./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 16:37:40,791 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 16:37:40,793 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 16:37:40,828 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 16:37:40,828 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 16:37:40,829 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 16:37:40,831 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 16:37:40,833 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 16:37:40,835 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 16:37:40,836 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 16:37:40,837 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 16:37:40,838 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 16:37:40,838 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 16:37:40,840 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 16:37:40,841 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 16:37:40,842 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 16:37:40,843 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 16:37:40,844 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 16:37:40,846 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 16:37:40,848 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 16:37:40,850 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 16:37:40,851 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 16:37:40,852 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 16:37:40,853 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 16:37:40,857 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 16:37:40,858 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 16:37:40,858 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 16:37:40,859 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 16:37:40,860 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 16:37:40,861 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 16:37:40,861 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 16:37:40,862 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 16:37:40,863 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 16:37:40,864 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 16:37:40,865 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 16:37:40,865 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 16:37:40,866 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 16:37:40,867 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 16:37:40,867 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 16:37:40,868 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 16:37:40,869 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 16:37:40,870 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-21 16:37:40,893 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 16:37:40,893 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 16:37:40,894 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-21 16:37:40,894 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-21 16:37:40,895 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-21 16:37:40,895 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-21 16:37:40,896 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 16:37:40,896 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 16:37:40,896 INFO L138 SettingsManager]: * Use SBE=true [2022-11-21 16:37:40,897 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 16:37:40,897 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-21 16:37:40,897 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 16:37:40,897 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-21 16:37:40,898 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 16:37:40,898 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-21 16:37:40,898 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-21 16:37:40,898 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-21 16:37:40,899 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-21 16:37:40,899 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 16:37:40,899 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 16:37:40,899 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-21 16:37:40,900 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 16:37:40,900 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-21 16:37:40,900 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-21 16:37:40,901 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 16:37:40,901 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 16:37:40,901 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-21 16:37:40,901 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-21 16:37:40,902 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-21 16:37:40,902 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-21 16:37:40,902 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-21 16:37:40,902 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-21 16:37:40,903 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-21 16:37:40,903 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 458689bcd0930e2b07a61b7490d83be8ce4e59412b26a60581bf78c492ee412e [2022-11-21 16:37:41,202 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 16:37:41,238 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 16:37:41,242 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 16:37:41,244 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 16:37:41,245 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 16:37:41,246 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/../../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2022-11-21 16:37:44,503 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 16:37:44,822 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 16:37:44,823 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2022-11-21 16:37:44,834 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/data/df6aae62f/17801fba6f33409583774508a8e27e9e/FLAG6fd12d830 [2022-11-21 16:37:44,850 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/data/df6aae62f/17801fba6f33409583774508a8e27e9e [2022-11-21 16:37:44,853 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 16:37:44,854 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 16:37:44,856 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 16:37:44,856 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 16:37:44,860 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 16:37:44,861 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 04:37:44" (1/1) ... [2022-11-21 16:37:44,862 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c0beef2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:44, skipping insertion in model container [2022-11-21 16:37:44,862 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 04:37:44" (1/1) ... [2022-11-21 16:37:44,870 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 16:37:44,922 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 16:37:45,212 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2022-11-21 16:37:45,216 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 16:37:45,227 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 16:37:45,285 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c[18431,18444] [2022-11-21 16:37:45,286 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 16:37:45,303 INFO L208 MainTranslator]: Completed translation [2022-11-21 16:37:45,304 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45 WrapperNode [2022-11-21 16:37:45,304 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 16:37:45,305 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 16:37:45,305 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 16:37:45,305 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 16:37:45,313 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,325 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,350 INFO L138 Inliner]: procedures = 55, calls = 101, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 197 [2022-11-21 16:37:45,350 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 16:37:45,351 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 16:37:45,351 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 16:37:45,351 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 16:37:45,362 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,362 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,375 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,385 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,390 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,395 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,396 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,398 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,400 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 16:37:45,401 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 16:37:45,401 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 16:37:45,401 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 16:37:45,402 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (1/1) ... [2022-11-21 16:37:45,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 16:37:45,435 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 16:37:45,449 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-21 16:37:45,479 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-21 16:37:45,504 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 16:37:45,504 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-21 16:37:45,505 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-21 16:37:45,505 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-21 16:37:45,505 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-21 16:37:45,505 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-21 16:37:45,506 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-21 16:37:45,507 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-21 16:37:45,508 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-21 16:37:45,508 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-21 16:37:45,509 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-21 16:37:45,509 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 16:37:45,509 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 16:37:45,509 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-21 16:37:45,509 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-21 16:37:45,510 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 16:37:45,510 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-21 16:37:45,510 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-21 16:37:45,511 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 16:37:45,511 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 16:37:45,618 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 16:37:45,621 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 16:37:45,973 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 16:37:45,981 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 16:37:45,981 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-21 16:37:45,984 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:37:45 BoogieIcfgContainer [2022-11-21 16:37:45,984 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 16:37:45,987 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-21 16:37:45,987 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-21 16:37:45,997 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-21 16:37:45,998 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 04:37:44" (1/3) ... [2022-11-21 16:37:46,000 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c50764c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 04:37:45, skipping insertion in model container [2022-11-21 16:37:46,000 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 04:37:45" (2/3) ... [2022-11-21 16:37:46,001 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c50764c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 04:37:46, skipping insertion in model container [2022-11-21 16:37:46,002 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:37:45" (3/3) ... [2022-11-21 16:37:46,003 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product46.cil.c [2022-11-21 16:37:46,035 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-21 16:37:46,035 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-21 16:37:46,091 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-21 16:37:46,098 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2bbe8f88, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-21 16:37:46,098 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-21 16:37:46,103 INFO L276 IsEmpty]: Start isEmpty. Operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-21 16:37:46,117 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-21 16:37:46,117 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:46,118 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:46,119 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:46,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:46,124 INFO L85 PathProgramCache]: Analyzing trace with hash -1887688965, now seen corresponding path program 1 times [2022-11-21 16:37:46,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:46,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1667294299] [2022-11-21 16:37:46,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:46,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:46,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:46,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-21 16:37:46,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:46,399 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:46,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:46,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1667294299] [2022-11-21 16:37:46,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1667294299] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:46,402 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:46,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-21 16:37:46,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526524063] [2022-11-21 16:37:46,405 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:46,410 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-21 16:37:46,411 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:46,455 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-21 16:37:46,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 16:37:46,460 INFO L87 Difference]: Start difference. First operand has 96 states, 72 states have (on average 1.375) internal successors, (99), 80 states have internal predecessors, (99), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:46,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:46,515 INFO L93 Difference]: Finished difference Result 184 states and 249 transitions. [2022-11-21 16:37:46,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-21 16:37:46,517 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-21 16:37:46,518 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:46,528 INFO L225 Difference]: With dead ends: 184 [2022-11-21 16:37:46,528 INFO L226 Difference]: Without dead ends: 87 [2022-11-21 16:37:46,532 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 16:37:46,536 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:46,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:37:46,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-11-21 16:37:46,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 87. [2022-11-21 16:37:46,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 65 states have (on average 1.3076923076923077) internal successors, (85), 72 states have internal predecessors, (85), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-21 16:37:46,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 112 transitions. [2022-11-21 16:37:46,591 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 112 transitions. Word has length 25 [2022-11-21 16:37:46,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:46,591 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 112 transitions. [2022-11-21 16:37:46,592 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:46,592 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 112 transitions. [2022-11-21 16:37:46,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-21 16:37:46,594 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:46,595 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:46,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-21 16:37:46,595 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:46,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:46,596 INFO L85 PathProgramCache]: Analyzing trace with hash -2062523597, now seen corresponding path program 1 times [2022-11-21 16:37:46,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:46,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [39125732] [2022-11-21 16:37:46,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:46,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:46,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:46,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-21 16:37:46,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:46,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:46,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:46,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [39125732] [2022-11-21 16:37:46,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [39125732] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:46,780 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:46,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 16:37:46,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2115299016] [2022-11-21 16:37:46,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:46,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 16:37:46,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:46,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 16:37:46,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:37:46,784 INFO L87 Difference]: Start difference. First operand 87 states and 112 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:46,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:46,803 INFO L93 Difference]: Finished difference Result 139 states and 179 transitions. [2022-11-21 16:37:46,804 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 16:37:46,804 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-21 16:37:46,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:46,806 INFO L225 Difference]: With dead ends: 139 [2022-11-21 16:37:46,806 INFO L226 Difference]: Without dead ends: 78 [2022-11-21 16:37:46,807 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 16:37:46,808 INFO L413 NwaCegarLoop]: 99 mSDtfsCounter, 13 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:46,809 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 181 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:37:46,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-21 16:37:46,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-21 16:37:46,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-21 16:37:46,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 100 transitions. [2022-11-21 16:37:46,821 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 100 transitions. Word has length 26 [2022-11-21 16:37:46,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:46,821 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 100 transitions. [2022-11-21 16:37:46,822 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:46,822 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 100 transitions. [2022-11-21 16:37:46,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-21 16:37:46,823 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:46,824 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:46,824 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-21 16:37:46,824 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:46,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:46,825 INFO L85 PathProgramCache]: Analyzing trace with hash -89675643, now seen corresponding path program 1 times [2022-11-21 16:37:46,825 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:46,825 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406267164] [2022-11-21 16:37:46,826 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:46,826 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:46,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 16:37:47,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:47,024 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:47,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406267164] [2022-11-21 16:37:47,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406267164] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:47,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:47,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 16:37:47,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595842066] [2022-11-21 16:37:47,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:47,028 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 16:37:47,029 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:47,030 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 16:37:47,030 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-21 16:37:47,031 INFO L87 Difference]: Start difference. First operand 78 states and 100 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:47,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:47,221 INFO L93 Difference]: Finished difference Result 149 states and 194 transitions. [2022-11-21 16:37:47,222 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-21 16:37:47,222 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-21 16:37:47,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:47,225 INFO L225 Difference]: With dead ends: 149 [2022-11-21 16:37:47,227 INFO L226 Difference]: Without dead ends: 78 [2022-11-21 16:37:47,228 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-21 16:37:47,233 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 125 mSDsluCounter, 114 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:47,233 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 207 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-21 16:37:47,234 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-21 16:37:47,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-21 16:37:47,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 59 states have (on average 1.305084745762712) internal successors, (77), 66 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-21 16:37:47,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2022-11-21 16:37:47,249 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 31 [2022-11-21 16:37:47,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:47,250 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2022-11-21 16:37:47,250 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 6 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-21 16:37:47,250 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2022-11-21 16:37:47,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-21 16:37:47,252 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:47,252 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:47,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-21 16:37:47,253 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:47,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:47,253 INFO L85 PathProgramCache]: Analyzing trace with hash -106405387, now seen corresponding path program 1 times [2022-11-21 16:37:47,254 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:47,254 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000640634] [2022-11-21 16:37:47,254 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:47,254 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:47,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 16:37:47,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 16:37:47,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-21 16:37:47,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,381 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:47,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:47,381 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000640634] [2022-11-21 16:37:47,381 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000640634] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:47,382 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:47,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-21 16:37:47,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [798378695] [2022-11-21 16:37:47,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:47,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-21 16:37:47,383 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:47,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 16:37:47,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-21 16:37:47,384 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-21 16:37:47,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:47,646 INFO L93 Difference]: Finished difference Result 233 states and 295 transitions. [2022-11-21 16:37:47,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-21 16:37:47,649 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-11-21 16:37:47,649 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:47,655 INFO L225 Difference]: With dead ends: 233 [2022-11-21 16:37:47,656 INFO L226 Difference]: Without dead ends: 162 [2022-11-21 16:37:47,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-21 16:37:47,659 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 187 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:47,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 293 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 16:37:47,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-11-21 16:37:47,692 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2022-11-21 16:37:47,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.2605042016806722) internal successors, (150), 127 states have internal predecessors, (150), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-21 16:37:47,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 191 transitions. [2022-11-21 16:37:47,695 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 191 transitions. Word has length 41 [2022-11-21 16:37:47,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:47,695 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 191 transitions. [2022-11-21 16:37:47,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-21 16:37:47,696 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 191 transitions. [2022-11-21 16:37:47,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-21 16:37:47,697 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:47,697 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:47,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-21 16:37:47,698 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:47,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:47,698 INFO L85 PathProgramCache]: Analyzing trace with hash -822814067, now seen corresponding path program 1 times [2022-11-21 16:37:47,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:47,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1300020781] [2022-11-21 16:37:47,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:47,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:47,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 16:37:47,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:47,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-21 16:37:47,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:47,834 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:47,834 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:47,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1300020781] [2022-11-21 16:37:47,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1300020781] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:47,834 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:47,835 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 16:37:47,835 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [446263121] [2022-11-21 16:37:47,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:47,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 16:37:47,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:47,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 16:37:47,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-21 16:37:47,837 INFO L87 Difference]: Start difference. First operand 156 states and 191 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-21 16:37:48,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:48,139 INFO L93 Difference]: Finished difference Result 405 states and 515 transitions. [2022-11-21 16:37:48,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-21 16:37:48,141 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-21 16:37:48,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:48,147 INFO L225 Difference]: With dead ends: 405 [2022-11-21 16:37:48,147 INFO L226 Difference]: Without dead ends: 256 [2022-11-21 16:37:48,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-21 16:37:48,159 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 141 mSDsluCounter, 266 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:48,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 354 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 16:37:48,161 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-11-21 16:37:48,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 248. [2022-11-21 16:37:48,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 248 states, 189 states have (on average 1.2486772486772486) internal successors, (236), 200 states have internal predecessors, (236), 30 states have call successors, (30), 26 states have call predecessors, (30), 28 states have return successors, (40), 30 states have call predecessors, (40), 30 states have call successors, (40) [2022-11-21 16:37:48,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 248 states to 248 states and 306 transitions. [2022-11-21 16:37:48,216 INFO L78 Accepts]: Start accepts. Automaton has 248 states and 306 transitions. Word has length 47 [2022-11-21 16:37:48,218 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:48,218 INFO L495 AbstractCegarLoop]: Abstraction has 248 states and 306 transitions. [2022-11-21 16:37:48,219 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-21 16:37:48,219 INFO L276 IsEmpty]: Start isEmpty. Operand 248 states and 306 transitions. [2022-11-21 16:37:48,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-21 16:37:48,222 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:48,222 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:48,222 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-21 16:37:48,223 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:48,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:48,223 INFO L85 PathProgramCache]: Analyzing trace with hash 688456935, now seen corresponding path program 1 times [2022-11-21 16:37:48,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:48,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1656588025] [2022-11-21 16:37:48,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:48,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:48,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:48,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:48,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:48,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:37:48,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:48,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:48,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:48,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-21 16:37:48,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:48,366 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:48,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:48,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1656588025] [2022-11-21 16:37:48,367 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1656588025] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:48,367 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:48,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-21 16:37:48,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [892344576] [2022-11-21 16:37:48,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:48,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-21 16:37:48,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:48,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-21 16:37:48,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-21 16:37:48,369 INFO L87 Difference]: Start difference. First operand 248 states and 306 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:49,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:49,007 INFO L93 Difference]: Finished difference Result 594 states and 765 transitions. [2022-11-21 16:37:49,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-21 16:37:49,007 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-21 16:37:49,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:49,014 INFO L225 Difference]: With dead ends: 594 [2022-11-21 16:37:49,014 INFO L226 Difference]: Without dead ends: 445 [2022-11-21 16:37:49,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-21 16:37:49,020 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 303 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 361 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 307 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 361 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:49,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [307 Valid, 335 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 361 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-21 16:37:49,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2022-11-21 16:37:49,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 411. [2022-11-21 16:37:49,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2243589743589745) internal successors, (382), 332 states have internal predecessors, (382), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-21 16:37:49,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 509 transitions. [2022-11-21 16:37:49,087 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 509 transitions. Word has length 51 [2022-11-21 16:37:49,087 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:49,087 INFO L495 AbstractCegarLoop]: Abstraction has 411 states and 509 transitions. [2022-11-21 16:37:49,088 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:49,088 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 509 transitions. [2022-11-21 16:37:49,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-21 16:37:49,089 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:49,090 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:49,090 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-21 16:37:49,090 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:49,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:49,091 INFO L85 PathProgramCache]: Analyzing trace with hash 554443429, now seen corresponding path program 1 times [2022-11-21 16:37:49,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:49,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121994731] [2022-11-21 16:37:49,091 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:49,091 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:49,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:49,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:37:49,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:49,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-21 16:37:49,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:49,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:49,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121994731] [2022-11-21 16:37:49,173 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121994731] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:49,173 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:49,174 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-21 16:37:49,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1453014448] [2022-11-21 16:37:49,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:49,174 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-21 16:37:49,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:49,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-21 16:37:49,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-21 16:37:49,175 INFO L87 Difference]: Start difference. First operand 411 states and 509 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:49,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:49,511 INFO L93 Difference]: Finished difference Result 761 states and 949 transitions. [2022-11-21 16:37:49,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-21 16:37:49,512 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-21 16:37:49,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:49,517 INFO L225 Difference]: With dead ends: 761 [2022-11-21 16:37:49,518 INFO L226 Difference]: Without dead ends: 445 [2022-11-21 16:37:49,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-21 16:37:49,523 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 161 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 288 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:49,524 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 288 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 16:37:49,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2022-11-21 16:37:49,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 411. [2022-11-21 16:37:49,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 411 states, 312 states have (on average 1.2211538461538463) internal successors, (381), 332 states have internal predecessors, (381), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-21 16:37:49,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 411 states to 411 states and 508 transitions. [2022-11-21 16:37:49,587 INFO L78 Accepts]: Start accepts. Automaton has 411 states and 508 transitions. Word has length 51 [2022-11-21 16:37:49,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:49,587 INFO L495 AbstractCegarLoop]: Abstraction has 411 states and 508 transitions. [2022-11-21 16:37:49,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:49,588 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 508 transitions. [2022-11-21 16:37:49,589 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-21 16:37:49,589 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:49,589 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:49,590 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-21 16:37:49,590 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:49,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:49,590 INFO L85 PathProgramCache]: Analyzing trace with hash 773298147, now seen corresponding path program 1 times [2022-11-21 16:37:49,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:49,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1403962276] [2022-11-21 16:37:49,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:49,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:49,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:49,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:37:49,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:49,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-21 16:37:49,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:49,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 16:37:49,753 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:49,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1403962276] [2022-11-21 16:37:49,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1403962276] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:49,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:49,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-21 16:37:49,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230069350] [2022-11-21 16:37:49,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:49,757 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-21 16:37:49,757 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:49,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-21 16:37:49,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-21 16:37:49,758 INFO L87 Difference]: Start difference. First operand 411 states and 508 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:50,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:50,115 INFO L93 Difference]: Finished difference Result 844 states and 1055 transitions. [2022-11-21 16:37:50,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-21 16:37:50,116 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-21 16:37:50,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:50,119 INFO L225 Difference]: With dead ends: 844 [2022-11-21 16:37:50,119 INFO L226 Difference]: Without dead ends: 440 [2022-11-21 16:37:50,121 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-21 16:37:50,122 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 165 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 286 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 354 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:50,123 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 354 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 286 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 16:37:50,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2022-11-21 16:37:50,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 414. [2022-11-21 16:37:50,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 317 states have (on average 1.2145110410094637) internal successors, (385), 336 states have internal predecessors, (385), 49 states have call successors, (49), 38 states have call predecessors, (49), 47 states have return successors, (76), 50 states have call predecessors, (76), 49 states have call successors, (76) [2022-11-21 16:37:50,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 510 transitions. [2022-11-21 16:37:50,171 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 510 transitions. Word has length 51 [2022-11-21 16:37:50,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:50,171 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 510 transitions. [2022-11-21 16:37:50,172 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-21 16:37:50,172 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 510 transitions. [2022-11-21 16:37:50,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-21 16:37:50,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:50,173 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:50,174 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-21 16:37:50,174 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:50,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:50,174 INFO L85 PathProgramCache]: Analyzing trace with hash 271087281, now seen corresponding path program 1 times [2022-11-21 16:37:50,175 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:50,175 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376002634] [2022-11-21 16:37:50,175 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:50,175 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:50,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:50,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:37:50,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:50,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:50,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-21 16:37:50,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:50,417 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 16:37:50,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:50,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376002634] [2022-11-21 16:37:50,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376002634] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:50,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:50,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-21 16:37:50,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1039941788] [2022-11-21 16:37:50,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:50,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-21 16:37:50,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:50,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-21 16:37:50,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-21 16:37:50,420 INFO L87 Difference]: Start difference. First operand 414 states and 510 transitions. Second operand has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 16:37:51,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:51,508 INFO L93 Difference]: Finished difference Result 1214 states and 1559 transitions. [2022-11-21 16:37:51,509 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-21 16:37:51,509 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-21 16:37:51,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:51,515 INFO L225 Difference]: With dead ends: 1214 [2022-11-21 16:37:51,515 INFO L226 Difference]: Without dead ends: 807 [2022-11-21 16:37:51,518 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=243, Invalid=1017, Unknown=0, NotChecked=0, Total=1260 [2022-11-21 16:37:51,520 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 334 mSDsluCounter, 757 mSDsCounter, 0 mSdLazyCounter, 955 mSolverCounterSat, 157 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 875 SdHoareTripleChecker+Invalid, 1112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 157 IncrementalHoareTripleChecker+Valid, 955 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:51,520 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 875 Invalid, 1112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [157 Valid, 955 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-21 16:37:51,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 807 states. [2022-11-21 16:37:51,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 807 to 770. [2022-11-21 16:37:51,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1844827586206896) internal successors, (687), 614 states have internal predecessors, (687), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (166), 98 states have call predecessors, (166), 97 states have call successors, (166) [2022-11-21 16:37:51,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 950 transitions. [2022-11-21 16:37:51,592 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 950 transitions. Word has length 60 [2022-11-21 16:37:51,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:51,593 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 950 transitions. [2022-11-21 16:37:51,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.9166666666666665) internal successors, (47), 7 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 16:37:51,593 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 950 transitions. [2022-11-21 16:37:51,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-21 16:37:51,595 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:51,596 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:51,596 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-21 16:37:51,596 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:51,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:51,596 INFO L85 PathProgramCache]: Analyzing trace with hash -907258435, now seen corresponding path program 1 times [2022-11-21 16:37:51,597 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:51,597 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [917346881] [2022-11-21 16:37:51,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:51,600 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:51,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:51,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-21 16:37:51,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:51,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:51,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-21 16:37:51,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:51,771 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-21 16:37:51,771 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:51,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [917346881] [2022-11-21 16:37:51,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [917346881] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:51,771 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:51,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-21 16:37:51,772 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1662965016] [2022-11-21 16:37:51,772 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:51,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-21 16:37:51,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:51,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-21 16:37:51,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-21 16:37:51,773 INFO L87 Difference]: Start difference. First operand 770 states and 950 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 16:37:52,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:52,381 INFO L93 Difference]: Finished difference Result 1542 states and 1902 transitions. [2022-11-21 16:37:52,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-21 16:37:52,382 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 61 [2022-11-21 16:37:52,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:52,386 INFO L225 Difference]: With dead ends: 1542 [2022-11-21 16:37:52,386 INFO L226 Difference]: Without dead ends: 779 [2022-11-21 16:37:52,389 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-11-21 16:37:52,390 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 294 mSDsluCounter, 497 mSDsCounter, 0 mSdLazyCounter, 561 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 295 SdHoareTripleChecker+Valid, 607 SdHoareTripleChecker+Invalid, 669 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 561 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:52,390 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [295 Valid, 607 Invalid, 669 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 561 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-21 16:37:52,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 779 states. [2022-11-21 16:37:52,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 779 to 770. [2022-11-21 16:37:52,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 580 states have (on average 1.1706896551724137) internal successors, (679), 614 states have internal predecessors, (679), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (147), 98 states have call predecessors, (147), 97 states have call successors, (147) [2022-11-21 16:37:52,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 923 transitions. [2022-11-21 16:37:52,459 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 923 transitions. Word has length 61 [2022-11-21 16:37:52,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:52,460 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 923 transitions. [2022-11-21 16:37:52,460 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-21 16:37:52,460 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 923 transitions. [2022-11-21 16:37:52,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-21 16:37:52,464 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:52,464 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:52,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-21 16:37:52,464 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:52,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:52,465 INFO L85 PathProgramCache]: Analyzing trace with hash 2101060045, now seen corresponding path program 1 times [2022-11-21 16:37:52,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:52,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321149478] [2022-11-21 16:37:52,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:52,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:52,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-21 16:37:52,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 16:37:52,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:52,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:52,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-21 16:37:52,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-11-21 16:37:52,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-21 16:37:52,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:52,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-21 16:37:52,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:52,601 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-21 16:37:52,601 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:52,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321149478] [2022-11-21 16:37:52,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [321149478] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:52,602 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 16:37:52,602 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-21 16:37:52,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959064099] [2022-11-21 16:37:52,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:52,603 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-21 16:37:52,603 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:52,603 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 16:37:52,603 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-21 16:37:52,604 INFO L87 Difference]: Start difference. First operand 770 states and 923 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-21 16:37:52,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:52,903 INFO L93 Difference]: Finished difference Result 1537 states and 1868 transitions. [2022-11-21 16:37:52,904 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-21 16:37:52,904 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2022-11-21 16:37:52,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:52,908 INFO L225 Difference]: With dead ends: 1537 [2022-11-21 16:37:52,909 INFO L226 Difference]: Without dead ends: 774 [2022-11-21 16:37:52,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-11-21 16:37:52,912 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 139 mSDsluCounter, 290 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:52,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 358 Invalid, 317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 16:37:52,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 774 states. [2022-11-21 16:37:52,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 774 to 774. [2022-11-21 16:37:52,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 582 states have (on average 1.1632302405498283) internal successors, (677), 616 states have internal predecessors, (677), 97 states have call successors, (97), 76 states have call predecessors, (97), 94 states have return successors, (150), 98 states have call predecessors, (150), 97 states have call successors, (150) [2022-11-21 16:37:52,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 924 transitions. [2022-11-21 16:37:52,983 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 924 transitions. Word has length 99 [2022-11-21 16:37:52,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:52,983 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 924 transitions. [2022-11-21 16:37:52,984 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-21 16:37:52,984 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 924 transitions. [2022-11-21 16:37:52,987 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-21 16:37:52,987 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:52,987 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:52,988 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-21 16:37:52,988 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:52,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:52,989 INFO L85 PathProgramCache]: Analyzing trace with hash -1306684405, now seen corresponding path program 1 times [2022-11-21 16:37:52,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:52,989 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [747817854] [2022-11-21 16:37:52,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:52,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:52,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-21 16:37:53,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 16:37:53,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:53,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:53,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-21 16:37:53,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-11-21 16:37:53,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-21 16:37:53,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:53,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-21 16:37:53,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,288 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-21 16:37:53,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:53,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [747817854] [2022-11-21 16:37:53,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [747817854] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 16:37:53,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1715710904] [2022-11-21 16:37:53,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:53,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 16:37:53,290 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 16:37:53,295 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 16:37:53,309 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-21 16:37:53,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:53,409 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-21 16:37:53,416 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 16:37:53,501 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-21 16:37:53,501 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-21 16:37:53,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1715710904] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 16:37:53,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-21 16:37:53,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [15] total 17 [2022-11-21 16:37:53,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [22050562] [2022-11-21 16:37:53,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 16:37:53,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-21 16:37:53,502 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:53,503 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-21 16:37:53,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=237, Unknown=0, NotChecked=0, Total=272 [2022-11-21 16:37:53,503 INFO L87 Difference]: Start difference. First operand 774 states and 924 transitions. Second operand has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-21 16:37:53,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:53,626 INFO L93 Difference]: Finished difference Result 1393 states and 1682 transitions. [2022-11-21 16:37:53,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-21 16:37:53,627 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) Word has length 99 [2022-11-21 16:37:53,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:53,630 INFO L225 Difference]: With dead ends: 1393 [2022-11-21 16:37:53,630 INFO L226 Difference]: Without dead ends: 626 [2022-11-21 16:37:53,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=267, Unknown=0, NotChecked=0, Total=306 [2022-11-21 16:37:53,633 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 11 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:53,633 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 282 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 16:37:53,634 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 626 states. [2022-11-21 16:37:53,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 626 to 626. [2022-11-21 16:37:53,683 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 626 states, 470 states have (on average 1.1617021276595745) internal successors, (546), 498 states have internal predecessors, (546), 81 states have call successors, (81), 64 states have call predecessors, (81), 74 states have return successors, (110), 78 states have call predecessors, (110), 81 states have call successors, (110) [2022-11-21 16:37:53,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 737 transitions. [2022-11-21 16:37:53,686 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 737 transitions. Word has length 99 [2022-11-21 16:37:53,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:53,687 INFO L495 AbstractCegarLoop]: Abstraction has 626 states and 737 transitions. [2022-11-21 16:37:53,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 17.0) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-21 16:37:53,687 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 737 transitions. [2022-11-21 16:37:53,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-11-21 16:37:53,689 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 16:37:53,689 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:37:53,701 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-21 16:37:53,895 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 16:37:53,896 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 16:37:53,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 16:37:53,896 INFO L85 PathProgramCache]: Analyzing trace with hash 1686740425, now seen corresponding path program 1 times [2022-11-21 16:37:53,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 16:37:53,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2079794997] [2022-11-21 16:37:53,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:53,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 16:37:53,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 16:37:54,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 16:37:54,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 16:37:54,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 16:37:54,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:54,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-21 16:37:54,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-21 16:37:54,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-21 16:37:54,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-21 16:37:54,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,212 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-21 16:37:54,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 16:37:54,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2079794997] [2022-11-21 16:37:54,213 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2079794997] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 16:37:54,213 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [252503569] [2022-11-21 16:37:54,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 16:37:54,213 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 16:37:54,213 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 16:37:54,216 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 16:37:54,248 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-21 16:37:54,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 16:37:54,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-21 16:37:54,325 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 16:37:54,555 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-21 16:37:54,556 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-21 16:37:54,959 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-21 16:37:54,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [252503569] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-21 16:37:54,959 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-21 16:37:54,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2022-11-21 16:37:54,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [54812685] [2022-11-21 16:37:54,960 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-21 16:37:54,960 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-21 16:37:54,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 16:37:54,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-21 16:37:54,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-21 16:37:54,962 INFO L87 Difference]: Start difference. First operand 626 states and 737 transitions. Second operand has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-21 16:37:56,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 16:37:56,782 INFO L93 Difference]: Finished difference Result 1323 states and 1610 transitions. [2022-11-21 16:37:56,783 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2022-11-21 16:37:56,783 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 99 [2022-11-21 16:37:56,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 16:37:56,784 INFO L225 Difference]: With dead ends: 1323 [2022-11-21 16:37:56,784 INFO L226 Difference]: Without dead ends: 0 [2022-11-21 16:37:56,789 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 284 GetRequests, 208 SyntacticMatches, 7 SemanticMatches, 69 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1289 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1117, Invalid=3853, Unknown=0, NotChecked=0, Total=4970 [2022-11-21 16:37:56,790 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 847 mSDsluCounter, 587 mSDsCounter, 0 mSdLazyCounter, 1228 mSolverCounterSat, 360 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 849 SdHoareTripleChecker+Valid, 636 SdHoareTripleChecker+Invalid, 1588 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 360 IncrementalHoareTripleChecker+Valid, 1228 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-21 16:37:56,790 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [849 Valid, 636 Invalid, 1588 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [360 Valid, 1228 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-21 16:37:56,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-21 16:37:56,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-21 16:37:56,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 16:37:56,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-21 16:37:56,792 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 99 [2022-11-21 16:37:56,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 16:37:56,793 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-21 16:37:56,793 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.454545454545454) internal successors, (142), 15 states have internal predecessors, (142), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-21 16:37:56,793 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-21 16:37:56,793 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-21 16:37:56,796 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-21 16:37:56,803 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-21 16:37:57,002 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-21 16:37:57,004 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-21 16:38:02,104 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 720 726) no Hoare annotation was computed. [2022-11-21 16:38:02,104 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 720 726) the Hoare annotation is: true [2022-11-21 16:38:02,104 INFO L899 garLoopResultBuilder]: For program point L626-1(lines 622 633) no Hoare annotation was computed. [2022-11-21 16:38:02,105 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 622 633) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2022-11-21 16:38:02,105 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 622 633) no Hoare annotation was computed. [2022-11-21 16:38:02,105 INFO L895 garLoopResultBuilder]: At program point L671(lines 666 674) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse11 (and .cse4 .cse10 .cse5 .cse6 .cse12 .cse8)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse4 .cse5 .cse6 .cse7 .cse8) .cse2 .cse9 .cse3 (and .cse10 .cse5 .cse6 .cse7 .cse8))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse11) (or .cse1 .cse2 .cse9 .cse3) (or .cse0 .cse2 (and (<= 1 ~pumpRunning~0) .cse6 .cse12) .cse11 .cse3)))) [2022-11-21 16:38:02,105 INFO L895 garLoopResultBuilder]: At program point L828(lines 823 831) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2))) [2022-11-21 16:38:02,105 INFO L899 garLoopResultBuilder]: For program point L700-1(lines 699 718) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point L762(lines 762 770) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point L758(lines 758 775) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 696 719) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point L69(lines 69 82) no Hoare annotation was computed. [2022-11-21 16:38:02,106 INFO L895 garLoopResultBuilder]: At program point L69-1(lines 54 86) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse16 (= 1 ~systemActive~0)) (.cse10 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse11 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0))) (let ((.cse5 (not .cse11)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and .cse7 .cse3 .cse8 .cse16 .cse10 .cse11 .cse4 .cse12)) (.cse13 (not .cse1)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse14 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not .cse16)) (.cse9 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6) (or (and .cse7 .cse8 .cse5) .cse1 .cse2 .cse9 (and .cse3 .cse8 .cse5) .cse6) (or (and .cse7 .cse8 .cse10 .cse11 .cse12) .cse2 .cse9 .cse13 .cse6 (and .cse3 .cse8 .cse10 .cse11 .cse12)) (or .cse14 .cse0 .cse15 .cse2 .cse13) (or .cse0 .cse15 .cse2 (and (<= 1 ~pumpRunning~0) .cse11 .cse4) .cse13 .cse6) (or .cse14 .cse2 .cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))))) [2022-11-21 16:38:02,106 INFO L895 garLoopResultBuilder]: At program point L61(line 61) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse6 .cse9 .cse7 .cse4)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not .cse3) (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse6 .cse7 .cse8) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse9 .cse7 .cse8) .cse5)) (or .cse1 (and .cse9 .cse4) .cse3 .cse2 .cse5) (or .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2)))) [2022-11-21 16:38:02,106 INFO L899 garLoopResultBuilder]: For program point L61-1(line 61) no Hoare annotation was computed. [2022-11-21 16:38:02,107 INFO L899 garLoopResultBuilder]: For program point L602(lines 602 606) no Hoare annotation was computed. [2022-11-21 16:38:02,107 INFO L895 garLoopResultBuilder]: At program point L602-2(lines 598 609) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 16:38:02,107 INFO L895 garLoopResultBuilder]: At program point L809(lines 804 811) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 16:38:02,107 INFO L895 garLoopResultBuilder]: At program point L768(line 768) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 16:38:02,107 INFO L895 garLoopResultBuilder]: At program point L760(line 760) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 16:38:02,107 INFO L899 garLoopResultBuilder]: For program point L760-1(line 760) no Hoare annotation was computed. [2022-11-21 16:38:02,107 INFO L899 garLoopResultBuilder]: For program point L967(line 967) no Hoare annotation was computed. [2022-11-21 16:38:02,108 INFO L895 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-11-21 16:38:02,108 INFO L895 garLoopResultBuilder]: At program point L773-1(lines 754 778) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (and .cse6 .cse9 .cse7 .cse4)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not .cse3) (and (<= 1 ~pumpRunning~0) .cse4) .cse5) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and .cse6 .cse7 .cse8) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse9 .cse7 .cse8) .cse5)) (or .cse1 (and .cse9 .cse4) .cse3 .cse2 .cse5) (or .cse0 (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse2)))) [2022-11-21 16:38:02,108 INFO L899 garLoopResultBuilder]: For program point L707-1(lines 707 713) no Hoare annotation was computed. [2022-11-21 16:38:02,108 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 83) no Hoare annotation was computed. [2022-11-21 16:38:02,108 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 696 719) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-11-21 16:38:02,108 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 696 719) no Hoare annotation was computed. [2022-11-21 16:38:02,108 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 967) no Hoare annotation was computed. [2022-11-21 16:38:02,109 INFO L895 garLoopResultBuilder]: At program point L968(lines 963 970) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 16:38:02,109 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 494 523) no Hoare annotation was computed. [2022-11-21 16:38:02,109 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 494 523) the Hoare annotation is: true [2022-11-21 16:38:02,109 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 512) no Hoare annotation was computed. [2022-11-21 16:38:02,109 INFO L902 garLoopResultBuilder]: At program point L508-1(lines 508 512) the Hoare annotation is: true [2022-11-21 16:38:02,109 INFO L899 garLoopResultBuilder]: For program point L505(line 505) no Hoare annotation was computed. [2022-11-21 16:38:02,109 INFO L902 garLoopResultBuilder]: At program point L504-2(lines 504 518) the Hoare annotation is: true [2022-11-21 16:38:02,109 INFO L902 garLoopResultBuilder]: At program point L500(line 500) the Hoare annotation is: true [2022-11-21 16:38:02,109 INFO L899 garLoopResultBuilder]: For program point L500-1(line 500) no Hoare annotation was computed. [2022-11-21 16:38:02,109 INFO L902 garLoopResultBuilder]: At program point L519(lines 494 523) the Hoare annotation is: true [2022-11-21 16:38:02,109 INFO L899 garLoopResultBuilder]: For program point L515(line 515) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 634 642) the Hoare annotation is: true [2022-11-21 16:38:02,110 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 634 642) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 634 642) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L899 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L895 garLoopResultBuilder]: At program point L944-2(lines 936 949) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-21 16:38:02,110 INFO L899 garLoopResultBuilder]: For program point L907(lines 906 953) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L895 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 16:38:02,110 INFO L899 garLoopResultBuilder]: For program point L936(lines 936 949) no Hoare annotation was computed. [2022-11-21 16:38:02,110 INFO L895 garLoopResultBuilder]: At program point L928(line 928) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-21 16:38:02,111 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-21 16:38:02,111 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-21 16:38:02,111 INFO L902 garLoopResultBuilder]: At program point L957(lines 896 961) the Hoare annotation is: true [2022-11-21 16:38:02,114 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-21 16:38:02,114 INFO L899 garLoopResultBuilder]: For program point L916(lines 916 922) no Hoare annotation was computed. [2022-11-21 16:38:02,114 INFO L899 garLoopResultBuilder]: For program point L916-1(lines 916 922) no Hoare annotation was computed. [2022-11-21 16:38:02,114 INFO L899 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2022-11-21 16:38:02,114 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-21 16:38:02,115 INFO L895 garLoopResultBuilder]: At program point L892(lines 887 894) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-21 16:38:02,115 INFO L895 garLoopResultBuilder]: At program point L954(lines 905 955) the Hoare annotation is: false [2022-11-21 16:38:02,115 INFO L902 garLoopResultBuilder]: At program point L566(lines 559 568) the Hoare annotation is: true [2022-11-21 16:38:02,115 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 586) no Hoare annotation was computed. [2022-11-21 16:38:02,115 INFO L899 garLoopResultBuilder]: For program point L579-2(lines 579 586) no Hoare annotation was computed. [2022-11-21 16:38:02,115 INFO L899 garLoopResultBuilder]: For program point L926(lines 926 932) no Hoare annotation was computed. [2022-11-21 16:38:02,116 INFO L899 garLoopResultBuilder]: For program point L926-1(lines 926 932) no Hoare annotation was computed. [2022-11-21 16:38:02,116 INFO L895 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 16:38:02,116 INFO L895 garLoopResultBuilder]: At program point L951(lines 906 953) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse0 (not .cse7) .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-21 16:38:02,117 INFO L895 garLoopResultBuilder]: At program point L918(line 918) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~4#1| 1)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse0 (not .cse7) .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-21 16:38:02,117 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 16:38:02,117 INFO L902 garLoopResultBuilder]: At program point L588(lines 569 591) the Hoare annotation is: true [2022-11-21 16:38:02,117 INFO L895 garLoopResultBuilder]: At program point L555(lines 551 557) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~4#1| 1) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= |ULTIMATE.start_main_~tmp~4#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-21 16:38:02,117 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 610 621) no Hoare annotation was computed. [2022-11-21 16:38:02,118 INFO L899 garLoopResultBuilder]: For program point L614-1(lines 610 621) no Hoare annotation was computed. [2022-11-21 16:38:02,119 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 610 621) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3) (or .cse6 .cse1 .cse0 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse3))) [2022-11-21 16:38:02,119 INFO L895 garLoopResultBuilder]: At program point L684(lines 675 688) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse3 (not .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse6)) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse4 .cse5 .cse6))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3) (or .cse0 .cse1 (and .cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse2)))) [2022-11-21 16:38:02,121 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|) (= |processEnvironment__wrappee__methaneQuery_~tmp~5#1| 0) .cse1 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2))))) [2022-11-21 16:38:02,122 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 744) no Hoare annotation was computed. [2022-11-21 16:38:02,122 INFO L899 garLoopResultBuilder]: For program point L732(lines 732 749) no Hoare annotation was computed. [2022-11-21 16:38:02,122 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2022-11-21 16:38:02,122 INFO L895 garLoopResultBuilder]: At program point L792(line 792) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (or .cse2 .cse0 .cse1))) [2022-11-21 16:38:02,123 INFO L895 garLoopResultBuilder]: At program point L794-2(lines 787 803) the Hoare annotation is: (let ((.cse9 (not (<= ~waterLevel~0 1))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= 1 ~systemActive~0))) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse0 (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|)) (.cse1 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse2 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) (.cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0)) (.cse4 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (.cse8 (not (<= ~waterLevel~0 2)))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| ~methaneLevelCritical~0) .cse3 .cse4) .cse5 .cse6 .cse7 .cse8) (or .cse7 (not (<= 1 |old(~pumpRunning~0)|)) .cse9) (or .cse5 .cse7 .cse9) (or .cse5 .cse7 (not .cse6) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| 0) .cse4) .cse8))) [2022-11-21 16:38:02,123 INFO L899 garLoopResultBuilder]: For program point L792-1(line 792) no Hoare annotation was computed. [2022-11-21 16:38:02,123 INFO L895 garLoopResultBuilder]: At program point L883(lines 868 886) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse3 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1|) .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse1 (not .cse5))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (and .cse3 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) .cse4 (not (<= ~waterLevel~0 2))) (or .cse2 .cse0 .cse4 .cse1)))) [2022-11-21 16:38:02,124 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 728 752) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-11-21 16:38:02,124 INFO L895 garLoopResultBuilder]: At program point L784(lines 779 786) the Hoare annotation is: (let ((.cse3 (not (<= ~waterLevel~0 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= ~waterLevel~0 1)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 (= ~methaneLevelCritical~0 0) .cse0 .cse3) (or .cse2 .cse0 (and (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~5#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~8#1| 0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~7#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) .cse3) (or .cse2 .cse0 .cse1))) [2022-11-21 16:38:02,124 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 881) no Hoare annotation was computed. [2022-11-21 16:38:02,124 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 728 752) no Hoare annotation was computed. [2022-11-21 16:38:02,124 INFO L899 garLoopResultBuilder]: For program point L877-2(lines 877 881) no Hoare annotation was computed. [2022-11-21 16:38:02,125 INFO L895 garLoopResultBuilder]: At program point L747(line 747) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-21 16:38:02,125 INFO L899 garLoopResultBuilder]: For program point L747-1(lines 728 752) no Hoare annotation was computed. [2022-11-21 16:38:02,127 INFO L899 garLoopResultBuilder]: For program point L679(lines 679 685) no Hoare annotation was computed. [2022-11-21 16:38:02,127 INFO L902 garLoopResultBuilder]: At program point L817(line 817) the Hoare annotation is: true [2022-11-21 16:38:02,128 INFO L899 garLoopResultBuilder]: For program point L817-1(line 817) no Hoare annotation was computed. [2022-11-21 16:38:02,128 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 812 822) the Hoare annotation is: true [2022-11-21 16:38:02,128 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 812 822) no Hoare annotation was computed. [2022-11-21 16:38:02,128 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 812 822) no Hoare annotation was computed. [2022-11-21 16:38:02,133 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 16:38:02,135 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-21 16:38:02,204 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 04:38:02 BoogieIcfgContainer [2022-11-21 16:38:02,213 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-21 16:38:02,214 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-21 16:38:02,214 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-21 16:38:02,215 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-21 16:38:02,215 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 04:37:45" (3/4) ... [2022-11-21 16:38:02,219 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-21 16:38:02,228 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-21 16:38:02,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-21 16:38:02,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-21 16:38:02,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-21 16:38:02,229 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-21 16:38:02,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-21 16:38:02,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-21 16:38:02,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-21 16:38:02,245 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2022-11-21 16:38:02,246 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-21 16:38:02,246 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-21 16:38:02,246 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 16:38:02,247 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 16:38:02,277 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-21 16:38:02,277 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 [2022-11-21 16:38:02,277 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || (((((1 <= pumpRunning && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-11-21 16:38:02,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-21 16:38:02,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) [2022-11-21 16:38:02,282 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= pumpRunning && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) [2022-11-21 16:38:02,282 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) [2022-11-21 16:38:02,282 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-21 16:38:02,283 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) [2022-11-21 16:38:02,283 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && 1 <= \result) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == 0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) [2022-11-21 16:38:02,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((1 <= pumpRunning && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == 0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) [2022-11-21 16:38:02,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) [2022-11-21 16:38:02,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-21 16:38:02,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || (((((tmp___0 == 0 && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((tmp___0 == 0 && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 1)) [2022-11-21 16:38:02,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-21 16:38:02,327 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/witness.graphml [2022-11-21 16:38:02,327 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-21 16:38:02,328 INFO L158 Benchmark]: Toolchain (without parser) took 17473.80ms. Allocated memory was 138.4MB in the beginning and 283.1MB in the end (delta: 144.7MB). Free memory was 105.1MB in the beginning and 144.3MB in the end (delta: -39.2MB). Peak memory consumption was 106.1MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,328 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 138.4MB. Free memory is still 85.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 16:38:02,328 INFO L158 Benchmark]: CACSL2BoogieTranslator took 448.74ms. Allocated memory is still 138.4MB. Free memory was 105.1MB in the beginning and 86.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,331 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.28ms. Allocated memory is still 138.4MB. Free memory was 86.4MB in the beginning and 84.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,332 INFO L158 Benchmark]: Boogie Preprocessor took 49.55ms. Allocated memory is still 138.4MB. Free memory was 84.3MB in the beginning and 82.6MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 16:38:02,332 INFO L158 Benchmark]: RCFGBuilder took 583.32ms. Allocated memory is still 138.4MB. Free memory was 82.6MB in the beginning and 66.3MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,333 INFO L158 Benchmark]: TraceAbstraction took 16226.66ms. Allocated memory was 138.4MB in the beginning and 283.1MB in the end (delta: 144.7MB). Free memory was 65.4MB in the beginning and 150.6MB in the end (delta: -85.1MB). Peak memory consumption was 129.2MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,334 INFO L158 Benchmark]: Witness Printer took 112.93ms. Allocated memory is still 283.1MB. Free memory was 150.6MB in the beginning and 144.3MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-21 16:38:02,336 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 138.4MB. Free memory is still 85.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 448.74ms. Allocated memory is still 138.4MB. Free memory was 105.1MB in the beginning and 86.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.28ms. Allocated memory is still 138.4MB. Free memory was 86.4MB in the beginning and 84.3MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 49.55ms. Allocated memory is still 138.4MB. Free memory was 84.3MB in the beginning and 82.6MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 583.32ms. Allocated memory is still 138.4MB. Free memory was 82.6MB in the beginning and 66.3MB in the end (delta: 16.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 16226.66ms. Allocated memory was 138.4MB in the beginning and 283.1MB in the end (delta: 144.7MB). Free memory was 65.4MB in the beginning and 150.6MB in the end (delta: -85.1MB). Peak memory consumption was 129.2MB. Max. memory is 16.1GB. * Witness Printer took 112.93ms. Allocated memory is still 283.1MB. Free memory was 150.6MB in the beginning and 144.3MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 967]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 96 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.1s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2760 SdHoareTripleChecker+Valid, 3.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2720 mSDsluCounter, 4891 SdHoareTripleChecker+Invalid, 2.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3718 mSDsCounter, 992 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4305 IncrementalHoareTripleChecker+Invalid, 5297 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 992 mSolverCounterUnsat, 1173 mSDtfsCounter, 4305 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 643 GetRequests, 431 SyntacticMatches, 7 SemanticMatches, 205 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1687 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=774occurred in iteration=11, InterpolantAutomatonStates: 173, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 13 MinimizatonAttempts, 154 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2384 PreInvPairs, 2637 NumberOfFragments, 1991 HoareAnnotationTreeSize, 2384 FomulaSimplifications, 158 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 44 FomulaSimplificationsInter, 10635 FormulaSimplificationTreeSizeReductionInter, 4.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 939 NumberOfCodeBlocks, 939 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1022 ConstructedInterpolants, 0 QuantifiedInterpolants, 1785 SizeOfPredicates, 6 NumberOfNonLiveVariables, 688 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 214/252 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2)) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || ((((((pumpRunning == 0 && !(methaneLevelCritical == 0)) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || (((((1 <= pumpRunning && waterLevel <= 1) && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 823]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 868]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || (((((tmp___0 == 0 && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((tmp___0 == 0 && 1 <= \result) && pumpRunning == 0) && 1 <= tmp) && waterLevel <= 1) && \result == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 504]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 551]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == 1) && \result == systemActive) && tmp == systemActive) && waterLevel == 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 779]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((1 <= pumpRunning && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == 0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) - InvariantResult [Line: 787]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == methaneLevelCritical) && tmp == 0) && 1 <= \result) || !(\old(pumpRunning) == 0)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && 1 <= tmp) && \result == 0) && 1 <= tmp___0) && tmp == 0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) - InvariantResult [Line: 887]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) || (((((pumpRunning == 0 && tmp == 1) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-21 16:38:02,392 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f5da54e9-7c3f-490b-ba50-50f4f94215ed/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE