and .cse4 .cse8)) (or .cse1 (and .cse6 (<= 2 ~waterLevel~0)) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6) (and .cse4 .cse6 .cse8)) (or .cse0 .cse1 .cse7 .cse3)))) [2022-11-21 14:00:43,614 INFO L899 garLoopResultBuilder]: For program point L83(line 83) no Hoare annotation was computed. [2022-11-21 14:00:43,614 INFO L895 garLoopResultBuilder]: At program point L306(line 306) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,614 INFO L895 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse1 .cse2) (or .cse1 .cse4 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|))) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,615 INFO L895 garLoopResultBuilder]: At program point L298(line 298) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,615 INFO L899 garLoopResultBuilder]: For program point L298-1(line 298) no Hoare annotation was computed. [2022-11-21 14:00:43,615 INFO L895 garLoopResultBuilder]: At program point L59(line 59) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse3) (not (= 0 ~systemActive~0))) (or .cse4 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3))) [2022-11-21 14:00:43,615 INFO L899 garLoopResultBuilder]: For program point L59-1(line 59) no Hoare annotation was computed. [2022-11-21 14:00:43,616 INFO L895 garLoopResultBuilder]: At program point L311(line 311) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,616 INFO L895 garLoopResultBuilder]: At program point L311-1(lines 292 316) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,616 INFO L899 garLoopResultBuilder]: For program point L245-1(lines 245 251) no Hoare annotation was computed. [2022-11-21 14:00:43,617 INFO L895 garLoopResultBuilder]: At program point L84(lines 79 86) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,617 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 234 257) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (= 0 ~systemActive~0))) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2)))) [2022-11-21 14:00:43,617 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 234 257) no Hoare annotation was computed. [2022-11-21 14:00:43,617 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 142) no Hoare annotation was computed. [2022-11-21 14:00:43,617 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 83) no Hoare annotation was computed. [2022-11-21 14:00:43,618 INFO L895 garLoopResultBuilder]: At program point L138-2(lines 134 145) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,618 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 170 178) the Hoare annotation is: true [2022-11-21 14:00:43,618 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 170 178) no Hoare annotation was computed. [2022-11-21 14:00:43,618 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 170 178) no Hoare annotation was computed. [2022-11-21 14:00:43,618 INFO L902 garLoopResultBuilder]: At program point L944(lines 937 946) the Hoare annotation is: true [2022-11-21 14:00:43,619 INFO L895 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 14:00:43,619 INFO L899 garLoopResultBuilder]: For program point L453(lines 452 499) no Hoare annotation was computed. [2022-11-21 14:00:43,619 INFO L899 garLoopResultBuilder]: For program point L482(lines 482 495) no Hoare annotation was computed. [2022-11-21 14:00:43,619 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-21 14:00:43,619 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-21 14:00:43,619 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 964) no Hoare annotation was computed. [2022-11-21 14:00:43,620 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-21 14:00:43,620 INFO L899 garLoopResultBuilder]: For program point L957-2(lines 957 964) no Hoare annotation was computed. [2022-11-21 14:00:43,620 INFO L895 garLoopResultBuilder]: At program point L474(line 474) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-21 14:00:43,620 INFO L902 garLoopResultBuilder]: At program point L503(lines 442 507) the Hoare annotation is: true [2022-11-21 14:00:43,620 INFO L895 garLoopResultBuilder]: At program point L437(lines 425 439) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-11-21 14:00:43,620 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 468) no Hoare annotation was computed. [2022-11-21 14:00:43,621 INFO L899 garLoopResultBuilder]: For program point L462-1(lines 462 468) no Hoare annotation was computed. [2022-11-21 14:00:43,621 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 435) no Hoare annotation was computed. [2022-11-21 14:00:43,621 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 429 435) no Hoare annotation was computed. [2022-11-21 14:00:43,621 INFO L899 garLoopResultBuilder]: For program point L454(lines 454 458) no Hoare annotation was computed. [2022-11-21 14:00:43,621 INFO L902 garLoopResultBuilder]: At program point L966(lines 947 969) the Hoare annotation is: true [2022-11-21 14:00:43,621 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-21 14:00:43,622 INFO L895 garLoopResultBuilder]: At program point L500(lines 451 501) the Hoare annotation is: false [2022-11-21 14:00:43,622 INFO L899 garLoopResultBuilder]: For program point L488(lines 488 494) no Hoare annotation was computed. [2022-11-21 14:00:43,622 INFO L895 garLoopResultBuilder]: At program point L934(lines 930 936) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 14:00:43,622 INFO L895 garLoopResultBuilder]: At program point L488-2(lines 482 495) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-11-21 14:00:43,622 INFO L895 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 14:00:43,623 INFO L899 garLoopResultBuilder]: For program point L472(lines 472 478) no Hoare annotation was computed. [2022-11-21 14:00:43,623 INFO L899 garLoopResultBuilder]: For program point L472-1(lines 472 478) no Hoare annotation was computed. [2022-11-21 14:00:43,623 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 14:00:43,623 INFO L895 garLoopResultBuilder]: At program point L497(lines 452 499) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-21 14:00:43,623 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-21 14:00:43,624 INFO L895 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-11-21 14:00:43,624 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 146 157) no Hoare annotation was computed. [2022-11-21 14:00:43,624 INFO L899 garLoopResultBuilder]: For program point L150-1(lines 146 157) no Hoare annotation was computed. [2022-11-21 14:00:43,624 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 146 157) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-11-21 14:00:43,625 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-11-21 14:00:43,625 INFO L899 garLoopResultBuilder]: For program point L415-2(lines 415 419) no Hoare annotation was computed. [2022-11-21 14:00:43,625 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-11-21 14:00:43,625 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 266 290) no Hoare annotation was computed. [2022-11-21 14:00:43,625 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 221) no Hoare annotation was computed. [2022-11-21 14:00:43,626 INFO L895 garLoopResultBuilder]: At program point L220(lines 211 224) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse0 .cse2 .cse4) (not (= ~methaneLevelCritical~0 0)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4)))) [2022-11-21 14:00:43,626 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-21 14:00:43,626 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 282) no Hoare annotation was computed. [2022-11-21 14:00:43,626 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 266 290) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-21 14:00:43,627 INFO L899 garLoopResultBuilder]: For program point L270(lines 270 287) no Hoare annotation was computed. [2022-11-21 14:00:43,627 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-11-21 14:00:43,627 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 266 290) no Hoare annotation was computed. [2022-11-21 14:00:43,627 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse2)) (.cse1 (not .cse2))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)))))) [2022-11-21 14:00:43,627 INFO L895 garLoopResultBuilder]: At program point L332-2(lines 325 341) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-11-21 14:00:43,628 INFO L899 garLoopResultBuilder]: For program point L330-1(line 330) no Hoare annotation was computed. [2022-11-21 14:00:43,628 INFO L895 garLoopResultBuilder]: At program point L421(lines 406 424) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (and .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5)) (.cse1 (not .cse5)) (.cse2 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse3 .cse4 .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2022-11-21 14:00:43,628 INFO L895 garLoopResultBuilder]: At program point L322(lines 317 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2022-11-21 14:00:43,628 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 350 360) the Hoare annotation is: true [2022-11-21 14:00:43,629 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 350 360) no Hoare annotation was computed. [2022-11-21 14:00:43,629 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 350 360) no Hoare annotation was computed. [2022-11-21 14:00:43,629 INFO L902 garLoopResultBuilder]: At program point L355(line 355) the Hoare annotation is: true [2022-11-21 14:00:43,629 INFO L899 garLoopResultBuilder]: For program point L355-1(line 355) no Hoare annotation was computed. [2022-11-21 14:00:43,633 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:00:43,635 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-21 14:00:43,660 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 02:00:43 BoogieIcfgContainer [2022-11-21 14:00:43,660 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-21 14:00:43,661 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-21 14:00:43,661 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-21 14:00:43,661 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-21 14:00:43,662 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:00:31" (3/4) ... [2022-11-21 14:00:43,666 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-21 14:00:43,673 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-21 14:00:43,673 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-21 14:00:43,673 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-21 14:00:43,673 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-21 14:00:43,673 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-21 14:00:43,674 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-21 14:00:43,674 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-21 14:00:43,674 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:00:43,674 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-21 14:00:43,682 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2022-11-21 14:00:43,682 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-21 14:00:43,683 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-21 14:00:43,683 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 14:00:43,684 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 14:00:43,712 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-21 14:00:43,713 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-21 14:00:43,714 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-11-21 14:00:43,714 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-11-21 14:00:43,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && tmp == methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-21 14:00:43,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-21 14:00:43,715 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-11-21 14:00:43,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-21 14:00:43,716 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) [2022-11-21 14:00:43,738 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/witness.graphml [2022-11-21 14:00:43,739 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-21 14:00:43,739 INFO L158 Benchmark]: Toolchain (without parser) took 13401.41ms. Allocated memory was 136.3MB in the beginning and 207.6MB in the end (delta: 71.3MB). Free memory was 95.3MB in the beginning and 104.1MB in the end (delta: -8.8MB). Peak memory consumption was 63.3MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,740 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 136.3MB. Free memory was 107.3MB in the beginning and 107.1MB in the end (delta: 171.4kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,740 INFO L158 Benchmark]: CACSL2BoogieTranslator took 574.28ms. Allocated memory is still 136.3MB. Free memory was 95.3MB in the beginning and 76.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,740 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.03ms. Allocated memory is still 136.3MB. Free memory was 76.5MB in the beginning and 74.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,741 INFO L158 Benchmark]: Boogie Preprocessor took 56.57ms. Allocated memory is still 136.3MB. Free memory was 74.4MB in the beginning and 73.1MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 14:00:43,741 INFO L158 Benchmark]: RCFGBuilder took 667.42ms. Allocated memory is still 136.3MB. Free memory was 72.7MB in the beginning and 56.4MB in the end (delta: 16.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,742 INFO L158 Benchmark]: TraceAbstraction took 11907.87ms. Allocated memory was 136.3MB in the beginning and 207.6MB in the end (delta: 71.3MB). Free memory was 106.8MB in the beginning and 110.4MB in the end (delta: -3.6MB). Peak memory consumption was 121.7MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,742 INFO L158 Benchmark]: Witness Printer took 77.81ms. Allocated memory is still 207.6MB. Free memory was 110.4MB in the beginning and 104.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-21 14:00:43,744 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 136.3MB. Free memory was 107.3MB in the beginning and 107.1MB in the end (delta: 171.4kB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 574.28ms. Allocated memory is still 136.3MB. Free memory was 95.3MB in the beginning and 76.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.03ms. Allocated memory is still 136.3MB. Free memory was 76.5MB in the beginning and 74.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 56.57ms. Allocated memory is still 136.3MB. Free memory was 74.4MB in the beginning and 73.1MB in the end (delta: 1.3MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 667.42ms. Allocated memory is still 136.3MB. Free memory was 72.7MB in the beginning and 56.4MB in the end (delta: 16.3MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 11907.87ms. Allocated memory was 136.3MB in the beginning and 207.6MB in the end (delta: 71.3MB). Free memory was 106.8MB in the beginning and 110.4MB in the end (delta: -3.6MB). Peak memory consumption was 121.7MB. Max. memory is 16.1GB. * Witness Printer took 77.81ms. Allocated memory is still 207.6MB. Free memory was 110.4MB in the beginning and 104.1MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 83]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.8s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1513 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1463 mSDsluCounter, 3617 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2538 mSDsCounter, 448 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1950 IncrementalHoareTripleChecker+Invalid, 2398 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 448 mSolverCounterUnsat, 1079 mSDtfsCounter, 1950 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 298 GetRequests, 201 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 359 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1171occurred in iteration=8, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 187 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 1775 PreInvPairs, 2192 NumberOfFragments, 1381 HoareAnnotationTreeSize, 1775 FomulaSimplifications, 5624 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 45 FomulaSimplificationsInter, 15202 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 628 NumberOfCodeBlocks, 628 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 617 ConstructedInterpolants, 0 QuantifiedInterpolants, 1093 SizeOfPredicates, 3 NumberOfNonLiveVariables, 343 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 112/124 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 79]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && tmp == methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-21 14:00:43,779 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5dac49e7-2d19-47ca-b086-3462d51b685f/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE