./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 449370313253a0d5d7b509b2cd15e912fe8e85dcb7140575e7078385cf7fc6cf --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 01:46:45,663 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 01:46:45,666 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 01:46:45,704 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 01:46:45,704 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 01:46:45,705 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 01:46:45,706 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 01:46:45,708 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 01:46:45,709 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 01:46:45,710 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 01:46:45,711 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 01:46:45,712 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 01:46:45,713 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 01:46:45,714 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 01:46:45,717 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 01:46:45,719 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 01:46:45,721 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 01:46:45,726 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 01:46:45,730 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 01:46:45,733 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 01:46:45,734 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 01:46:45,738 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 01:46:45,739 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 01:46:45,739 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 01:46:45,742 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 01:46:45,743 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 01:46:45,743 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 01:46:45,744 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 01:46:45,744 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 01:46:45,745 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 01:46:45,745 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 01:46:45,746 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 01:46:45,752 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 01:46:45,753 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 01:46:45,754 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 01:46:45,754 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 01:46:45,755 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 01:46:45,755 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 01:46:45,755 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 01:46:45,758 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 01:46:45,759 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 01:46:45,759 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-23 01:46:45,801 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 01:46:45,802 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 01:46:45,802 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 01:46:45,802 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 01:46:45,803 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 01:46:45,803 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 01:46:45,804 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 01:46:45,804 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 01:46:45,804 INFO L138 SettingsManager]: * Use SBE=true [2022-11-23 01:46:45,805 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 01:46:45,806 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 01:46:45,806 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 01:46:45,806 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 01:46:45,806 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 01:46:45,806 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 01:46:45,807 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 01:46:45,807 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 01:46:45,807 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 01:46:45,807 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 01:46:45,807 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 01:46:45,808 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 01:46:45,808 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 01:46:45,808 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 01:46:45,808 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 01:46:45,808 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 01:46:45,809 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 01:46:45,809 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 01:46:45,809 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 01:46:45,810 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-23 01:46:45,810 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 01:46:45,810 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-23 01:46:45,810 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 01:46:45,811 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-23 01:46:45,811 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 01:46:45,811 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 449370313253a0d5d7b509b2cd15e912fe8e85dcb7140575e7078385cf7fc6cf [2022-11-23 01:46:46,116 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 01:46:46,142 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 01:46:46,144 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 01:46:46,145 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 01:46:46,146 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 01:46:46,147 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/../../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2022-11-23 01:46:49,061 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 01:46:49,402 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 01:46:49,402 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2022-11-23 01:46:49,416 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/data/eaab2a50c/d34a2b04224b4562821baff0d779ddd8/FLAG21c8a9094 [2022-11-23 01:46:49,438 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/data/eaab2a50c/d34a2b04224b4562821baff0d779ddd8 [2022-11-23 01:46:49,441 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 01:46:49,443 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 01:46:49,446 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 01:46:49,446 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 01:46:49,449 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 01:46:49,450 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:46:49" (1/1) ... [2022-11-23 01:46:49,451 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7a3f0eae and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:49, skipping insertion in model container [2022-11-23 01:46:49,451 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 01:46:49" (1/1) ... [2022-11-23 01:46:49,457 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 01:46:49,517 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 01:46:49,783 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-11-23 01:46:49,871 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 01:46:49,883 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 01:46:49,936 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c[7477,7490] [2022-11-23 01:46:49,978 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 01:46:50,007 INFO L208 MainTranslator]: Completed translation [2022-11-23 01:46:50,008 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50 WrapperNode [2022-11-23 01:46:50,008 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 01:46:50,009 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 01:46:50,010 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 01:46:50,010 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 01:46:50,017 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,043 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,064 INFO L138 Inliner]: procedures = 54, calls = 97, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 193 [2022-11-23 01:46:50,064 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 01:46:50,065 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 01:46:50,065 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 01:46:50,065 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 01:46:50,074 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,075 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,076 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,077 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,081 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,086 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,087 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,088 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,090 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 01:46:50,091 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 01:46:50,091 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 01:46:50,091 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 01:46:50,092 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (1/1) ... [2022-11-23 01:46:50,098 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 01:46:50,109 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 01:46:50,122 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 01:46:50,152 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 01:46:50,172 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 01:46:50,172 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 01:46:50,172 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 01:46:50,173 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-23 01:46:50,174 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-23 01:46:50,174 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 01:46:50,174 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 01:46:50,174 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 01:46:50,174 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 01:46:50,175 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 01:46:50,175 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 01:46:50,175 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 01:46:50,175 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 01:46:50,175 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 01:46:50,176 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 01:46:50,176 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 01:46:50,278 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 01:46:50,280 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 01:46:50,608 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 01:46:50,614 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 01:46:50,615 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 01:46:50,616 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:50 BoogieIcfgContainer [2022-11-23 01:46:50,617 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 01:46:50,619 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 01:46:50,619 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 01:46:50,622 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 01:46:50,622 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 01:46:49" (1/3) ... [2022-11-23 01:46:50,622 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6743944c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:46:50, skipping insertion in model container [2022-11-23 01:46:50,623 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 01:46:50" (2/3) ... [2022-11-23 01:46:50,623 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6743944c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 01:46:50, skipping insertion in model container [2022-11-23 01:46:50,623 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:50" (3/3) ... [2022-11-23 01:46:50,624 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product42.cil.c [2022-11-23 01:46:50,642 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 01:46:50,642 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 01:46:50,689 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 01:46:50,694 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7ad297f9, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 01:46:50,695 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 01:46:50,699 INFO L276 IsEmpty]: Start isEmpty. Operand has 82 states, 64 states have (on average 1.390625) internal successors, (89), 70 states have internal predecessors, (89), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-23 01:46:50,707 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-23 01:46:50,707 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:50,708 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:50,709 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:50,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:50,713 INFO L85 PathProgramCache]: Analyzing trace with hash 1617756963, now seen corresponding path program 1 times [2022-11-23 01:46:50,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:50,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690251055] [2022-11-23 01:46:50,723 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:50,723 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:50,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:50,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-23 01:46:50,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:50,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:50,979 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:50,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690251055] [2022-11-23 01:46:50,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1690251055] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:50,980 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:50,981 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 01:46:50,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [114169731] [2022-11-23 01:46:50,983 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:50,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 01:46:50,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:51,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 01:46:51,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 01:46:51,027 INFO L87 Difference]: Start difference. First operand has 82 states, 64 states have (on average 1.390625) internal successors, (89), 70 states have internal predecessors, (89), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:51,082 INFO L93 Difference]: Finished difference Result 156 states and 213 transitions. [2022-11-23 01:46:51,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 01:46:51,085 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-23 01:46:51,085 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:51,095 INFO L225 Difference]: With dead ends: 156 [2022-11-23 01:46:51,095 INFO L226 Difference]: Without dead ends: 73 [2022-11-23 01:46:51,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 01:46:51,103 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 103 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:51,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:51,122 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-23 01:46:51,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-23 01:46:51,155 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 62 states have internal predecessors, (75), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-23 01:46:51,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 94 transitions. [2022-11-23 01:46:51,162 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 94 transitions. Word has length 25 [2022-11-23 01:46:51,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:51,164 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 94 transitions. [2022-11-23 01:46:51,165 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,165 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 94 transitions. [2022-11-23 01:46:51,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-23 01:46:51,169 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:51,170 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:51,170 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 01:46:51,170 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:51,172 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:51,172 INFO L85 PathProgramCache]: Analyzing trace with hash 1176803179, now seen corresponding path program 1 times [2022-11-23 01:46:51,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:51,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [91390960] [2022-11-23 01:46:51,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:51,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:51,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-23 01:46:51,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:51,351 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:51,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [91390960] [2022-11-23 01:46:51,351 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [91390960] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:51,352 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:51,352 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 01:46:51,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000498968] [2022-11-23 01:46:51,352 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:51,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 01:46:51,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:51,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 01:46:51,354 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 01:46:51,355 INFO L87 Difference]: Start difference. First operand 73 states and 94 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:51,369 INFO L93 Difference]: Finished difference Result 111 states and 143 transitions. [2022-11-23 01:46:51,369 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 01:46:51,369 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-23 01:46:51,370 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:51,370 INFO L225 Difference]: With dead ends: 111 [2022-11-23 01:46:51,371 INFO L226 Difference]: Without dead ends: 64 [2022-11-23 01:46:51,371 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 01:46:51,373 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 13 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 145 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:51,373 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 145 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:51,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-23 01:46:51,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-11-23 01:46:51,380 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 51 states have (on average 1.3333333333333333) internal successors, (68), 56 states have internal predecessors, (68), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-23 01:46:51,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 82 transitions. [2022-11-23 01:46:51,381 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 82 transitions. Word has length 26 [2022-11-23 01:46:51,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:51,382 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 82 transitions. [2022-11-23 01:46:51,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,382 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 82 transitions. [2022-11-23 01:46:51,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-23 01:46:51,383 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:51,384 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:51,384 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 01:46:51,384 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:51,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:51,385 INFO L85 PathProgramCache]: Analyzing trace with hash 414343402, now seen corresponding path program 1 times [2022-11-23 01:46:51,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:51,385 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701640562] [2022-11-23 01:46:51,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:51,386 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:51,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 01:46:51,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:51,529 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:51,529 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701640562] [2022-11-23 01:46:51,530 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701640562] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:51,530 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:51,530 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 01:46:51,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [518386375] [2022-11-23 01:46:51,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:51,531 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 01:46:51,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:51,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 01:46:51,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 01:46:51,532 INFO L87 Difference]: Start difference. First operand 64 states and 82 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:51,614 INFO L93 Difference]: Finished difference Result 121 states and 158 transitions. [2022-11-23 01:46:51,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 01:46:51,615 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-23 01:46:51,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:51,617 INFO L225 Difference]: With dead ends: 121 [2022-11-23 01:46:51,617 INFO L226 Difference]: Without dead ends: 64 [2022-11-23 01:46:51,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 01:46:51,619 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 107 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:51,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 193 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:51,621 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-11-23 01:46:51,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 64. [2022-11-23 01:46:51,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 64 states, 51 states have (on average 1.3137254901960784) internal successors, (67), 56 states have internal predecessors, (67), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-23 01:46:51,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 64 states to 64 states and 81 transitions. [2022-11-23 01:46:51,629 INFO L78 Accepts]: Start accepts. Automaton has 64 states and 81 transitions. Word has length 31 [2022-11-23 01:46:51,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:51,629 INFO L495 AbstractCegarLoop]: Abstraction has 64 states and 81 transitions. [2022-11-23 01:46:51,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 01:46:51,630 INFO L276 IsEmpty]: Start isEmpty. Operand 64 states and 81 transitions. [2022-11-23 01:46:51,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-23 01:46:51,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:51,631 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:51,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 01:46:51,632 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:51,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:51,632 INFO L85 PathProgramCache]: Analyzing trace with hash 808202887, now seen corresponding path program 1 times [2022-11-23 01:46:51,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:51,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [34800700] [2022-11-23 01:46:51,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:51,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:51,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 01:46:51,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-23 01:46:51,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,725 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:51,726 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:51,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [34800700] [2022-11-23 01:46:51,726 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [34800700] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:51,726 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:51,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 01:46:51,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [469673914] [2022-11-23 01:46:51,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:51,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 01:46:51,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:51,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 01:46:51,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 01:46:51,728 INFO L87 Difference]: Start difference. First operand 64 states and 81 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 01:46:51,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:51,790 INFO L93 Difference]: Finished difference Result 163 states and 210 transitions. [2022-11-23 01:46:51,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 01:46:51,791 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-11-23 01:46:51,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:51,792 INFO L225 Difference]: With dead ends: 163 [2022-11-23 01:46:51,792 INFO L226 Difference]: Without dead ends: 106 [2022-11-23 01:46:51,793 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 01:46:51,794 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 54 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 149 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:51,795 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 149 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:51,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 106 states. [2022-11-23 01:46:51,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 106 to 104. [2022-11-23 01:46:51,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 82 states have (on average 1.3048780487804879) internal successors, (107), 89 states have internal predecessors, (107), 11 states have call successors, (11), 10 states have call predecessors, (11), 10 states have return successors, (13), 11 states have call predecessors, (13), 11 states have call successors, (13) [2022-11-23 01:46:51,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 131 transitions. [2022-11-23 01:46:51,810 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 131 transitions. Word has length 36 [2022-11-23 01:46:51,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:51,810 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 131 transitions. [2022-11-23 01:46:51,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 01:46:51,811 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 131 transitions. [2022-11-23 01:46:51,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-23 01:46:51,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:51,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:51,812 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 01:46:51,813 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:51,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:51,813 INFO L85 PathProgramCache]: Analyzing trace with hash 165647039, now seen corresponding path program 1 times [2022-11-23 01:46:51,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:51,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319347913] [2022-11-23 01:46:51,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:51,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:51,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-23 01:46:51,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,976 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-23 01:46:51,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:51,981 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:51,981 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:51,981 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319347913] [2022-11-23 01:46:51,981 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319347913] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:51,982 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:51,982 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 01:46:51,982 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1452926948] [2022-11-23 01:46:51,982 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:51,983 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 01:46:51,983 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:51,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 01:46:51,983 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 01:46:51,984 INFO L87 Difference]: Start difference. First operand 104 states and 131 transitions. Second operand has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 01:46:52,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:52,052 INFO L93 Difference]: Finished difference Result 288 states and 379 transitions. [2022-11-23 01:46:52,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 01:46:52,053 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 42 [2022-11-23 01:46:52,053 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:52,055 INFO L225 Difference]: With dead ends: 288 [2022-11-23 01:46:52,055 INFO L226 Difference]: Without dead ends: 191 [2022-11-23 01:46:52,056 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 01:46:52,058 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 41 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 316 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:52,058 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 316 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:52,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-11-23 01:46:52,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 185. [2022-11-23 01:46:52,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 146 states have (on average 1.2808219178082192) internal successors, (187), 156 states have internal predecessors, (187), 21 states have call successors, (21), 19 states have call predecessors, (21), 17 states have return successors, (27), 19 states have call predecessors, (27), 21 states have call successors, (27) [2022-11-23 01:46:52,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 235 transitions. [2022-11-23 01:46:52,114 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 235 transitions. Word has length 42 [2022-11-23 01:46:52,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:52,114 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 235 transitions. [2022-11-23 01:46:52,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.4) internal successors, (37), 5 states have internal predecessors, (37), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 01:46:52,127 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 235 transitions. [2022-11-23 01:46:52,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-23 01:46:52,128 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:52,129 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:52,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 01:46:52,129 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:52,129 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:52,129 INFO L85 PathProgramCache]: Analyzing trace with hash -1345519451, now seen corresponding path program 1 times [2022-11-23 01:46:52,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:52,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576025610] [2022-11-23 01:46:52,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:52,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:52,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:52,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 01:46:52,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-23 01:46:52,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:52,345 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:52,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576025610] [2022-11-23 01:46:52,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576025610] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:52,345 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:52,345 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 01:46:52,346 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1512633552] [2022-11-23 01:46:52,346 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:52,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 01:46:52,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:52,354 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 01:46:52,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 01:46:52,355 INFO L87 Difference]: Start difference. First operand 185 states and 235 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:52,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:52,656 INFO L93 Difference]: Finished difference Result 469 states and 631 transitions. [2022-11-23 01:46:52,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 01:46:52,657 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-23 01:46:52,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:52,660 INFO L225 Difference]: With dead ends: 469 [2022-11-23 01:46:52,661 INFO L226 Difference]: Without dead ends: 372 [2022-11-23 01:46:52,662 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-23 01:46:52,664 INFO L413 NwaCegarLoop]: 74 mSDtfsCounter, 164 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:52,664 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 312 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 01:46:52,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2022-11-23 01:46:52,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 348. [2022-11-23 01:46:52,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 277 states have (on average 1.2707581227436824) internal successors, (352), 300 states have internal predecessors, (352), 39 states have call successors, (39), 27 states have call predecessors, (39), 31 states have return successors, (59), 37 states have call predecessors, (59), 39 states have call successors, (59) [2022-11-23 01:46:52,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 450 transitions. [2022-11-23 01:46:52,716 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 450 transitions. Word has length 46 [2022-11-23 01:46:52,716 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:52,716 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 450 transitions. [2022-11-23 01:46:52,716 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:52,717 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 450 transitions. [2022-11-23 01:46:52,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-23 01:46:52,718 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:52,718 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:52,719 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 01:46:52,719 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:52,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:52,720 INFO L85 PathProgramCache]: Analyzing trace with hash -1126664733, now seen corresponding path program 1 times [2022-11-23 01:46:52,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:52,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1414787593] [2022-11-23 01:46:52,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:52,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:52,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:52,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 01:46:52,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-23 01:46:52,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:52,780 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:52,780 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:52,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1414787593] [2022-11-23 01:46:52,781 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1414787593] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:52,781 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:52,781 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 01:46:52,781 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [431170632] [2022-11-23 01:46:52,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:52,782 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 01:46:52,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:52,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 01:46:52,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 01:46:52,783 INFO L87 Difference]: Start difference. First operand 348 states and 450 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:53,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:53,028 INFO L93 Difference]: Finished difference Result 721 states and 948 transitions. [2022-11-23 01:46:53,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 01:46:53,029 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-23 01:46:53,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:53,033 INFO L225 Difference]: With dead ends: 721 [2022-11-23 01:46:53,033 INFO L226 Difference]: Without dead ends: 457 [2022-11-23 01:46:53,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-23 01:46:53,036 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 152 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:53,037 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 355 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 01:46:53,038 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 457 states. [2022-11-23 01:46:53,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 457 to 348. [2022-11-23 01:46:53,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 348 states, 277 states have (on average 1.263537906137184) internal successors, (350), 300 states have internal predecessors, (350), 39 states have call successors, (39), 27 states have call predecessors, (39), 31 states have return successors, (59), 37 states have call predecessors, (59), 39 states have call successors, (59) [2022-11-23 01:46:53,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 348 states to 348 states and 448 transitions. [2022-11-23 01:46:53,100 INFO L78 Accepts]: Start accepts. Automaton has 348 states and 448 transitions. Word has length 46 [2022-11-23 01:46:53,100 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:53,101 INFO L495 AbstractCegarLoop]: Abstraction has 348 states and 448 transitions. [2022-11-23 01:46:53,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:53,101 INFO L276 IsEmpty]: Start isEmpty. Operand 348 states and 448 transitions. [2022-11-23 01:46:53,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-23 01:46:53,103 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:53,103 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:53,103 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 01:46:53,103 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:53,104 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:53,104 INFO L85 PathProgramCache]: Analyzing trace with hash -1944313183, now seen corresponding path program 1 times [2022-11-23 01:46:53,104 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:53,104 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1799888342] [2022-11-23 01:46:53,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:53,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:53,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:53,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 01:46:53,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-23 01:46:53,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,190 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:53,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:53,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1799888342] [2022-11-23 01:46:53,191 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1799888342] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:53,191 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:53,191 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 01:46:53,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1861583002] [2022-11-23 01:46:53,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:53,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 01:46:53,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:53,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 01:46:53,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 01:46:53,193 INFO L87 Difference]: Start difference. First operand 348 states and 448 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:53,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:53,405 INFO L93 Difference]: Finished difference Result 791 states and 1037 transitions. [2022-11-23 01:46:53,406 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 01:46:53,406 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-23 01:46:53,406 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:53,412 INFO L225 Difference]: With dead ends: 791 [2022-11-23 01:46:53,412 INFO L226 Difference]: Without dead ends: 450 [2022-11-23 01:46:53,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-23 01:46:53,420 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 176 mSDsluCounter, 267 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:53,425 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 359 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 01:46:53,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 450 states. [2022-11-23 01:46:53,501 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 450 to 353. [2022-11-23 01:46:53,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 353 states, 285 states have (on average 1.249122807017544) internal successors, (356), 306 states have internal predecessors, (356), 37 states have call successors, (37), 26 states have call predecessors, (37), 30 states have return successors, (57), 35 states have call predecessors, (57), 37 states have call successors, (57) [2022-11-23 01:46:53,505 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 353 states to 353 states and 450 transitions. [2022-11-23 01:46:53,505 INFO L78 Accepts]: Start accepts. Automaton has 353 states and 450 transitions. Word has length 46 [2022-11-23 01:46:53,505 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:53,506 INFO L495 AbstractCegarLoop]: Abstraction has 353 states and 450 transitions. [2022-11-23 01:46:53,507 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:53,507 INFO L276 IsEmpty]: Start isEmpty. Operand 353 states and 450 transitions. [2022-11-23 01:46:53,508 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-23 01:46:53,508 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:53,508 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:53,508 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 01:46:53,509 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:53,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:53,509 INFO L85 PathProgramCache]: Analyzing trace with hash -1025339665, now seen corresponding path program 1 times [2022-11-23 01:46:53,509 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:53,509 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [669751344] [2022-11-23 01:46:53,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:53,510 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:53,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:53,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 01:46:53,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-23 01:46:53,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,736 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 01:46:53,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:53,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [669751344] [2022-11-23 01:46:53,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [669751344] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 01:46:53,737 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1541783577] [2022-11-23 01:46:53,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:53,737 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 01:46:53,737 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 01:46:53,742 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 01:46:53,767 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 01:46:53,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:53,832 INFO L263 TraceCheckSpWp]: Trace formula consists of 228 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-23 01:46:53,838 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 01:46:54,069 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 01:46:54,070 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 01:46:54,070 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1541783577] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:54,070 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 01:46:54,070 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [8] total 12 [2022-11-23 01:46:54,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1926509695] [2022-11-23 01:46:54,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:54,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 01:46:54,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:54,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 01:46:54,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-11-23 01:46:54,072 INFO L87 Difference]: Start difference. First operand 353 states and 450 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:54,236 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:54,237 INFO L93 Difference]: Finished difference Result 1076 states and 1397 transitions. [2022-11-23 01:46:54,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-23 01:46:54,237 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 51 [2022-11-23 01:46:54,238 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:54,241 INFO L225 Difference]: With dead ends: 1076 [2022-11-23 01:46:54,241 INFO L226 Difference]: Without dead ends: 730 [2022-11-23 01:46:54,243 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 50 SyntacticMatches, 3 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2022-11-23 01:46:54,244 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 108 mSDsluCounter, 411 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 112 SdHoareTripleChecker+Valid, 499 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:54,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [112 Valid, 499 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 01:46:54,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 730 states. [2022-11-23 01:46:54,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 730 to 700. [2022-11-23 01:46:54,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 700 states, 563 states have (on average 1.2255772646536411) internal successors, (690), 598 states have internal predecessors, (690), 75 states have call successors, (75), 51 states have call predecessors, (75), 61 states have return successors, (125), 71 states have call predecessors, (125), 75 states have call successors, (125) [2022-11-23 01:46:54,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 700 states to 700 states and 890 transitions. [2022-11-23 01:46:54,338 INFO L78 Accepts]: Start accepts. Automaton has 700 states and 890 transitions. Word has length 51 [2022-11-23 01:46:54,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:54,339 INFO L495 AbstractCegarLoop]: Abstraction has 700 states and 890 transitions. [2022-11-23 01:46:54,339 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:54,339 INFO L276 IsEmpty]: Start isEmpty. Operand 700 states and 890 transitions. [2022-11-23 01:46:54,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-23 01:46:54,341 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:54,352 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:54,363 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 01:46:54,558 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 01:46:54,558 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:54,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:54,559 INFO L85 PathProgramCache]: Analyzing trace with hash 468700430, now seen corresponding path program 1 times [2022-11-23 01:46:54,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:54,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834402597] [2022-11-23 01:46:54,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:54,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:54,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:54,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:54,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:54,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 01:46:54,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:54,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-23 01:46:54,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:54,661 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 01:46:54,661 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:54,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834402597] [2022-11-23 01:46:54,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834402597] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:54,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:54,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 01:46:54,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658363483] [2022-11-23 01:46:54,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:54,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 01:46:54,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:54,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 01:46:54,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-23 01:46:54,664 INFO L87 Difference]: Start difference. First operand 700 states and 890 transitions. Second operand has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:54,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:54,968 INFO L93 Difference]: Finished difference Result 1298 states and 1659 transitions. [2022-11-23 01:46:54,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 01:46:54,969 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-11-23 01:46:54,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:54,971 INFO L225 Difference]: With dead ends: 1298 [2022-11-23 01:46:54,971 INFO L226 Difference]: Without dead ends: 259 [2022-11-23 01:46:54,974 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=181, Unknown=0, NotChecked=0, Total=240 [2022-11-23 01:46:54,975 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 154 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 158 SdHoareTripleChecker+Valid, 475 SdHoareTripleChecker+Invalid, 252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:54,975 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [158 Valid, 475 Invalid, 252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 01:46:54,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-11-23 01:46:55,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 247. [2022-11-23 01:46:55,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 247 states, 197 states have (on average 1.1878172588832487) internal successors, (234), 208 states have internal predecessors, (234), 26 states have call successors, (26), 23 states have call predecessors, (26), 23 states have return successors, (31), 24 states have call predecessors, (31), 26 states have call successors, (31) [2022-11-23 01:46:55,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 247 states to 247 states and 291 transitions. [2022-11-23 01:46:55,005 INFO L78 Accepts]: Start accepts. Automaton has 247 states and 291 transitions. Word has length 52 [2022-11-23 01:46:55,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:55,006 INFO L495 AbstractCegarLoop]: Abstraction has 247 states and 291 transitions. [2022-11-23 01:46:55,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.375) internal successors, (43), 7 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 01:46:55,006 INFO L276 IsEmpty]: Start isEmpty. Operand 247 states and 291 transitions. [2022-11-23 01:46:55,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-23 01:46:55,007 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 01:46:55,007 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:46:55,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-23 01:46:55,008 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 01:46:55,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 01:46:55,008 INFO L85 PathProgramCache]: Analyzing trace with hash -1675825877, now seen corresponding path program 1 times [2022-11-23 01:46:55,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 01:46:55,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1033017544] [2022-11-23 01:46:55,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 01:46:55,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 01:46:55,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:55,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 01:46:55,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:55,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-23 01:46:55,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:55,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-23 01:46:55,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:55,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-23 01:46:55,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 01:46:55,143 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 01:46:55,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 01:46:55,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1033017544] [2022-11-23 01:46:55,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1033017544] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 01:46:55,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 01:46:55,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-23 01:46:55,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548832986] [2022-11-23 01:46:55,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 01:46:55,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 01:46:55,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 01:46:55,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 01:46:55,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2022-11-23 01:46:55,146 INFO L87 Difference]: Start difference. First operand 247 states and 291 transitions. Second operand has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 8 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 01:46:55,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 01:46:55,633 INFO L93 Difference]: Finished difference Result 483 states and 574 transitions. [2022-11-23 01:46:55,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-23 01:46:55,633 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 8 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-11-23 01:46:55,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 01:46:55,634 INFO L225 Difference]: With dead ends: 483 [2022-11-23 01:46:55,634 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 01:46:55,635 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 30 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=101, Invalid=361, Unknown=0, NotChecked=0, Total=462 [2022-11-23 01:46:55,636 INFO L413 NwaCegarLoop]: 43 mSDtfsCounter, 151 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 553 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 01:46:55,636 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 280 Invalid, 553 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 504 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 01:46:55,637 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 01:46:55,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 01:46:55,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 01:46:55,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 01:46:55,638 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 55 [2022-11-23 01:46:55,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 01:46:55,638 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 01:46:55,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 8 states have internal predecessors, (46), 2 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 01:46:55,639 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 01:46:55,639 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 01:46:55,641 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 01:46:55,642 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-23 01:46:55,643 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 01:47:01,775 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 257 263) no Hoare annotation was computed. [2022-11-23 01:47:01,776 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 257 263) the Hoare annotation is: true [2022-11-23 01:47:01,776 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 435 446) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= |old(~methaneLevelCritical~0)| 0)) (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0)) (not (<= 0 |old(~methaneLevelCritical~0)|)) .cse0) (or (not (= ~pumpRunning~0 0)) (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0) (not (<= 1 |old(~methaneLevelCritical~0)|)) .cse0))) [2022-11-23 01:47:01,776 INFO L899 garLoopResultBuilder]: For program point L439-1(lines 435 446) no Hoare annotation was computed. [2022-11-23 01:47:01,776 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 435 446) no Hoare annotation was computed. [2022-11-23 01:47:01,776 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 447 455) the Hoare annotation is: true [2022-11-23 01:47:01,776 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 447 455) no Hoare annotation was computed. [2022-11-23 01:47:01,776 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 447 455) no Hoare annotation was computed. [2022-11-23 01:47:01,777 INFO L899 garLoopResultBuilder]: For program point L415(lines 415 419) no Hoare annotation was computed. [2022-11-23 01:47:01,777 INFO L895 garLoopResultBuilder]: At program point L415-2(lines 411 422) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (not (<= 0 ~methaneLevelCritical~0)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-23 01:47:01,777 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 0 ~methaneLevelCritical~0)) .cse0) (or (= |old(~pumpRunning~0)| 0) .cse0))) [2022-11-23 01:47:01,777 INFO L895 garLoopResultBuilder]: At program point L395(lines 380 398) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1) (and (= |timeShift_isHighWaterLevel_#res#1| 1) .cse0 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse1 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1)) (not (<= 0 ~methaneLevelCritical~0)) .cse2)) (or (= |old(~pumpRunning~0)| 0) .cse2))) [2022-11-23 01:47:01,777 INFO L895 garLoopResultBuilder]: At program point L329(line 329) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1) (not (<= 0 ~methaneLevelCritical~0)) (and (= |timeShift_isHighWaterLevel_#res#1| 1) .cse0 (= |timeShift_processEnvironment_~tmp~2#1| 1) (= |timeShift_isHighWaterLevel_~tmp~4#1| 0) (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse1 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1)) .cse2)) (or (= |old(~pumpRunning~0)| 0) .cse2))) [2022-11-23 01:47:01,778 INFO L899 garLoopResultBuilder]: For program point L329-1(line 329) no Hoare annotation was computed. [2022-11-23 01:47:01,778 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 233 256) no Hoare annotation was computed. [2022-11-23 01:47:01,778 INFO L899 garLoopResultBuilder]: For program point L932(lines 932 938) no Hoare annotation was computed. [2022-11-23 01:47:01,778 INFO L899 garLoopResultBuilder]: For program point L928(lines 928 941) no Hoare annotation was computed. [2022-11-23 01:47:01,778 INFO L895 garLoopResultBuilder]: At program point L928-1(lines 913 945) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not .cse2)) (.cse0 (<= ~waterLevel~0 1)) (.cse1 (not .cse3)) (.cse8 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse13 (not .cse5)) (.cse9 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse10 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse14 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse11 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse12 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or (not (<= |old(~waterLevel~0)| 1)) (and .cse0 .cse1) .cse2 .cse3) (let ((.cse7 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0)))) (or .cse4 (and .cse5 .cse0 .cse6 .cse7 .cse1) (not (<= 1 ~methaneLevelCritical~0)) (and .cse8 .cse5 .cse9 .cse10 .cse11 .cse6 .cse7 .cse12) (and .cse8 .cse13 .cse9 .cse10 .cse14 .cse11 .cse6 .cse15 .cse12) .cse3 (and .cse13 .cse0 .cse14 .cse6 .cse15 .cse1))) (or .cse13 .cse2 .cse3) (let ((.cse16 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse17 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or .cse4 (and .cse5 .cse0 .cse6 .cse1) (not (<= ~methaneLevelCritical~0 0)) (and .cse0 .cse14 .cse16 .cse6 .cse17 .cse15 .cse1) (not (<= 0 ~methaneLevelCritical~0)) .cse3 (and .cse8 .cse13 .cse9 .cse10 .cse14 .cse16 .cse11 .cse6 .cse17 .cse15 .cse12)))))) [2022-11-23 01:47:01,778 INFO L895 garLoopResultBuilder]: At program point L284(line 284) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not .cse0) (not (<= 0 ~methaneLevelCritical~0)) .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (<= ~waterLevel~0 1) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2022-11-23 01:47:01,779 INFO L895 garLoopResultBuilder]: At program point L284-1(lines 265 289) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not .cse2)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse17 (= ~pumpRunning~0 0))) (let ((.cse3 (not .cse17)) (.cse4 (not .cse1)) (.cse5 (and .cse17 .cse0 .cse8 .cse11)) (.cse6 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse10 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse12 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse13 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse14 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse15 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse16 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (let ((.cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse9 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or .cse4 .cse5 (not (<= ~methaneLevelCritical~0 0)) (and .cse0 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (not (<= 0 ~methaneLevelCritical~0)) .cse2 (and .cse12 .cse3 .cse13 .cse14 .cse6 .cse7 .cse15 .cse8 .cse9 .cse10 .cse16))) (or .cse4 (and .cse0 .cse6 .cse8 .cse10 .cse11) .cse5 (not (<= 1 ~methaneLevelCritical~0)) (and .cse12 .cse13 .cse14 .cse6 .cse15 .cse8 .cse10 .cse16) (and .cse12 .cse17 .cse13 .cse14 .cse15 .cse8 .cse16) .cse2))))) [2022-11-23 01:47:01,779 INFO L899 garLoopResultBuilder]: For program point L507(line 507) no Hoare annotation was computed. [2022-11-23 01:47:01,779 INFO L895 garLoopResultBuilder]: At program point L920(line 920) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse0 (<= ~waterLevel~0 1)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not .cse2)) (.cse1 (= |old(~pumpRunning~0)| 0)) (.cse17 (= ~pumpRunning~0 0))) (let ((.cse3 (not .cse17)) (.cse4 (not .cse1)) (.cse5 (and .cse17 .cse0 .cse8 .cse11)) (.cse6 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse10 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse12 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse13 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse14 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse15 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse16 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse3 .cse1 .cse2) (let ((.cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse9 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or .cse4 .cse5 (not (<= ~methaneLevelCritical~0 0)) (and .cse0 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (not (<= 0 ~methaneLevelCritical~0)) .cse2 (and .cse12 .cse3 .cse13 .cse14 .cse6 .cse7 .cse15 .cse8 .cse9 .cse10 .cse16))) (or .cse4 (and .cse0 .cse6 .cse8 .cse10 .cse11) .cse5 (not (<= 1 ~methaneLevelCritical~0)) (and .cse12 .cse13 .cse14 .cse6 .cse15 .cse8 .cse10 .cse16) (and .cse12 .cse17 .cse13 .cse14 .cse15 .cse8 .cse16) .cse2))))) [2022-11-23 01:47:01,779 INFO L899 garLoopResultBuilder]: For program point L920-1(line 920) no Hoare annotation was computed. [2022-11-23 01:47:01,779 INFO L895 garLoopResultBuilder]: At program point L508(lines 503 510) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= |old(~pumpRunning~0)| 0) .cse0) (or (not (<= 0 ~methaneLevelCritical~0)) .cse0))) [2022-11-23 01:47:01,779 INFO L899 garLoopResultBuilder]: For program point L244-1(lines 244 250) no Hoare annotation was computed. [2022-11-23 01:47:01,780 INFO L899 garLoopResultBuilder]: For program point L306(lines 306 312) no Hoare annotation was computed. [2022-11-23 01:47:01,780 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 281) no Hoare annotation was computed. [2022-11-23 01:47:01,780 INFO L895 garLoopResultBuilder]: At program point L306-2(lines 299 315) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (let ((.cse2 (<= ~waterLevel~0 1)) (.cse8 (not .cse0)) (.cse3 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse7 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse9 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse14 (= ~pumpRunning~0 0)) (.cse10 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse11 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse12 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (let ((.cse1 (not .cse14)) (.cse4 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse6 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse1 .cse10 .cse11 .cse3 .cse4 .cse12 .cse5 .cse6 .cse7 .cse13))) (or (= |old(~pumpRunning~0)| 0) .cse0) (or (and .cse14 .cse2 .cse5) (and .cse2 .cse3 .cse5 .cse7 .cse8) (not (<= 1 ~methaneLevelCritical~0)) (and .cse9 .cse10 .cse11 .cse3 .cse12 .cse5 .cse7 .cse13) (and .cse9 .cse14 .cse10 .cse11 .cse12 .cse5 .cse13) .cse0)))) [2022-11-23 01:47:01,780 INFO L899 garLoopResultBuilder]: For program point L269(lines 269 286) no Hoare annotation was computed. [2022-11-23 01:47:01,780 INFO L899 garLoopResultBuilder]: For program point L492(lines 492 498) no Hoare annotation was computed. [2022-11-23 01:47:01,780 INFO L895 garLoopResultBuilder]: At program point L331(lines 324 334) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse2 (<= ~waterLevel~0 1)) (.cse4 (not .cse10)) (.cse5 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse7 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse8 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (let ((.cse0 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse6 .cse7 .cse8 .cse3 .cse9) (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse10)) (or (and .cse1 .cse2 .cse3 .cse4) (not (<= 1 ~methaneLevelCritical~0)) (and .cse5 .cse1 .cse6 .cse7 .cse8 .cse3 .cse9) .cse10) (or (= |old(~pumpRunning~0)| 0) .cse10)))) [2022-11-23 01:47:01,780 INFO L899 garLoopResultBuilder]: For program point L389(lines 389 393) no Hoare annotation was computed. [2022-11-23 01:47:01,781 INFO L895 garLoopResultBuilder]: At program point L484(lines 479 487) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse18 (= ~pumpRunning~0 0))) (let ((.cse8 (= |old(~pumpRunning~0)| 0)) (.cse10 (not .cse18)) (.cse6 (<= ~waterLevel~0 1)) (.cse13 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse21 (not .cse2))) (let ((.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse4 (and .cse10 .cse6 .cse13 .cse15 .cse16 .cse7 .cse21)) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not .cse8)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse11 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse12 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse14 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse17 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse3 .cse0 .cse4 .cse5 .cse2) (or (and .cse6 .cse7) .cse3 .cse8 .cse2) (or .cse0 .cse4 .cse5 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 .cse17) .cse2) (or .cse10 .cse8 .cse2) (let ((.cse19 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse20 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or (and .cse18 .cse6 .cse15 .cse7) .cse0 (and .cse6 .cse13 .cse19 .cse15 .cse20 .cse16 .cse7 .cse21) (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse19 .cse14 .cse15 .cse20 .cse16 .cse17))))))) [2022-11-23 01:47:01,781 INFO L899 garLoopResultBuilder]: For program point L389-2(lines 389 393) no Hoare annotation was computed. [2022-11-23 01:47:01,781 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 942) no Hoare annotation was computed. [2022-11-23 01:47:01,781 INFO L895 garLoopResultBuilder]: At program point L340(lines 335 343) the Hoare annotation is: (let ((.cse15 (= |old(~pumpRunning~0)| 0))) (let ((.cse13 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (not .cse15)) (.cse14 (not (<= 1 ~methaneLevelCritical~0))) (.cse12 (= 0 ~systemActive~0)) (.cse2 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse3 (not (= ~pumpRunning~0 0))) (.cse4 (not (= |timeShift_isPumpRunning_#res#1| 0))) (.cse5 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse6 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse7 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse8 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse11 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 (<= |timeShift_isMethaneAlarm_#res#1| 0) .cse8 .cse9 (<= 0 |timeShift_isMethaneAlarm_#res#1|) .cse10 .cse11) .cse12) (or .cse13 .cse14 .cse12) (or .cse13 .cse15 .cse12) (or (and .cse3 .cse4) .cse15 .cse12) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse12) (or .cse0 .cse14 .cse12 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))))) [2022-11-23 01:47:01,781 INFO L895 garLoopResultBuilder]: At program point L497(lines 488 501) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 (<= ~waterLevel~0 1) .cse1) (not (<= 0 ~methaneLevelCritical~0)) .cse2 (and .cse0 (= |timeShift_isHighWaterSensorDry_#res#1| 0) .cse1))) (or (= |old(~pumpRunning~0)| 0) .cse2))) [2022-11-23 01:47:01,782 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 233 256) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not .cse0) (and .cse1 .cse2) (not (<= 0 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse3 (and (not .cse1) .cse2)))) [2022-11-23 01:47:01,782 INFO L899 garLoopResultBuilder]: For program point L237-1(lines 236 255) no Hoare annotation was computed. [2022-11-23 01:47:01,782 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 233 256) no Hoare annotation was computed. [2022-11-23 01:47:01,782 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 507) no Hoare annotation was computed. [2022-11-23 01:47:01,782 INFO L895 garLoopResultBuilder]: At program point L295(lines 290 297) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse10 (<= ~waterLevel~0 1)) (.cse11 (not .cse9)) (.cse0 (= |timeShift_isHighWaterLevel_#res#1| 1)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (= |timeShift_processEnvironment_~tmp~2#1| 1)) (.cse3 (= |timeShift_isHighWaterLevel_~tmp~4#1| 0)) (.cse4 (<= |timeShift_activatePump_~tmp~3#1| 0)) (.cse5 (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 0 |timeShift_activatePump_~tmp~3#1|)) (.cse8 (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 1))) (and (or (not (<= 1 ~methaneLevelCritical~0)) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9 (and .cse1 .cse10 .cse4 .cse6 .cse7 .cse11)) (let ((.cse12 (<= |timeShift_isMethaneAlarm_#res#1| 0)) (.cse13 (<= 0 |timeShift_isMethaneAlarm_#res#1|))) (or (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse9 (and .cse1 .cse10 .cse4 .cse12 .cse6 .cse13 .cse7 .cse11) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse12 .cse5 .cse6 .cse13 .cse7 .cse8))) (or (= |old(~pumpRunning~0)| 0) .cse9)))) [2022-11-23 01:47:01,783 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-23 01:47:01,783 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-23 01:47:01,783 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-23 01:47:01,783 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-23 01:47:01,783 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-23 01:47:01,783 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-23 01:47:01,783 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-23 01:47:01,783 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L895 garLoopResultBuilder]: At program point L213(lines 164 214) the Hoare annotation is: false [2022-11-23 01:47:01,784 INFO L895 garLoopResultBuilder]: At program point L527(lines 523 529) the Hoare annotation is: (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point L185(lines 185 191) no Hoare annotation was computed. [2022-11-23 01:47:01,784 INFO L899 garLoopResultBuilder]: For program point L185-1(lines 185 191) no Hoare annotation was computed. [2022-11-23 01:47:01,785 INFO L895 garLoopResultBuilder]: At program point L404(lines 399 406) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 0 ~methaneLevelCritical~0) .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 01:47:01,785 INFO L895 garLoopResultBuilder]: At program point L210(lines 165 212) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 (<= 0 ~methaneLevelCritical~0) .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 01:47:01,785 INFO L895 garLoopResultBuilder]: At program point L177(line 177) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 (<= 0 ~methaneLevelCritical~0) .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 01:47:01,785 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-23 01:47:01,785 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-23 01:47:01,785 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 01:47:01,785 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-23 01:47:01,786 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-23 01:47:01,786 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-11-23 01:47:01,786 INFO L895 garLoopResultBuilder]: At program point L203-2(lines 195 208) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 0 ~methaneLevelCritical~0) .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 01:47:01,786 INFO L899 garLoopResultBuilder]: For program point L166(lines 165 212) no Hoare annotation was computed. [2022-11-23 01:47:01,786 INFO L899 garLoopResultBuilder]: For program point L195(lines 195 208) no Hoare annotation was computed. [2022-11-23 01:47:01,786 INFO L895 garLoopResultBuilder]: At program point L542(lines 537 545) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 01:47:01,786 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 0 ~methaneLevelCritical~0) .cse3) (and (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 01:47:01,787 INFO L902 garLoopResultBuilder]: At program point L216(lines 155 220) the Hoare annotation is: true [2022-11-23 01:47:01,787 INFO L895 garLoopResultBuilder]: At program point L534(lines 530 536) the Hoare annotation is: (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 01:47:01,787 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 01:47:01,787 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-11-23 01:47:01,787 INFO L899 garLoopResultBuilder]: For program point L175-1(lines 175 181) no Hoare annotation was computed. [2022-11-23 01:47:01,787 INFO L899 garLoopResultBuilder]: For program point L167(lines 167 171) no Hoare annotation was computed. [2022-11-23 01:47:01,787 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 423 434) no Hoare annotation was computed. [2022-11-23 01:47:01,787 INFO L899 garLoopResultBuilder]: For program point L427-1(lines 423 434) no Hoare annotation was computed. [2022-11-23 01:47:01,788 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 423 434) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (<= 0 ~methaneLevelCritical~0)) .cse0 .cse1) (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1) (or (= ~pumpRunning~0 0) .cse0 .cse1))) [2022-11-23 01:47:01,791 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 01:47:01,793 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 01:47:01,820 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 01:47:01 BoogieIcfgContainer [2022-11-23 01:47:01,820 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 01:47:01,821 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 01:47:01,821 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 01:47:01,821 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 01:47:01,822 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 01:46:50" (3/4) ... [2022-11-23 01:47:01,824 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 01:47:01,830 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 01:47:01,830 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 01:47:01,830 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-23 01:47:01,830 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 01:47:01,830 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 01:47:01,831 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 01:47:01,836 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2022-11-23 01:47:01,837 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-23 01:47:01,837 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-23 01:47:01,838 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 01:47:01,838 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 01:47:01,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-23 01:47:01,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-23 01:47:01,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((!(pumpRunning == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-23 01:47:01,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(waterLevel) <= 1) || waterLevel <= 1) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive) [2022-11-23 01:47:01,862 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || \old(pumpRunning) == 0) || 0 == systemActive) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || ((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1))) && ((((((!(\old(pumpRunning) == 0) || ((((waterLevel <= 1 && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive) [2022-11-23 01:47:01,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) || ((((!(pumpRunning == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-23 01:47:01,863 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 1) || (waterLevel <= 1 && !(0 == systemActive))) || \old(pumpRunning) == 0) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(tmp == 0)) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && !(tmp == 0)) && tmp___0 == 1)) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) || (((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive)))) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || ((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) [2022-11-23 01:47:01,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || (((((((\result == 1 && methaneLevelCritical == \result) && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive)) && (\old(pumpRunning) == 0 || 0 == systemActive) [2022-11-23 01:47:01,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((waterLevel <= 1 && \result <= 1) || !(\old(waterLevel) <= 1)) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive)) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || (((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) [2022-11-23 01:47:01,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (\old(pumpRunning) == 0 || 0 == systemActive) [2022-11-23 01:47:01,864 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) && (\old(pumpRunning) == 0 || 0 == systemActive)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || ((((waterLevel <= 1 && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive) [2022-11-23 01:47:01,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= methaneLevelCritical) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) || (((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) && ((((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1))) && (\old(pumpRunning) == 0 || 0 == systemActive) [2022-11-23 01:47:01,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || (((((\result == 1 && pumpRunning == 0) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (\old(pumpRunning) == 0 || 0 == systemActive) [2022-11-23 01:47:01,865 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (((((((((((\result == 1 && !(pumpRunning == 0)) && !(\result == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) && ((!(\old(waterLevel) <= 1) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((!(pumpRunning == 0) && !(\result == 0)) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((!(\old(waterLevel) == 1) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((\result == 1 && !(pumpRunning == 0)) && !(\result == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) [2022-11-23 01:47:01,866 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (\old(pumpRunning) == 0 || 0 == systemActive) && (!(0 <= methaneLevelCritical) || 0 == systemActive) [2022-11-23 01:47:01,884 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/witness.graphml [2022-11-23 01:47:01,884 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 01:47:01,884 INFO L158 Benchmark]: Toolchain (without parser) took 12441.36ms. Allocated memory was 157.3MB in the beginning and 199.2MB in the end (delta: 41.9MB). Free memory was 124.1MB in the beginning and 146.0MB in the end (delta: -21.9MB). Peak memory consumption was 23.2MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,885 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 130.0MB. Free memory is still 72.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 01:47:01,885 INFO L158 Benchmark]: CACSL2BoogieTranslator took 563.20ms. Allocated memory is still 157.3MB. Free memory was 123.4MB in the beginning and 105.2MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,885 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.92ms. Allocated memory is still 157.3MB. Free memory was 105.2MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,886 INFO L158 Benchmark]: Boogie Preprocessor took 25.35ms. Allocated memory is still 157.3MB. Free memory was 103.1MB in the beginning and 101.7MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,886 INFO L158 Benchmark]: RCFGBuilder took 525.99ms. Allocated memory is still 157.3MB. Free memory was 101.7MB in the beginning and 85.6MB in the end (delta: 16.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,886 INFO L158 Benchmark]: TraceAbstraction took 11201.72ms. Allocated memory was 157.3MB in the beginning and 199.2MB in the end (delta: 41.9MB). Free memory was 85.0MB in the beginning and 151.3MB in the end (delta: -66.3MB). Peak memory consumption was 79.9MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,887 INFO L158 Benchmark]: Witness Printer took 63.16ms. Allocated memory is still 199.2MB. Free memory was 151.3MB in the beginning and 146.0MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 01:47:01,888 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 130.0MB. Free memory is still 72.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 563.20ms. Allocated memory is still 157.3MB. Free memory was 123.4MB in the beginning and 105.2MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.92ms. Allocated memory is still 157.3MB. Free memory was 105.2MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 25.35ms. Allocated memory is still 157.3MB. Free memory was 103.1MB in the beginning and 101.7MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 525.99ms. Allocated memory is still 157.3MB. Free memory was 101.7MB in the beginning and 85.6MB in the end (delta: 16.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11201.72ms. Allocated memory was 157.3MB in the beginning and 199.2MB in the end (delta: 41.9MB). Free memory was 85.0MB in the beginning and 151.3MB in the end (delta: -66.3MB). Peak memory consumption was 79.9MB. Max. memory is 16.1GB. * Witness Printer took 63.16ms. Allocated memory is still 199.2MB. Free memory was 151.3MB in the beginning and 146.0MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 507]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 82 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.1s, OverallIterations: 11, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1148 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1120 mSDsluCounter, 3186 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2244 mSDsCounter, 193 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1185 IncrementalHoareTripleChecker+Invalid, 1378 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 193 mSolverCounterUnsat, 942 mSDtfsCounter, 1185 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 204 GetRequests, 119 SyntacticMatches, 3 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=700occurred in iteration=9, InterpolantAutomatonStates: 82, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 280 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 38 LocationsWithAnnotation, 1170 PreInvPairs, 1452 NumberOfFragments, 2101 HoareAnnotationTreeSize, 1170 FomulaSimplifications, 1602 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 38 FomulaSimplificationsInter, 17067 FormulaSimplificationTreeSizeReductionInter, 5.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 507 NumberOfCodeBlocks, 507 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 495 ConstructedInterpolants, 0 QuantifiedInterpolants, 1202 SizeOfPredicates, 5 NumberOfNonLiveVariables, 228 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 12 InterpolantComputations, 11 PerfectInterpolantSequences, 10/12 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: (\old(pumpRunning) == 0 || 0 == systemActive) && (!(0 <= methaneLevelCritical) || 0 == systemActive) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(waterLevel) <= 1) || waterLevel <= 1) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || (((((\result == 1 && pumpRunning == 0) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (\old(pumpRunning) == 0 || 0 == systemActive) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 1) || (waterLevel <= 1 && !(0 == systemActive))) || \old(pumpRunning) == 0) || 0 == systemActive) && ((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(tmp == 0)) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && !(tmp == 0)) && tmp___0 == 1)) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) || (((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive)))) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || ((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 1) || waterLevel <= 1) || \old(pumpRunning) == 0) || 0 == systemActive) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || ((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1))) && ((((((!(\old(pumpRunning) == 0) || ((((waterLevel <= 1 && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) || (((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((1 <= methaneLevelCritical && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((\result == 1 && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((!(pumpRunning == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 335]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (((((((((((\result == 1 && !(pumpRunning == 0)) && !(\result == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) && ((!(\old(waterLevel) <= 1) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((!(\old(waterLevel) <= 1) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((!(pumpRunning == 0) && !(\result == 0)) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((!(\old(waterLevel) == 1) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || (((((((((\result == 1 && !(pumpRunning == 0)) && !(\result == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: (((((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) && (\old(pumpRunning) == 0 || 0 == systemActive)) && (((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || ((((waterLevel <= 1 && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || (((((((\result == 1 && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive) - InvariantResult [Line: 324]: Loop Invariant Derived loop invariant: (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || (((((((\result == 1 && methaneLevelCritical == \result) && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((\result == 1 && pumpRunning == 0) && tmp == 1) && tmp == 0) && \result == 0) && \old(waterLevel) == waterLevel) && tmp___0 == 1)) || 0 == systemActive)) && (\old(pumpRunning) == 0 || 0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 290]: Loop Invariant Derived loop invariant: ((((!(1 <= methaneLevelCritical) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive) || (((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && !(0 == systemActive))) && ((((!(methaneLevelCritical <= 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || (((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && !(0 == systemActive))) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1))) && (\old(pumpRunning) == 0 || 0 == systemActive) - InvariantResult [Line: 399]: Loop Invariant Derived loop invariant: ((((\result == 1 && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) || ((((!(pumpRunning == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || \result == 1) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((waterLevel <= 1 && \result <= 1) || !(\old(waterLevel) <= 1)) || \old(pumpRunning) == 0) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || ((((((!(pumpRunning == 0) && waterLevel <= 1) && tmp <= 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || ((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= tmp) && tmp___0 == 1)) || 0 == systemActive)) && ((!(pumpRunning == 0) || \old(pumpRunning) == 0) || 0 == systemActive)) && (((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || (((((((waterLevel <= 1 && tmp <= 0) && \result <= 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && \result <= 1) && !(0 == systemActive))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((((((((\result == 1 && !(pumpRunning == 0)) && tmp == 1) && tmp == 0) && tmp <= 0) && \result <= 0) && \result == 0) && \old(waterLevel) == waterLevel) && 0 <= \result) && 0 <= tmp) && tmp___0 == 1)) - InvariantResult [Line: 488]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) && (\old(pumpRunning) == 0 || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-23 01:47:01,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_456941cd-4a6d-4ae6-8c18-4b7622b5e9fc/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE