./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 03:30:29,304 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 03:30:29,307 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 03:30:29,325 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 03:30:29,326 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 03:30:29,327 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 03:30:29,328 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 03:30:29,330 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 03:30:29,332 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 03:30:29,333 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 03:30:29,335 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 03:30:29,336 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 03:30:29,336 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 03:30:29,338 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 03:30:29,339 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 03:30:29,340 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 03:30:29,341 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 03:30:29,342 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 03:30:29,344 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 03:30:29,346 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 03:30:29,347 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 03:30:29,351 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 03:30:29,352 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 03:30:29,358 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 03:30:29,362 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 03:30:29,365 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 03:30:29,365 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 03:30:29,366 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 03:30:29,367 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 03:30:29,370 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 03:30:29,371 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 03:30:29,372 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 03:30:29,372 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 03:30:29,375 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 03:30:29,376 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 03:30:29,378 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 03:30:29,379 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 03:30:29,380 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 03:30:29,380 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 03:30:29,381 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 03:30:29,383 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 03:30:29,384 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-23 03:30:29,414 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 03:30:29,415 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 03:30:29,416 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 03:30:29,416 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 03:30:29,417 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 03:30:29,417 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 03:30:29,418 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 03:30:29,418 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 03:30:29,418 INFO L138 SettingsManager]: * Use SBE=true [2022-11-23 03:30:29,418 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 03:30:29,419 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 03:30:29,420 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 03:30:29,420 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 03:30:29,420 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 03:30:29,420 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 03:30:29,420 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 03:30:29,421 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 03:30:29,421 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 03:30:29,421 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 03:30:29,421 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 03:30:29,421 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 03:30:29,422 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 03:30:29,422 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 03:30:29,422 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 03:30:29,422 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 03:30:29,423 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 03:30:29,423 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 03:30:29,423 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 03:30:29,423 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-23 03:30:29,423 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 03:30:29,424 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-23 03:30:29,424 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 03:30:29,424 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-23 03:30:29,424 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 03:30:29,425 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c4da108453cefa034e9e2f20ae1a945f7f6bf5ea54205b9ec625406680c7ecea [2022-11-23 03:30:29,712 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 03:30:29,733 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 03:30:29,736 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 03:30:29,737 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 03:30:29,738 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 03:30:29,739 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/../../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-11-23 03:30:32,817 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 03:30:33,091 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 03:30:33,092 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2022-11-23 03:30:33,105 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/data/8e7c11510/5256846922694e22ae96d58105c2b682/FLAG9d9059ef9 [2022-11-23 03:30:33,124 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/data/8e7c11510/5256846922694e22ae96d58105c2b682 [2022-11-23 03:30:33,127 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 03:30:33,128 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 03:30:33,129 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 03:30:33,129 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 03:30:33,133 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 03:30:33,134 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,135 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1fe22e33 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33, skipping insertion in model container [2022-11-23 03:30:33,135 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,142 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 03:30:33,189 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 03:30:33,340 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-11-23 03:30:33,483 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 03:30:33,507 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 03:30:33,536 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c[2044,2057] [2022-11-23 03:30:33,620 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 03:30:33,645 INFO L208 MainTranslator]: Completed translation [2022-11-23 03:30:33,645 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33 WrapperNode [2022-11-23 03:30:33,646 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 03:30:33,647 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 03:30:33,647 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 03:30:33,647 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 03:30:33,655 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,667 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,691 INFO L138 Inliner]: procedures = 55, calls = 101, calls flagged for inlining = 21, calls inlined = 18, statements flattened = 185 [2022-11-23 03:30:33,692 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 03:30:33,693 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 03:30:33,693 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 03:30:33,693 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 03:30:33,703 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,703 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,705 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,706 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,711 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,716 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,718 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,719 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,721 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 03:30:33,722 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 03:30:33,723 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 03:30:33,723 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 03:30:33,724 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (1/1) ... [2022-11-23 03:30:33,730 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 03:30:33,742 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 03:30:33,755 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 03:30:33,764 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 03:30:33,798 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 03:30:33,798 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 03:30:33,799 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 03:30:33,799 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 03:30:33,799 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 03:30:33,799 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 03:30:33,800 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 03:30:33,800 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-23 03:30:33,800 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-23 03:30:33,800 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 03:30:33,800 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 03:30:33,801 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 03:30:33,801 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 03:30:33,801 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-23 03:30:33,801 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-23 03:30:33,801 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 03:30:33,802 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 03:30:33,802 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 03:30:33,802 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 03:30:33,802 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 03:30:33,802 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 03:30:33,803 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 03:30:33,890 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 03:30:33,893 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 03:30:34,274 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 03:30:34,282 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 03:30:34,282 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 03:30:34,286 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:30:34 BoogieIcfgContainer [2022-11-23 03:30:34,291 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 03:30:34,293 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 03:30:34,294 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 03:30:34,297 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 03:30:34,297 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:30:33" (1/3) ... [2022-11-23 03:30:34,298 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bb907ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:30:34, skipping insertion in model container [2022-11-23 03:30:34,298 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:30:33" (2/3) ... [2022-11-23 03:30:34,298 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1bb907ba and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:30:34, skipping insertion in model container [2022-11-23 03:30:34,299 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:30:34" (3/3) ... [2022-11-23 03:30:34,300 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2022-11-23 03:30:34,322 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 03:30:34,322 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 03:30:34,405 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 03:30:34,412 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@67501ab8, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 03:30:34,413 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 03:30:34,418 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-23 03:30:34,435 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-23 03:30:34,435 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:34,436 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:34,437 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:34,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:34,445 INFO L85 PathProgramCache]: Analyzing trace with hash -707310338, now seen corresponding path program 1 times [2022-11-23 03:30:34,456 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:34,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1663640139] [2022-11-23 03:30:34,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:34,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:34,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:34,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-23 03:30:34,670 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:34,681 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 03:30:34,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:34,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1663640139] [2022-11-23 03:30:34,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1663640139] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:34,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:34,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 03:30:34,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974800995] [2022-11-23 03:30:34,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:34,689 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 03:30:34,689 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:34,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 03:30:34,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 03:30:34,719 INFO L87 Difference]: Start difference. First operand has 100 states, 73 states have (on average 1.36986301369863) internal successors, (100), 82 states have internal predecessors, (100), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:34,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:34,759 INFO L93 Difference]: Finished difference Result 192 states and 259 transitions. [2022-11-23 03:30:34,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 03:30:34,761 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-23 03:30:34,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:34,783 INFO L225 Difference]: With dead ends: 192 [2022-11-23 03:30:34,783 INFO L226 Difference]: Without dead ends: 91 [2022-11-23 03:30:34,790 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 03:30:34,793 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:34,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:30:34,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-23 03:30:34,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-11-23 03:30:34,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-23 03:30:34,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2022-11-23 03:30:34,863 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 23 [2022-11-23 03:30:34,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:34,863 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2022-11-23 03:30:34,864 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:34,864 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2022-11-23 03:30:34,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-23 03:30:34,867 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:34,867 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:34,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 03:30:34,868 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:34,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:34,869 INFO L85 PathProgramCache]: Analyzing trace with hash 624156156, now seen corresponding path program 1 times [2022-11-23 03:30:34,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:34,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1928359760] [2022-11-23 03:30:34,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:34,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:34,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:34,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-23 03:30:34,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:34,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 03:30:35,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:35,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1928359760] [2022-11-23 03:30:35,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1928359760] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:35,001 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:35,001 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 03:30:35,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [929682174] [2022-11-23 03:30:35,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:35,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 03:30:35,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:35,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 03:30:35,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:30:35,005 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:35,028 INFO L93 Difference]: Finished difference Result 144 states and 184 transitions. [2022-11-23 03:30:35,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 03:30:35,029 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-23 03:30:35,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:35,031 INFO L225 Difference]: With dead ends: 144 [2022-11-23 03:30:35,031 INFO L226 Difference]: Without dead ends: 82 [2022-11-23 03:30:35,032 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:30:35,033 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 16 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:35,034 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 187 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:30:35,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-23 03:30:35,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-11-23 03:30:35,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 68 states have internal predecessors, (79), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-23 03:30:35,048 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-11-23 03:30:35,048 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 24 [2022-11-23 03:30:35,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:35,049 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-11-23 03:30:35,049 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,050 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-11-23 03:30:35,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-23 03:30:35,051 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:35,051 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:35,051 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 03:30:35,052 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:35,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:35,053 INFO L85 PathProgramCache]: Analyzing trace with hash -1800989914, now seen corresponding path program 1 times [2022-11-23 03:30:35,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:35,053 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1486821028] [2022-11-23 03:30:35,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:35,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:35,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:35,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:30:35,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:35,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 03:30:35,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:35,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1486821028] [2022-11-23 03:30:35,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1486821028] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:35,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:35,264 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 03:30:35,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901993689] [2022-11-23 03:30:35,264 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:35,265 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 03:30:35,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:35,266 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 03:30:35,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:30:35,266 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:35,345 INFO L93 Difference]: Finished difference Result 231 states and 301 transitions. [2022-11-23 03:30:35,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 03:30:35,346 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-23 03:30:35,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:35,350 INFO L225 Difference]: With dead ends: 231 [2022-11-23 03:30:35,350 INFO L226 Difference]: Without dead ends: 156 [2022-11-23 03:30:35,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:30:35,353 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 228 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:35,353 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 228 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:30:35,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-11-23 03:30:35,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 153. [2022-11-23 03:30:35,400 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 110 states have (on average 1.3363636363636364) internal successors, (147), 125 states have internal predecessors, (147), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2022-11-23 03:30:35,413 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 199 transitions. [2022-11-23 03:30:35,413 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 199 transitions. Word has length 28 [2022-11-23 03:30:35,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:35,414 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 199 transitions. [2022-11-23 03:30:35,414 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,415 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 199 transitions. [2022-11-23 03:30:35,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-23 03:30:35,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:35,417 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:35,417 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 03:30:35,418 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:35,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:35,418 INFO L85 PathProgramCache]: Analyzing trace with hash -40246052, now seen corresponding path program 1 times [2022-11-23 03:30:35,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:35,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1040263602] [2022-11-23 03:30:35,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:35,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:35,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:35,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-23 03:30:35,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:35,615 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 03:30:35,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:35,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1040263602] [2022-11-23 03:30:35,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1040263602] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:35,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:35,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 03:30:35,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1051739059] [2022-11-23 03:30:35,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:35,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 03:30:35,618 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:35,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 03:30:35,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 03:30:35,619 INFO L87 Difference]: Start difference. First operand 153 states and 199 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:35,747 INFO L93 Difference]: Finished difference Result 405 states and 536 transitions. [2022-11-23 03:30:35,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 03:30:35,748 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-23 03:30:35,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:35,752 INFO L225 Difference]: With dead ends: 405 [2022-11-23 03:30:35,756 INFO L226 Difference]: Without dead ends: 259 [2022-11-23 03:30:35,758 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 03:30:35,759 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 68 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:35,763 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 392 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:30:35,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-23 03:30:35,819 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 246. [2022-11-23 03:30:35,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 246 states, 179 states have (on average 1.2905027932960893) internal successors, (231), 196 states have internal predecessors, (231), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2022-11-23 03:30:35,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 246 states to 246 states and 311 transitions. [2022-11-23 03:30:35,827 INFO L78 Accepts]: Start accepts. Automaton has 246 states and 311 transitions. Word has length 32 [2022-11-23 03:30:35,828 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:35,830 INFO L495 AbstractCegarLoop]: Abstraction has 246 states and 311 transitions. [2022-11-23 03:30:35,830 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 03:30:35,831 INFO L276 IsEmpty]: Start isEmpty. Operand 246 states and 311 transitions. [2022-11-23 03:30:35,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-23 03:30:35,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:35,837 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:35,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 03:30:35,838 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:35,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:35,838 INFO L85 PathProgramCache]: Analyzing trace with hash -1083319393, now seen corresponding path program 1 times [2022-11-23 03:30:35,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:35,839 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [410858075] [2022-11-23 03:30:35,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:35,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:35,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:30:36,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:36,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:36,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-23 03:30:36,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,112 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:30:36,113 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:36,114 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [410858075] [2022-11-23 03:30:36,114 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [410858075] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:36,114 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:36,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:30:36,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1024618847] [2022-11-23 03:30:36,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:36,121 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:30:36,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:36,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:30:36,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:30:36,123 INFO L87 Difference]: Start difference. First operand 246 states and 311 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:30:36,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:36,692 INFO L93 Difference]: Finished difference Result 569 states and 736 transitions. [2022-11-23 03:30:36,693 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-23 03:30:36,693 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-23 03:30:36,694 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:36,699 INFO L225 Difference]: With dead ends: 569 [2022-11-23 03:30:36,699 INFO L226 Difference]: Without dead ends: 330 [2022-11-23 03:30:36,701 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2022-11-23 03:30:36,708 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 248 mSDsluCounter, 294 mSDsCounter, 0 mSdLazyCounter, 212 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 288 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 212 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:36,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 394 Invalid, 288 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 212 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 03:30:36,712 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2022-11-23 03:30:36,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 294. [2022-11-23 03:30:36,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 217 states have (on average 1.2672811059907834) internal successors, (275), 234 states have internal predecessors, (275), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-23 03:30:36,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 369 transitions. [2022-11-23 03:30:36,761 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 369 transitions. Word has length 54 [2022-11-23 03:30:36,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:36,762 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 369 transitions. [2022-11-23 03:30:36,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:30:36,762 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 369 transitions. [2022-11-23 03:30:36,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-23 03:30:36,770 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:36,771 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:36,771 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 03:30:36,771 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:36,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:36,772 INFO L85 PathProgramCache]: Analyzing trace with hash -1105951647, now seen corresponding path program 1 times [2022-11-23 03:30:36,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:36,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [436438375] [2022-11-23 03:30:36,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:36,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:36,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:30:36,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:36,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:36,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-23 03:30:36,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:36,945 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:30:36,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:36,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [436438375] [2022-11-23 03:30:36,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [436438375] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:36,946 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:36,946 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:30:36,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398761491] [2022-11-23 03:30:36,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:36,946 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:30:36,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:36,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:30:36,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:30:36,948 INFO L87 Difference]: Start difference. First operand 294 states and 369 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:30:37,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:37,194 INFO L93 Difference]: Finished difference Result 599 states and 772 transitions. [2022-11-23 03:30:37,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 03:30:37,195 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-23 03:30:37,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:37,197 INFO L225 Difference]: With dead ends: 599 [2022-11-23 03:30:37,198 INFO L226 Difference]: Without dead ends: 312 [2022-11-23 03:30:37,199 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-23 03:30:37,200 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 67 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 173 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:37,200 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 334 Invalid, 173 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 03:30:37,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-11-23 03:30:37,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 300. [2022-11-23 03:30:37,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 223 states have (on average 1.2600896860986548) internal successors, (281), 240 states have internal predecessors, (281), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2022-11-23 03:30:37,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 375 transitions. [2022-11-23 03:30:37,229 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 375 transitions. Word has length 54 [2022-11-23 03:30:37,230 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:37,230 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 375 transitions. [2022-11-23 03:30:37,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:30:37,230 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 375 transitions. [2022-11-23 03:30:37,231 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-23 03:30:37,231 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:37,232 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:37,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 03:30:37,232 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:37,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:37,233 INFO L85 PathProgramCache]: Analyzing trace with hash -808559779, now seen corresponding path program 1 times [2022-11-23 03:30:37,233 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:37,233 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179016060] [2022-11-23 03:30:37,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:37,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:37,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:30:37,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:37,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:37,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-23 03:30:37,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,333 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:30:37,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:37,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179016060] [2022-11-23 03:30:37,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179016060] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:37,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:37,334 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 03:30:37,334 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516095906] [2022-11-23 03:30:37,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:37,335 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 03:30:37,335 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:37,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 03:30:37,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 03:30:37,336 INFO L87 Difference]: Start difference. First operand 300 states and 375 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-23 03:30:37,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:37,643 INFO L93 Difference]: Finished difference Result 841 states and 1094 transitions. [2022-11-23 03:30:37,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 03:30:37,644 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) Word has length 54 [2022-11-23 03:30:37,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:37,649 INFO L225 Difference]: With dead ends: 841 [2022-11-23 03:30:37,652 INFO L226 Difference]: Without dead ends: 548 [2022-11-23 03:30:37,653 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-23 03:30:37,657 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 222 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 242 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:37,657 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 293 Invalid, 242 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 03:30:37,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-11-23 03:30:37,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 541. [2022-11-23 03:30:37,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 541 states, 404 states have (on average 1.24009900990099) internal successors, (501), 430 states have internal predecessors, (501), 71 states have call successors, (71), 63 states have call predecessors, (71), 65 states have return successors, (109), 70 states have call predecessors, (109), 71 states have call successors, (109) [2022-11-23 03:30:37,718 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 541 states and 681 transitions. [2022-11-23 03:30:37,719 INFO L78 Accepts]: Start accepts. Automaton has 541 states and 681 transitions. Word has length 54 [2022-11-23 03:30:37,719 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:37,721 INFO L495 AbstractCegarLoop]: Abstraction has 541 states and 681 transitions. [2022-11-23 03:30:37,721 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 4 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2022-11-23 03:30:37,721 INFO L276 IsEmpty]: Start isEmpty. Operand 541 states and 681 transitions. [2022-11-23 03:30:37,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-23 03:30:37,723 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:37,723 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:37,724 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 03:30:37,724 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:37,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:37,724 INFO L85 PathProgramCache]: Analyzing trace with hash -734125181, now seen corresponding path program 1 times [2022-11-23 03:30:37,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:37,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338930692] [2022-11-23 03:30:37,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:37,725 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:37,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 03:30:37,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-23 03:30:37,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:37,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:37,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:37,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:38,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-23 03:30:38,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:38,021 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:30:38,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:38,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338930692] [2022-11-23 03:30:38,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1338930692] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:38,026 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:38,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-23 03:30:38,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385009167] [2022-11-23 03:30:38,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:38,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-23 03:30:38,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:38,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-23 03:30:38,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-23 03:30:38,028 INFO L87 Difference]: Start difference. First operand 541 states and 681 transitions. Second operand has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 03:30:39,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:39,141 INFO L93 Difference]: Finished difference Result 1801 states and 2387 transitions. [2022-11-23 03:30:39,141 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-23 03:30:39,142 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-11-23 03:30:39,142 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:39,149 INFO L225 Difference]: With dead ends: 1801 [2022-11-23 03:30:39,149 INFO L226 Difference]: Without dead ends: 1267 [2022-11-23 03:30:39,152 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=229, Invalid=961, Unknown=0, NotChecked=0, Total=1190 [2022-11-23 03:30:39,153 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 374 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 873 mSolverCounterSat, 156 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 543 SdHoareTripleChecker+Invalid, 1029 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 156 IncrementalHoareTripleChecker+Valid, 873 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:39,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 543 Invalid, 1029 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [156 Valid, 873 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 03:30:39,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1267 states. [2022-11-23 03:30:39,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1267 to 1171. [2022-11-23 03:30:39,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1171 states, 860 states have (on average 1.2093023255813953) internal successors, (1040), 925 states have internal predecessors, (1040), 168 states have call successors, (168), 122 states have call predecessors, (168), 142 states have return successors, (294), 166 states have call predecessors, (294), 168 states have call successors, (294) [2022-11-23 03:30:39,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1171 states to 1171 states and 1502 transitions. [2022-11-23 03:30:39,280 INFO L78 Accepts]: Start accepts. Automaton has 1171 states and 1502 transitions. Word has length 58 [2022-11-23 03:30:39,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:39,280 INFO L495 AbstractCegarLoop]: Abstraction has 1171 states and 1502 transitions. [2022-11-23 03:30:39,281 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 3.75) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 03:30:39,281 INFO L276 IsEmpty]: Start isEmpty. Operand 1171 states and 1502 transitions. [2022-11-23 03:30:39,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-23 03:30:39,284 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:39,284 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:39,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 03:30:39,285 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:39,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:39,286 INFO L85 PathProgramCache]: Analyzing trace with hash -353852961, now seen corresponding path program 1 times [2022-11-23 03:30:39,286 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:39,286 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383610807] [2022-11-23 03:30:39,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:39,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:39,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 03:30:39,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-23 03:30:39,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 03:30:39,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:39,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:39,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-23 03:30:39,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-23 03:30:39,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-23 03:30:39,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:39,401 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 03:30:39,402 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:39,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383610807] [2022-11-23 03:30:39,402 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [383610807] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:39,402 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:30:39,402 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 03:30:39,402 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [962699506] [2022-11-23 03:30:39,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:39,403 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 03:30:39,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:39,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 03:30:39,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-23 03:30:39,404 INFO L87 Difference]: Start difference. First operand 1171 states and 1502 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-23 03:30:39,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:39,944 INFO L93 Difference]: Finished difference Result 1419 states and 1810 transitions. [2022-11-23 03:30:39,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-23 03:30:39,944 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) Word has length 89 [2022-11-23 03:30:39,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:39,948 INFO L225 Difference]: With dead ends: 1419 [2022-11-23 03:30:39,948 INFO L226 Difference]: Without dead ends: 592 [2022-11-23 03:30:39,951 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2022-11-23 03:30:39,952 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 311 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 396 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 321 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 506 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 396 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:39,952 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [321 Valid, 237 Invalid, 506 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 396 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 03:30:39,953 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-11-23 03:30:40,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 572. [2022-11-23 03:30:40,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 572 states, 420 states have (on average 1.1714285714285715) internal successors, (492), 450 states have internal predecessors, (492), 81 states have call successors, (81), 60 states have call predecessors, (81), 70 states have return successors, (144), 81 states have call predecessors, (144), 81 states have call successors, (144) [2022-11-23 03:30:40,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 572 states to 572 states and 717 transitions. [2022-11-23 03:30:40,016 INFO L78 Accepts]: Start accepts. Automaton has 572 states and 717 transitions. Word has length 89 [2022-11-23 03:30:40,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:40,017 INFO L495 AbstractCegarLoop]: Abstraction has 572 states and 717 transitions. [2022-11-23 03:30:40,017 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (9), 6 states have call predecessors, (9), 2 states have return successors, (8), 3 states have call predecessors, (8), 4 states have call successors, (8) [2022-11-23 03:30:40,017 INFO L276 IsEmpty]: Start isEmpty. Operand 572 states and 717 transitions. [2022-11-23 03:30:40,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-23 03:30:40,019 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:30:40,019 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:40,020 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-23 03:30:40,020 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:30:40,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:30:40,020 INFO L85 PathProgramCache]: Analyzing trace with hash -753408287, now seen corresponding path program 1 times [2022-11-23 03:30:40,021 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:30:40,021 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740143064] [2022-11-23 03:30:40,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:40,021 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:30:40,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 03:30:40,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:30:40,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 03:30:40,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 03:30:40,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:40,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-23 03:30:40,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2022-11-23 03:30:40,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-23 03:30:40,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:30:40,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-23 03:30:40,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:30:40,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2022-11-23 03:30:40,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,308 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-23 03:30:40,308 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:30:40,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740143064] [2022-11-23 03:30:40,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740143064] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 03:30:40,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1713654425] [2022-11-23 03:30:40,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:30:40,309 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 03:30:40,309 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 03:30:40,315 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 03:30:40,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 03:30:40,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:30:40,436 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-23 03:30:40,446 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 03:30:40,695 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 03:30:40,695 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 03:30:40,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1713654425] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:30:40,696 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 03:30:40,696 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-11-23 03:30:40,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1491703952] [2022-11-23 03:30:40,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:30:40,697 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 03:30:40,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:30:40,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 03:30:40,697 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-23 03:30:40,698 INFO L87 Difference]: Start difference. First operand 572 states and 717 transitions. Second operand has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-23 03:30:40,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:30:40,910 INFO L93 Difference]: Finished difference Result 1278 states and 1600 transitions. [2022-11-23 03:30:40,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-23 03:30:40,911 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 106 [2022-11-23 03:30:40,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:30:40,913 INFO L225 Difference]: With dead ends: 1278 [2022-11-23 03:30:40,913 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 03:30:40,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-11-23 03:30:40,920 INFO L413 NwaCegarLoop]: 176 mSDtfsCounter, 72 mSDsluCounter, 701 mSDsCounter, 0 mSdLazyCounter, 113 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 877 SdHoareTripleChecker+Invalid, 118 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 113 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 03:30:40,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 877 Invalid, 118 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 113 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 03:30:40,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 03:30:40,922 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 03:30:40,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 03:30:40,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 03:30:40,923 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 106 [2022-11-23 03:30:40,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:30:40,923 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 03:30:40,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.375) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-23 03:30:40,924 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 03:30:40,924 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 03:30:40,926 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 03:30:40,940 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 03:30:41,132 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 03:30:41,134 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 03:30:45,792 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 342 349) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (= 1 ~systemActive~0))) (or .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 342 349) no Hoare annotation was computed. [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 342 349) no Hoare annotation was computed. [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 258 264) no Hoare annotation was computed. [2022-11-23 03:30:45,793 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 258 264) the Hoare annotation is: true [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 158 169) no Hoare annotation was computed. [2022-11-23 03:30:45,793 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 158 169) the Hoare annotation is: (let ((.cse2 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or .cse2 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 158 169) no Hoare annotation was computed. [2022-11-23 03:30:45,793 INFO L899 garLoopResultBuilder]: For program point L897(line 897) no Hoare annotation was computed. [2022-11-23 03:30:45,794 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 876 905) no Hoare annotation was computed. [2022-11-23 03:30:45,794 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 876 905) the Hoare annotation is: true [2022-11-23 03:30:45,794 INFO L899 garLoopResultBuilder]: For program point L890(lines 890 894) no Hoare annotation was computed. [2022-11-23 03:30:45,794 INFO L902 garLoopResultBuilder]: At program point L890-1(lines 890 894) the Hoare annotation is: true [2022-11-23 03:30:45,794 INFO L899 garLoopResultBuilder]: For program point L887(line 887) no Hoare annotation was computed. [2022-11-23 03:30:45,794 INFO L902 garLoopResultBuilder]: At program point L886-2(lines 886 900) the Hoare annotation is: true [2022-11-23 03:30:45,794 INFO L902 garLoopResultBuilder]: At program point L882(line 882) the Hoare annotation is: true [2022-11-23 03:30:45,794 INFO L899 garLoopResultBuilder]: For program point L882-1(line 882) no Hoare annotation was computed. [2022-11-23 03:30:45,794 INFO L902 garLoopResultBuilder]: At program point L901(lines 876 905) the Hoare annotation is: true [2022-11-23 03:30:45,795 INFO L895 garLoopResultBuilder]: At program point L366(lines 361 369) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (not (= 0 ~systemActive~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (and .cse4 .cse5) .cse2) (or .cse0 .cse6 .cse7) (or .cse0 (and .cse4 .cse5 .cse3) .cse7) (or .cse1 .cse6))) [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point L238-1(lines 237 256) no Hoare annotation was computed. [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point L300(lines 300 308) no Hoare annotation was computed. [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point L296(lines 296 313) no Hoare annotation was computed. [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 234 257) no Hoare annotation was computed. [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point L65(lines 65 71) no Hoare annotation was computed. [2022-11-23 03:30:45,795 INFO L899 garLoopResultBuilder]: For program point L61(lines 61 74) no Hoare annotation was computed. [2022-11-23 03:30:45,796 INFO L895 garLoopResultBuilder]: At program point L61-1(lines 53 77) the Hoare annotation is: (let ((.cse8 (= 1 ~systemActive~0))) (let ((.cse5 (not (= 0 ~systemActive~0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse8)) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse3) .cse5) (or .cse0 .cse6 .cse7 .cse5) (or .cse1 .cse2 (and .cse4 .cse8)) (or .cse1 (and .cse6 (<= 2 ~waterLevel~0)) .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6) (and .cse4 .cse6 .cse8)) (or .cse0 .cse1 .cse7 .cse3)))) [2022-11-23 03:30:45,796 INFO L899 garLoopResultBuilder]: For program point L83(line 83) no Hoare annotation was computed. [2022-11-23 03:30:45,796 INFO L895 garLoopResultBuilder]: At program point L306(line 306) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1) (or .cse2 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,796 INFO L895 garLoopResultBuilder]: At program point L302(line 302) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse3 .cse1 .cse2) (or .cse1 .cse4 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|))) (or .cse3 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,796 INFO L895 garLoopResultBuilder]: At program point L298(line 298) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,796 INFO L899 garLoopResultBuilder]: For program point L298-1(line 298) no Hoare annotation was computed. [2022-11-23 03:30:45,797 INFO L895 garLoopResultBuilder]: At program point L59(line 59) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse3) (not (= 0 ~systemActive~0))) (or .cse4 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3))) [2022-11-23 03:30:45,797 INFO L899 garLoopResultBuilder]: For program point L59-1(line 59) no Hoare annotation was computed. [2022-11-23 03:30:45,797 INFO L895 garLoopResultBuilder]: At program point L311(line 311) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,797 INFO L895 garLoopResultBuilder]: At program point L311-1(lines 292 316) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,797 INFO L899 garLoopResultBuilder]: For program point L245-1(lines 245 251) no Hoare annotation was computed. [2022-11-23 03:30:45,798 INFO L895 garLoopResultBuilder]: At program point L84(lines 79 86) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,798 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 234 257) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (= 0 ~systemActive~0))) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2)))) [2022-11-23 03:30:45,798 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 234 257) no Hoare annotation was computed. [2022-11-23 03:30:45,798 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 142) no Hoare annotation was computed. [2022-11-23 03:30:45,798 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 83) no Hoare annotation was computed. [2022-11-23 03:30:45,798 INFO L895 garLoopResultBuilder]: At program point L138-2(lines 134 145) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse3) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,798 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 170 178) the Hoare annotation is: true [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 170 178) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 170 178) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L902 garLoopResultBuilder]: At program point L944(lines 937 946) the Hoare annotation is: true [2022-11-23 03:30:45,799 INFO L895 garLoopResultBuilder]: At program point L106(lines 102 108) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point L453(lines 452 499) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point L482(lines 482 495) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 964) no Hoare annotation was computed. [2022-11-23 03:30:45,799 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L957-2(lines 957 964) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L895 garLoopResultBuilder]: At program point L474(line 474) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-23 03:30:45,800 INFO L902 garLoopResultBuilder]: At program point L503(lines 442 507) the Hoare annotation is: true [2022-11-23 03:30:45,800 INFO L895 garLoopResultBuilder]: At program point L437(lines 425 439) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L462(lines 462 468) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L462-1(lines 462 468) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L429(lines 429 435) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L429-1(lines 429 435) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L899 garLoopResultBuilder]: For program point L454(lines 454 458) no Hoare annotation was computed. [2022-11-23 03:30:45,800 INFO L902 garLoopResultBuilder]: At program point L966(lines 947 969) the Hoare annotation is: true [2022-11-23 03:30:45,801 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 03:30:45,801 INFO L895 garLoopResultBuilder]: At program point L500(lines 451 501) the Hoare annotation is: false [2022-11-23 03:30:45,801 INFO L899 garLoopResultBuilder]: For program point L488(lines 488 494) no Hoare annotation was computed. [2022-11-23 03:30:45,801 INFO L895 garLoopResultBuilder]: At program point L934(lines 930 936) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:30:45,801 INFO L895 garLoopResultBuilder]: At program point L488-2(lines 482 495) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-11-23 03:30:45,801 INFO L895 garLoopResultBuilder]: At program point L121(lines 116 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:30:45,801 INFO L899 garLoopResultBuilder]: For program point L472(lines 472 478) no Hoare annotation was computed. [2022-11-23 03:30:45,801 INFO L899 garLoopResultBuilder]: For program point L472-1(lines 472 478) no Hoare annotation was computed. [2022-11-23 03:30:45,802 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:30:45,802 INFO L895 garLoopResultBuilder]: At program point L497(lines 452 499) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-23 03:30:45,802 INFO L895 garLoopResultBuilder]: At program point L464(line 464) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= 0 ~systemActive~0)) (and (= ~methaneLevelCritical~0 0) .cse2 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 .cse1))) [2022-11-23 03:30:45,802 INFO L895 garLoopResultBuilder]: At program point L431(line 431) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0 (not (= 0 ~systemActive~0))))) [2022-11-23 03:30:45,802 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 146 157) no Hoare annotation was computed. [2022-11-23 03:30:45,802 INFO L899 garLoopResultBuilder]: For program point L150-1(lines 146 157) no Hoare annotation was computed. [2022-11-23 03:30:45,802 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 146 157) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse2 (not (= ~methaneLevelCritical~0 0)) .cse1) (or .cse0 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse1))) [2022-11-23 03:30:45,803 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-11-23 03:30:45,803 INFO L899 garLoopResultBuilder]: For program point L415-2(lines 415 419) no Hoare annotation was computed. [2022-11-23 03:30:45,803 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-11-23 03:30:45,803 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 266 290) no Hoare annotation was computed. [2022-11-23 03:30:45,803 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 221) no Hoare annotation was computed. [2022-11-23 03:30:45,805 INFO L895 garLoopResultBuilder]: At program point L220(lines 211 224) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse1 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or (and .cse0 .cse1 .cse2) .cse3 (and .cse0 .cse2 .cse4) (not (= ~methaneLevelCritical~0 0)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse3 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse4)))) [2022-11-23 03:30:45,805 INFO L895 garLoopResultBuilder]: At program point L280(line 280) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~1#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-23 03:30:45,806 INFO L899 garLoopResultBuilder]: For program point L274(lines 274 282) no Hoare annotation was computed. [2022-11-23 03:30:45,806 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 266 290) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-23 03:30:45,806 INFO L899 garLoopResultBuilder]: For program point L270(lines 270 287) no Hoare annotation was computed. [2022-11-23 03:30:45,806 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 338) no Hoare annotation was computed. [2022-11-23 03:30:45,806 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 266 290) no Hoare annotation was computed. [2022-11-23 03:30:45,806 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse2 (= 1 ~systemActive~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse2)) (.cse1 (not .cse2))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)))))) [2022-11-23 03:30:45,807 INFO L895 garLoopResultBuilder]: At program point L332-2(lines 325 341) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~3#1| ~methaneLevelCritical~0))) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 03:30:45,807 INFO L899 garLoopResultBuilder]: For program point L330-1(line 330) no Hoare annotation was computed. [2022-11-23 03:30:45,807 INFO L895 garLoopResultBuilder]: At program point L421(lines 406 424) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (and .cse3 .cse4 (<= 2 ~waterLevel~0) .cse5)) (.cse1 (not .cse5)) (.cse2 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse3 .cse4 .cse5 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2022-11-23 03:30:45,807 INFO L895 garLoopResultBuilder]: At program point L322(lines 317 324) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2022-11-23 03:30:45,808 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 350 360) the Hoare annotation is: true [2022-11-23 03:30:45,808 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 350 360) no Hoare annotation was computed. [2022-11-23 03:30:45,808 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 350 360) no Hoare annotation was computed. [2022-11-23 03:30:45,808 INFO L902 garLoopResultBuilder]: At program point L355(line 355) the Hoare annotation is: true [2022-11-23 03:30:45,808 INFO L899 garLoopResultBuilder]: For program point L355-1(line 355) no Hoare annotation was computed. [2022-11-23 03:30:45,812 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:30:45,814 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 03:30:45,835 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:30:45 BoogieIcfgContainer [2022-11-23 03:30:45,835 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 03:30:45,836 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 03:30:45,836 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 03:30:45,836 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 03:30:45,837 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:30:34" (3/4) ... [2022-11-23 03:30:45,840 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 03:30:45,846 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 03:30:45,847 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 03:30:45,847 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 03:30:45,847 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 03:30:45,847 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 03:30:45,847 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-23 03:30:45,848 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 03:30:45,848 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-23 03:30:45,848 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-23 03:30:45,854 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 21 nodes and edges [2022-11-23 03:30:45,854 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-23 03:30:45,855 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-23 03:30:45,855 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 03:30:45,856 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 03:30:45,882 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-23 03:30:45,883 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-23 03:30:45,883 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) [2022-11-23 03:30:45,884 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-11-23 03:30:45,884 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && tmp == methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-23 03:30:45,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-23 03:30:45,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-11-23 03:30:45,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-23 03:30:45,885 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) [2022-11-23 03:30:45,907 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/witness.graphml [2022-11-23 03:30:45,907 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 03:30:45,907 INFO L158 Benchmark]: Toolchain (without parser) took 12779.59ms. Allocated memory was 146.8MB in the beginning and 224.4MB in the end (delta: 77.6MB). Free memory was 115.4MB in the beginning and 132.2MB in the end (delta: -16.8MB). Peak memory consumption was 61.7MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,908 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 117.4MB. Free memory is still 71.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 03:30:45,908 INFO L158 Benchmark]: CACSL2BoogieTranslator took 516.85ms. Allocated memory is still 146.8MB. Free memory was 115.0MB in the beginning and 96.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,908 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.27ms. Allocated memory is still 146.8MB. Free memory was 96.4MB in the beginning and 94.2MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 03:30:45,909 INFO L158 Benchmark]: Boogie Preprocessor took 29.15ms. Allocated memory is still 146.8MB. Free memory was 94.2MB in the beginning and 92.8MB in the end (delta: 1.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,909 INFO L158 Benchmark]: RCFGBuilder took 568.97ms. Allocated memory is still 146.8MB. Free memory was 92.5MB in the beginning and 76.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,910 INFO L158 Benchmark]: TraceAbstraction took 11542.08ms. Allocated memory was 146.8MB in the beginning and 224.4MB in the end (delta: 77.6MB). Free memory was 75.4MB in the beginning and 138.5MB in the end (delta: -63.1MB). Peak memory consumption was 94.4MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,910 INFO L158 Benchmark]: Witness Printer took 71.05ms. Allocated memory is still 224.4MB. Free memory was 138.5MB in the beginning and 132.2MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-23 03:30:45,912 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 117.4MB. Free memory is still 71.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 516.85ms. Allocated memory is still 146.8MB. Free memory was 115.0MB in the beginning and 96.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.27ms. Allocated memory is still 146.8MB. Free memory was 96.4MB in the beginning and 94.2MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 29.15ms. Allocated memory is still 146.8MB. Free memory was 94.2MB in the beginning and 92.8MB in the end (delta: 1.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 568.97ms. Allocated memory is still 146.8MB. Free memory was 92.5MB in the beginning and 76.0MB in the end (delta: 16.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11542.08ms. Allocated memory was 146.8MB in the beginning and 224.4MB in the end (delta: 77.6MB). Free memory was 75.4MB in the beginning and 138.5MB in the end (delta: -63.1MB). Peak memory consumption was 94.4MB. Max. memory is 16.1GB. * Witness Printer took 71.05ms. Allocated memory is still 224.4MB. Free memory was 138.5MB in the beginning and 132.2MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 83]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.4s, OverallIterations: 10, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1513 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1463 mSDsluCounter, 3611 SdHoareTripleChecker+Invalid, 1.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2534 mSDsCounter, 448 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1950 IncrementalHoareTripleChecker+Invalid, 2398 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 448 mSolverCounterUnsat, 1077 mSDtfsCounter, 1950 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 298 GetRequests, 201 SyntacticMatches, 0 SemanticMatches, 97 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 359 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1171occurred in iteration=8, InterpolantAutomatonStates: 88, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 187 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 1775 PreInvPairs, 2192 NumberOfFragments, 1381 HoareAnnotationTreeSize, 1775 FomulaSimplifications, 5624 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 45 FomulaSimplificationsInter, 15202 FormulaSimplificationTreeSizeReductionInter, 3.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 628 NumberOfCodeBlocks, 628 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 617 ConstructedInterpolants, 0 QuantifiedInterpolants, 1093 SizeOfPredicates, 3 NumberOfNonLiveVariables, 343 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 11 InterpolantComputations, 10 PerfectInterpolantSequences, 112/124 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 79]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && 2 <= waterLevel) && tmp == methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= \result && pumpRunning == 0)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 406]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) && ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0)) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(1 == systemActive) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive) || ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 53]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || tmp == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || (tmp == 0 && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || ((pumpRunning == 0 && tmp == 0) && 1 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 116]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 134]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || \old(waterLevel) == waterLevel) && ((pumpRunning == 0 || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel)) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 451]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-23 03:30:45,948 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_0dd5c509-2b4d-4b05-ac3e-8ba578f1448b/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE