./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 02:50:28,212 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 02:50:28,215 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 02:50:28,250 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 02:50:28,251 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 02:50:28,256 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 02:50:28,259 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 02:50:28,264 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 02:50:28,269 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 02:50:28,277 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 02:50:28,279 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 02:50:28,282 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 02:50:28,283 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 02:50:28,287 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 02:50:28,289 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 02:50:28,292 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 02:50:28,295 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 02:50:28,296 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 02:50:28,298 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 02:50:28,302 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 02:50:28,304 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 02:50:28,306 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 02:50:28,308 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 02:50:28,309 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 02:50:28,313 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 02:50:28,314 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 02:50:28,315 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 02:50:28,316 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 02:50:28,317 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 02:50:28,318 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 02:50:28,319 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 02:50:28,320 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 02:50:28,321 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 02:50:28,322 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 02:50:28,324 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 02:50:28,324 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 02:50:28,325 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 02:50:28,326 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 02:50:28,326 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 02:50:28,328 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 02:50:28,329 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 02:50:28,330 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-23 02:50:28,358 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 02:50:28,359 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 02:50:28,359 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 02:50:28,360 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 02:50:28,361 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 02:50:28,361 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 02:50:28,362 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 02:50:28,363 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 02:50:28,363 INFO L138 SettingsManager]: * Use SBE=true [2022-11-23 02:50:28,364 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 02:50:28,364 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 02:50:28,365 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 02:50:28,365 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 02:50:28,366 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 02:50:28,366 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 02:50:28,366 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 02:50:28,367 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 02:50:28,367 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 02:50:28,368 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 02:50:28,368 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 02:50:28,369 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 02:50:28,369 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 02:50:28,370 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 02:50:28,370 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 02:50:28,370 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 02:50:28,371 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 02:50:28,371 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 02:50:28,372 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 02:50:28,372 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-23 02:50:28,373 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 02:50:28,373 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-23 02:50:28,373 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 02:50:28,374 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-23 02:50:28,374 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 02:50:28,374 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0f3f23173af8ffbfd6ca2d826b937f078be2c112e64596739bc9740bb061a5d2 [2022-11-23 02:50:28,708 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 02:50:28,735 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 02:50:28,738 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 02:50:28,739 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 02:50:28,740 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 02:50:28,742 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/../../sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-11-23 02:50:32,462 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 02:50:32,776 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 02:50:32,777 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c [2022-11-23 02:50:32,801 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/data/bad356aa5/eba709d56686422dbaa844711ab36c3b/FLAG2d3363e0c [2022-11-23 02:50:32,830 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/data/bad356aa5/eba709d56686422dbaa844711ab36c3b [2022-11-23 02:50:32,835 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 02:50:32,839 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 02:50:32,845 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 02:50:32,846 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 02:50:32,851 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 02:50:32,852 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:50:32" (1/1) ... [2022-11-23 02:50:32,854 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7aaa1403 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:32, skipping insertion in model container [2022-11-23 02:50:32,854 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:50:32" (1/1) ... [2022-11-23 02:50:32,865 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 02:50:32,953 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 02:50:33,286 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-11-23 02:50:33,474 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 02:50:33,498 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 02:50:33,540 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/sv-benchmarks/c/product-lines/minepump_spec4_product64.cil.c[2897,2910] [2022-11-23 02:50:33,641 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 02:50:33,707 INFO L208 MainTranslator]: Completed translation [2022-11-23 02:50:33,708 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33 WrapperNode [2022-11-23 02:50:33,708 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 02:50:33,710 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 02:50:33,711 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 02:50:33,711 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 02:50:33,721 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,756 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,820 INFO L138 Inliner]: procedures = 59, calls = 107, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 241 [2022-11-23 02:50:33,821 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 02:50:33,821 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 02:50:33,822 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 02:50:33,822 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 02:50:33,834 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,835 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,837 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,838 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,844 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,850 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,852 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,854 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,858 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 02:50:33,859 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 02:50:33,859 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 02:50:33,859 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 02:50:33,860 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (1/1) ... [2022-11-23 02:50:33,869 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 02:50:33,885 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:50:33,917 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 02:50:33,970 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 02:50:34,001 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 02:50:34,002 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 02:50:34,002 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 02:50:34,002 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 02:50:34,002 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 02:50:34,002 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 02:50:34,002 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 02:50:34,003 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:50:34,003 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:50:34,003 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 02:50:34,003 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 02:50:34,003 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 02:50:34,003 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-23 02:50:34,004 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-23 02:50:34,004 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-23 02:50:34,004 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 02:50:34,004 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 02:50:34,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 02:50:34,004 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 02:50:34,005 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 02:50:34,006 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 02:50:34,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 02:50:34,140 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 02:50:34,142 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 02:50:34,542 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 02:50:34,555 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 02:50:34,555 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 02:50:34,558 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:50:34 BoogieIcfgContainer [2022-11-23 02:50:34,558 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 02:50:34,561 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 02:50:34,561 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 02:50:34,565 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 02:50:34,565 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:50:32" (1/3) ... [2022-11-23 02:50:34,566 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5e15f00b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:50:34, skipping insertion in model container [2022-11-23 02:50:34,566 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:50:33" (2/3) ... [2022-11-23 02:50:34,567 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5e15f00b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:50:34, skipping insertion in model container [2022-11-23 02:50:34,567 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:50:34" (3/3) ... [2022-11-23 02:50:34,568 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product64.cil.c [2022-11-23 02:50:34,592 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 02:50:34,592 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 02:50:34,658 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 02:50:34,666 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1b140cdf, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 02:50:34,667 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 02:50:34,672 INFO L276 IsEmpty]: Start isEmpty. Operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-23 02:50:34,683 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-23 02:50:34,683 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:34,684 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:34,685 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:34,693 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:34,694 INFO L85 PathProgramCache]: Analyzing trace with hash -1842892420, now seen corresponding path program 1 times [2022-11-23 02:50:34,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:34,709 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253090998] [2022-11-23 02:50:34,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:34,711 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:34,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:35,004 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:35,005 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:35,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253090998] [2022-11-23 02:50:35,006 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253090998] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:35,007 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:35,007 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 02:50:35,009 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724945295] [2022-11-23 02:50:35,010 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:35,015 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 02:50:35,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:35,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 02:50:35,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 02:50:35,081 INFO L87 Difference]: Start difference. First operand has 108 states, 80 states have (on average 1.375) internal successors, (110), 91 states have internal predecessors, (110), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:35,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:35,173 INFO L93 Difference]: Finished difference Result 208 states and 283 transitions. [2022-11-23 02:50:35,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 02:50:35,175 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-23 02:50:35,176 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:35,185 INFO L225 Difference]: With dead ends: 208 [2022-11-23 02:50:35,185 INFO L226 Difference]: Without dead ends: 99 [2022-11-23 02:50:35,190 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 02:50:35,194 INFO L413 NwaCegarLoop]: 138 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:35,195 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 138 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:50:35,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2022-11-23 02:50:35,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2022-11-23 02:50:35,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 83 states have internal predecessors, (96), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-23 02:50:35,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 129 transitions. [2022-11-23 02:50:35,256 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 129 transitions. Word has length 19 [2022-11-23 02:50:35,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:35,257 INFO L495 AbstractCegarLoop]: Abstraction has 99 states and 129 transitions. [2022-11-23 02:50:35,257 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:35,258 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 129 transitions. [2022-11-23 02:50:35,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-23 02:50:35,260 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:35,260 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:35,261 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 02:50:35,261 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:35,262 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:35,262 INFO L85 PathProgramCache]: Analyzing trace with hash 750568636, now seen corresponding path program 1 times [2022-11-23 02:50:35,262 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:35,263 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774099941] [2022-11-23 02:50:35,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:35,263 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:35,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:35,511 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:35,512 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:35,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774099941] [2022-11-23 02:50:35,513 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774099941] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:35,513 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:35,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 02:50:35,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310289962] [2022-11-23 02:50:35,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:35,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 02:50:35,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:35,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 02:50:35,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:50:35,518 INFO L87 Difference]: Start difference. First operand 99 states and 129 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:35,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:35,574 INFO L93 Difference]: Finished difference Result 159 states and 207 transitions. [2022-11-23 02:50:35,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 02:50:35,579 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-23 02:50:35,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:35,583 INFO L225 Difference]: With dead ends: 159 [2022-11-23 02:50:35,583 INFO L226 Difference]: Without dead ends: 90 [2022-11-23 02:50:35,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:50:35,594 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 17 mSDsluCounter, 94 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:35,596 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 210 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:50:35,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2022-11-23 02:50:35,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 90. [2022-11-23 02:50:35,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 67 states have (on average 1.328358208955224) internal successors, (89), 77 states have internal predecessors, (89), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-23 02:50:35,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 117 transitions. [2022-11-23 02:50:35,622 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 117 transitions. Word has length 20 [2022-11-23 02:50:35,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:35,622 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 117 transitions. [2022-11-23 02:50:35,623 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:35,623 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 117 transitions. [2022-11-23 02:50:35,625 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-23 02:50:35,626 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:35,626 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:35,626 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 02:50:35,627 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:35,629 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:35,630 INFO L85 PathProgramCache]: Analyzing trace with hash 1483068035, now seen corresponding path program 1 times [2022-11-23 02:50:35,630 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:35,630 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094203347] [2022-11-23 02:50:35,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:35,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:35,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:35,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:35,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:35,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094203347] [2022-11-23 02:50:35,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094203347] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:35,905 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:35,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 02:50:35,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1276099285] [2022-11-23 02:50:35,906 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:35,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 02:50:35,907 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:35,907 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 02:50:35,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 02:50:35,908 INFO L87 Difference]: Start difference. First operand 90 states and 117 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:36,047 INFO L93 Difference]: Finished difference Result 211 states and 278 transitions. [2022-11-23 02:50:36,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-23 02:50:36,049 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-23 02:50:36,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:36,051 INFO L225 Difference]: With dead ends: 211 [2022-11-23 02:50:36,051 INFO L226 Difference]: Without dead ends: 128 [2022-11-23 02:50:36,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-23 02:50:36,054 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 180 mSDsluCounter, 246 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 180 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:36,055 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [180 Valid, 371 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 02:50:36,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2022-11-23 02:50:36,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 125. [2022-11-23 02:50:36,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125 states, 94 states have (on average 1.351063829787234) internal successors, (127), 107 states have internal predecessors, (127), 18 states have call successors, (18), 12 states have call predecessors, (18), 12 states have return successors, (19), 12 states have call predecessors, (19), 18 states have call successors, (19) [2022-11-23 02:50:36,082 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125 states to 125 states and 164 transitions. [2022-11-23 02:50:36,082 INFO L78 Accepts]: Start accepts. Automaton has 125 states and 164 transitions. Word has length 25 [2022-11-23 02:50:36,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:36,083 INFO L495 AbstractCegarLoop]: Abstraction has 125 states and 164 transitions. [2022-11-23 02:50:36,084 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,084 INFO L276 IsEmpty]: Start isEmpty. Operand 125 states and 164 transitions. [2022-11-23 02:50:36,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-23 02:50:36,086 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:36,086 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:36,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 02:50:36,087 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:36,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:36,087 INFO L85 PathProgramCache]: Analyzing trace with hash 417349686, now seen corresponding path program 1 times [2022-11-23 02:50:36,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:36,088 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [284504114] [2022-11-23 02:50:36,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:36,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:36,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:36,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:36,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:36,343 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [284504114] [2022-11-23 02:50:36,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [284504114] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:36,344 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:36,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-23 02:50:36,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345722614] [2022-11-23 02:50:36,348 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:36,349 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 02:50:36,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:36,350 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 02:50:36,350 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 02:50:36,350 INFO L87 Difference]: Start difference. First operand 125 states and 164 transitions. Second operand has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:36,514 INFO L93 Difference]: Finished difference Result 349 states and 479 transitions. [2022-11-23 02:50:36,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 02:50:36,516 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-11-23 02:50:36,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:36,523 INFO L225 Difference]: With dead ends: 349 [2022-11-23 02:50:36,529 INFO L226 Difference]: Without dead ends: 231 [2022-11-23 02:50:36,530 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-23 02:50:36,533 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 88 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 476 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:36,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 476 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 02:50:36,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-11-23 02:50:36,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 231. [2022-11-23 02:50:36,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 172 states have (on average 1.3313953488372092) internal successors, (229), 195 states have internal predecessors, (229), 36 states have call successors, (36), 24 states have call predecessors, (36), 22 states have return successors, (41), 22 states have call predecessors, (41), 36 states have call successors, (41) [2022-11-23 02:50:36,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 306 transitions. [2022-11-23 02:50:36,581 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 306 transitions. Word has length 28 [2022-11-23 02:50:36,581 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:36,581 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 306 transitions. [2022-11-23 02:50:36,582 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.4) internal successors, (27), 4 states have internal predecessors, (27), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,582 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 306 transitions. [2022-11-23 02:50:36,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-23 02:50:36,585 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:36,585 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:36,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 02:50:36,586 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:36,586 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:36,587 INFO L85 PathProgramCache]: Analyzing trace with hash -1384596677, now seen corresponding path program 1 times [2022-11-23 02:50:36,587 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:36,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1776441231] [2022-11-23 02:50:36,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:36,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:36,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:36,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:36,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:36,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1776441231] [2022-11-23 02:50:36,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1776441231] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:36,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:36,684 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 02:50:36,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1304272066] [2022-11-23 02:50:36,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:36,685 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 02:50:36,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:36,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 02:50:36,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:50:36,686 INFO L87 Difference]: Start difference. First operand 231 states and 306 transitions. Second operand has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:36,755 INFO L93 Difference]: Finished difference Result 511 states and 692 transitions. [2022-11-23 02:50:36,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 02:50:36,756 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-11-23 02:50:36,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:36,759 INFO L225 Difference]: With dead ends: 511 [2022-11-23 02:50:36,760 INFO L226 Difference]: Without dead ends: 287 [2022-11-23 02:50:36,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:50:36,762 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 68 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:36,763 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 189 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:50:36,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2022-11-23 02:50:36,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 283. [2022-11-23 02:50:36,839 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 283 states, 217 states have (on average 1.271889400921659) internal successors, (276), 234 states have internal predecessors, (276), 34 states have call successors, (34), 32 states have call predecessors, (34), 31 states have return successors, (50), 31 states have call predecessors, (50), 34 states have call successors, (50) [2022-11-23 02:50:36,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 360 transitions. [2022-11-23 02:50:36,844 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 360 transitions. Word has length 30 [2022-11-23 02:50:36,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:36,845 INFO L495 AbstractCegarLoop]: Abstraction has 283 states and 360 transitions. [2022-11-23 02:50:36,845 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.666666666666666) internal successors, (29), 2 states have internal predecessors, (29), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:36,846 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 360 transitions. [2022-11-23 02:50:36,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-23 02:50:36,847 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:36,847 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:36,847 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 02:50:36,848 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:36,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:36,849 INFO L85 PathProgramCache]: Analyzing trace with hash -263887204, now seen corresponding path program 1 times [2022-11-23 02:50:36,849 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:36,849 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926753463] [2022-11-23 02:50:36,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:36,850 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:36,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:37,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:37,055 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:37,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926753463] [2022-11-23 02:50:37,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926753463] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:37,056 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:37,057 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 02:50:37,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [690264112] [2022-11-23 02:50:37,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:37,058 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 02:50:37,058 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:37,059 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 02:50:37,059 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 02:50:37,060 INFO L87 Difference]: Start difference. First operand 283 states and 360 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:50:37,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:37,617 INFO L93 Difference]: Finished difference Result 335 states and 428 transitions. [2022-11-23 02:50:37,618 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-23 02:50:37,618 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-23 02:50:37,619 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:37,623 INFO L225 Difference]: With dead ends: 335 [2022-11-23 02:50:37,623 INFO L226 Difference]: Without dead ends: 333 [2022-11-23 02:50:37,624 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-23 02:50:37,634 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 165 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 283 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 318 SdHoareTripleChecker+Invalid, 328 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 283 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:37,637 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 318 Invalid, 328 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 283 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 02:50:37,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-11-23 02:50:37,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 316. [2022-11-23 02:50:37,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 316 states, 241 states have (on average 1.2572614107883817) internal successors, (303), 264 states have internal predecessors, (303), 38 states have call successors, (38), 32 states have call predecessors, (38), 36 states have return successors, (61), 34 states have call predecessors, (61), 38 states have call successors, (61) [2022-11-23 02:50:37,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 316 states to 316 states and 402 transitions. [2022-11-23 02:50:37,730 INFO L78 Accepts]: Start accepts. Automaton has 316 states and 402 transitions. Word has length 32 [2022-11-23 02:50:37,732 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:37,732 INFO L495 AbstractCegarLoop]: Abstraction has 316 states and 402 transitions. [2022-11-23 02:50:37,733 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:50:37,733 INFO L276 IsEmpty]: Start isEmpty. Operand 316 states and 402 transitions. [2022-11-23 02:50:37,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-23 02:50:37,740 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:37,741 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:37,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 02:50:37,742 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:37,743 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:37,743 INFO L85 PathProgramCache]: Analyzing trace with hash 285414993, now seen corresponding path program 1 times [2022-11-23 02:50:37,743 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:37,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1177832152] [2022-11-23 02:50:37,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:37,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:37,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:37,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-23 02:50:37,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:37,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:37,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:37,945 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:37,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:37,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1177832152] [2022-11-23 02:50:37,946 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1177832152] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:37,946 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:37,946 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 02:50:37,946 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1187967216] [2022-11-23 02:50:37,946 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:37,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 02:50:37,947 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:37,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 02:50:37,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-23 02:50:37,948 INFO L87 Difference]: Start difference. First operand 316 states and 402 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:38,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:38,646 INFO L93 Difference]: Finished difference Result 693 states and 906 transitions. [2022-11-23 02:50:38,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-23 02:50:38,647 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 59 [2022-11-23 02:50:38,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:38,652 INFO L225 Difference]: With dead ends: 693 [2022-11-23 02:50:38,652 INFO L226 Difference]: Without dead ends: 384 [2022-11-23 02:50:38,654 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2022-11-23 02:50:38,658 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 211 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 481 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 543 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 481 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:38,659 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 472 Invalid, 543 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 481 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 02:50:38,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-11-23 02:50:38,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 346. [2022-11-23 02:50:38,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 266 states have (on average 1.236842105263158) internal successors, (329), 289 states have internal predecessors, (329), 38 states have call successors, (38), 32 states have call predecessors, (38), 41 states have return successors, (64), 38 states have call predecessors, (64), 38 states have call successors, (64) [2022-11-23 02:50:38,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 431 transitions. [2022-11-23 02:50:38,721 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 431 transitions. Word has length 59 [2022-11-23 02:50:38,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:38,722 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 431 transitions. [2022-11-23 02:50:38,722 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 6 states have internal predecessors, (50), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:38,722 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 431 transitions. [2022-11-23 02:50:38,723 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-23 02:50:38,723 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:38,724 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:38,724 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 02:50:38,724 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:38,725 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:38,725 INFO L85 PathProgramCache]: Analyzing trace with hash 1185571886, now seen corresponding path program 1 times [2022-11-23 02:50:38,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:38,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [312482355] [2022-11-23 02:50:38,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:38,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:38,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:38,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:38,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:38,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:50:38,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:38,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:38,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:38,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:38,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:38,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:38,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:38,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [312482355] [2022-11-23 02:50:38,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [312482355] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:38,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:38,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-23 02:50:38,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [460524680] [2022-11-23 02:50:38,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:38,979 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-23 02:50:38,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:38,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-23 02:50:38,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-23 02:50:38,981 INFO L87 Difference]: Start difference. First operand 346 states and 431 transitions. Second operand has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:39,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:39,532 INFO L93 Difference]: Finished difference Result 672 states and 857 transitions. [2022-11-23 02:50:39,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-23 02:50:39,533 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-23 02:50:39,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:39,536 INFO L225 Difference]: With dead ends: 672 [2022-11-23 02:50:39,536 INFO L226 Difference]: Without dead ends: 333 [2022-11-23 02:50:39,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-11-23 02:50:39,539 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 226 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 422 mSolverCounterSat, 84 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 506 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 84 IncrementalHoareTripleChecker+Valid, 422 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:39,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 273 Invalid, 506 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [84 Valid, 422 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-23 02:50:39,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 333 states. [2022-11-23 02:50:39,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 333 to 279. [2022-11-23 02:50:39,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 279 states, 214 states have (on average 1.233644859813084) internal successors, (264), 232 states have internal predecessors, (264), 32 states have call successors, (32), 27 states have call predecessors, (32), 32 states have return successors, (49), 30 states have call predecessors, (49), 32 states have call successors, (49) [2022-11-23 02:50:39,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 279 states to 279 states and 345 transitions. [2022-11-23 02:50:39,576 INFO L78 Accepts]: Start accepts. Automaton has 279 states and 345 transitions. Word has length 56 [2022-11-23 02:50:39,576 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:39,576 INFO L495 AbstractCegarLoop]: Abstraction has 279 states and 345 transitions. [2022-11-23 02:50:39,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.875) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:39,577 INFO L276 IsEmpty]: Start isEmpty. Operand 279 states and 345 transitions. [2022-11-23 02:50:39,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-23 02:50:39,578 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:39,578 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:39,579 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 02:50:39,579 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:39,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:39,579 INFO L85 PathProgramCache]: Analyzing trace with hash 1247611500, now seen corresponding path program 1 times [2022-11-23 02:50:39,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:39,580 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1794162626] [2022-11-23 02:50:39,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:39,580 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:39,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:39,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:39,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:39,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:50:39,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:39,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:39,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:39,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:39,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:39,764 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:39,765 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:39,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1794162626] [2022-11-23 02:50:39,765 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1794162626] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:39,765 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:50:39,765 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 02:50:39,765 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110642965] [2022-11-23 02:50:39,766 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:39,766 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 02:50:39,766 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:39,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 02:50:39,767 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-23 02:50:39,767 INFO L87 Difference]: Start difference. First operand 279 states and 345 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:40,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:40,585 INFO L93 Difference]: Finished difference Result 617 states and 805 transitions. [2022-11-23 02:50:40,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 02:50:40,586 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-23 02:50:40,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:40,590 INFO L225 Difference]: With dead ends: 617 [2022-11-23 02:50:40,590 INFO L226 Difference]: Without dead ends: 418 [2022-11-23 02:50:40,591 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 10 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-23 02:50:40,592 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 255 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 461 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 461 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:40,592 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 419 Invalid, 546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 461 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-23 02:50:40,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2022-11-23 02:50:40,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 407. [2022-11-23 02:50:40,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 407 states, 314 states have (on average 1.21656050955414) internal successors, (382), 337 states have internal predecessors, (382), 46 states have call successors, (46), 40 states have call predecessors, (46), 46 states have return successors, (84), 47 states have call predecessors, (84), 46 states have call successors, (84) [2022-11-23 02:50:40,653 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 407 states to 407 states and 512 transitions. [2022-11-23 02:50:40,653 INFO L78 Accepts]: Start accepts. Automaton has 407 states and 512 transitions. Word has length 56 [2022-11-23 02:50:40,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:40,654 INFO L495 AbstractCegarLoop]: Abstraction has 407 states and 512 transitions. [2022-11-23 02:50:40,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:50:40,654 INFO L276 IsEmpty]: Start isEmpty. Operand 407 states and 512 transitions. [2022-11-23 02:50:40,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-11-23 02:50:40,657 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:40,657 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:40,657 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-23 02:50:40,658 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:40,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:40,658 INFO L85 PathProgramCache]: Analyzing trace with hash -1661930304, now seen corresponding path program 1 times [2022-11-23 02:50:40,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:40,659 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1406532164] [2022-11-23 02:50:40,659 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:40,659 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:40,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:40,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:50:40,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 02:50:40,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:40,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:40,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-23 02:50:40,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-23 02:50:40,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 02:50:40,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:40,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:40,942 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 12 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-23 02:50:40,942 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:40,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1406532164] [2022-11-23 02:50:40,943 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1406532164] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 02:50:40,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1488655761] [2022-11-23 02:50:40,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:40,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:50:40,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:50:40,948 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 02:50:40,960 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 02:50:41,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:41,112 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-23 02:50:41,121 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 02:50:41,308 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:50:41,308 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 02:50:41,563 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-23 02:50:41,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1488655761] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 02:50:41,563 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 02:50:41,564 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-11-23 02:50:41,564 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677631670] [2022-11-23 02:50:41,564 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 02:50:41,565 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-23 02:50:41,566 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:41,566 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-23 02:50:41,566 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-23 02:50:41,567 INFO L87 Difference]: Start difference. First operand 407 states and 512 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 02:50:42,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:42,663 INFO L93 Difference]: Finished difference Result 968 states and 1279 transitions. [2022-11-23 02:50:42,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-11-23 02:50:42,664 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 103 [2022-11-23 02:50:42,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:42,670 INFO L225 Difference]: With dead ends: 968 [2022-11-23 02:50:42,671 INFO L226 Difference]: Without dead ends: 641 [2022-11-23 02:50:42,673 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 222 SyntacticMatches, 9 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=227, Invalid=585, Unknown=0, NotChecked=0, Total=812 [2022-11-23 02:50:42,674 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 297 mSDsluCounter, 466 mSDsCounter, 0 mSdLazyCounter, 733 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 305 SdHoareTripleChecker+Valid, 562 SdHoareTripleChecker+Invalid, 855 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 733 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:42,675 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [305 Valid, 562 Invalid, 855 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 733 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-23 02:50:42,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 641 states. [2022-11-23 02:50:42,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 641 to 557. [2022-11-23 02:50:42,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 557 states, 425 states have (on average 1.223529411764706) internal successors, (520), 458 states have internal predecessors, (520), 66 states have call successors, (66), 57 states have call predecessors, (66), 65 states have return successors, (128), 63 states have call predecessors, (128), 66 states have call successors, (128) [2022-11-23 02:50:42,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 557 states to 557 states and 714 transitions. [2022-11-23 02:50:42,774 INFO L78 Accepts]: Start accepts. Automaton has 557 states and 714 transitions. Word has length 103 [2022-11-23 02:50:42,775 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:42,775 INFO L495 AbstractCegarLoop]: Abstraction has 557 states and 714 transitions. [2022-11-23 02:50:42,776 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 6 states have internal predecessors, (101), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 02:50:42,776 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 714 transitions. [2022-11-23 02:50:42,779 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-23 02:50:42,779 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:42,780 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:42,794 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 02:50:42,987 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 02:50:42,988 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:42,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:42,989 INFO L85 PathProgramCache]: Analyzing trace with hash 745596908, now seen corresponding path program 2 times [2022-11-23 02:50:42,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:42,989 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1875012908] [2022-11-23 02:50:42,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:42,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:43,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:43,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:50:43,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 02:50:43,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:43,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:43,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-23 02:50:43,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-23 02:50:43,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 02:50:43,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 02:50:43,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:43,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-11-23 02:50:43,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-11-23 02:50:43,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 02:50:43,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:43,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:43,715 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-23 02:50:43,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:43,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1875012908] [2022-11-23 02:50:43,716 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1875012908] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 02:50:43,717 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1254127716] [2022-11-23 02:50:43,717 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-23 02:50:43,717 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:50:43,717 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:50:43,719 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 02:50:43,752 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 02:50:43,915 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-23 02:50:43,916 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-23 02:50:43,919 INFO L263 TraceCheckSpWp]: Trace formula consists of 468 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-23 02:50:43,924 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 02:50:44,093 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 86 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-11-23 02:50:44,093 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 02:50:44,094 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1254127716] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:44,094 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 02:50:44,094 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-11-23 02:50:44,094 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [51061776] [2022-11-23 02:50:44,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:44,096 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 02:50:44,096 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:44,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 02:50:44,097 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-11-23 02:50:44,097 INFO L87 Difference]: Start difference. First operand 557 states and 714 transitions. Second operand has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 02:50:44,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:44,643 INFO L93 Difference]: Finished difference Result 1473 states and 1967 transitions. [2022-11-23 02:50:44,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-23 02:50:44,644 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 150 [2022-11-23 02:50:44,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:44,651 INFO L225 Difference]: With dead ends: 1473 [2022-11-23 02:50:44,652 INFO L226 Difference]: Without dead ends: 995 [2022-11-23 02:50:44,655 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 178 SyntacticMatches, 3 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-11-23 02:50:44,656 INFO L413 NwaCegarLoop]: 206 mSDtfsCounter, 246 mSDsluCounter, 478 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 246 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 214 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:44,656 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [246 Valid, 684 Invalid, 214 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 02:50:44,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2022-11-23 02:50:44,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 972. [2022-11-23 02:50:44,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 972 states, 744 states have (on average 1.2231182795698925) internal successors, (910), 792 states have internal predecessors, (910), 111 states have call successors, (111), 100 states have call predecessors, (111), 116 states have return successors, (207), 113 states have call predecessors, (207), 111 states have call successors, (207) [2022-11-23 02:50:44,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 972 states to 972 states and 1228 transitions. [2022-11-23 02:50:44,833 INFO L78 Accepts]: Start accepts. Automaton has 972 states and 1228 transitions. Word has length 150 [2022-11-23 02:50:44,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:44,834 INFO L495 AbstractCegarLoop]: Abstraction has 972 states and 1228 transitions. [2022-11-23 02:50:44,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-23 02:50:44,834 INFO L276 IsEmpty]: Start isEmpty. Operand 972 states and 1228 transitions. [2022-11-23 02:50:44,839 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-23 02:50:44,840 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:50:44,840 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:44,854 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 02:50:45,047 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:50:45,048 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:50:45,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:50:45,049 INFO L85 PathProgramCache]: Analyzing trace with hash 1699537066, now seen corresponding path program 1 times [2022-11-23 02:50:45,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:50:45,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [877466150] [2022-11-23 02:50:45,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:45,051 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:50:45,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:50:45,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:50:45,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 02:50:45,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,221 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:45,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:50:45,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-23 02:50:45,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-23 02:50:45,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 02:50:45,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 02:50:45,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:45,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-11-23 02:50:45,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-11-23 02:50:45,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 02:50:45,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:50:45,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,340 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-23 02:50:45,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:50:45,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [877466150] [2022-11-23 02:50:45,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [877466150] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 02:50:45,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [986211187] [2022-11-23 02:50:45,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:50:45,342 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:50:45,342 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:50:45,343 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 02:50:45,352 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-23 02:50:45,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:50:45,509 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-23 02:50:45,520 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 02:50:45,551 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-11-23 02:50:45,551 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 02:50:45,552 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [986211187] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:50:45,552 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 02:50:45,552 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-11-23 02:50:45,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339158503] [2022-11-23 02:50:45,553 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:50:45,554 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 02:50:45,554 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:50:45,554 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 02:50:45,554 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-23 02:50:45,555 INFO L87 Difference]: Start difference. First operand 972 states and 1228 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-23 02:50:45,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:50:45,669 INFO L93 Difference]: Finished difference Result 1348 states and 1689 transitions. [2022-11-23 02:50:45,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-23 02:50:45,670 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-11-23 02:50:45,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:50:45,671 INFO L225 Difference]: With dead ends: 1348 [2022-11-23 02:50:45,671 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 02:50:45,678 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-11-23 02:50:45,679 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 9 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 443 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:50:45,679 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 443 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:50:45,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 02:50:45,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 02:50:45,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:50:45,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 02:50:45,681 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-11-23 02:50:45,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:50:45,681 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 02:50:45,682 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-23 02:50:45,682 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 02:50:45,682 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 02:50:45,686 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 02:50:45,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-23 02:50:45,899 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:50:45,901 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 02:50:49,574 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 406 413) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,574 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 406 413) no Hoare annotation was computed. [2022-11-23 02:50:49,574 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 406 413) no Hoare annotation was computed. [2022-11-23 02:50:49,575 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 296 302) no Hoare annotation was computed. [2022-11-23 02:50:49,575 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 296 302) the Hoare annotation is: true [2022-11-23 02:50:49,575 INFO L899 garLoopResultBuilder]: For program point L928-1(lines 924 935) no Hoare annotation was computed. [2022-11-23 02:50:49,575 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 924 935) the Hoare annotation is: true [2022-11-23 02:50:49,575 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 924 935) no Hoare annotation was computed. [2022-11-23 02:50:49,575 INFO L895 garLoopResultBuilder]: At program point L159(lines 154 161) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,576 INFO L899 garLoopResultBuilder]: For program point L283-1(lines 283 289) no Hoare annotation was computed. [2022-11-23 02:50:49,576 INFO L895 garLoopResultBuilder]: At program point L370(line 370) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,576 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,576 INFO L895 garLoopResultBuilder]: At program point L973(lines 968 976) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (= 0 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1)))) (and (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4) (not .cse5) .cse6) (or (and (<= 2 ~waterLevel~0) .cse7) (and .cse2 (<= 1 ~waterLevel~0) .cse3) .cse5 .cse6) (or .cse0 .cse5 (and .cse4 .cse7) .cse6) (or .cse0 .cse1 (= |timeShift_getWaterLevel_#res#1| 1)))) [2022-11-23 02:50:49,577 INFO L895 garLoopResultBuilder]: At program point L362(line 362) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,577 INFO L899 garLoopResultBuilder]: For program point L362-1(line 362) no Hoare annotation was computed. [2022-11-23 02:50:49,577 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 272 295) no Hoare annotation was computed. [2022-11-23 02:50:49,577 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2) (or .cse0 .cse2 (not .cse3)) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-23 02:50:49,577 INFO L895 garLoopResultBuilder]: At program point L375-1(lines 356 380) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 (and .cse4 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse4 .cse5) .cse1 (and .cse3 .cse5))))) [2022-11-23 02:50:49,578 INFO L899 garLoopResultBuilder]: For program point L276-1(lines 275 294) no Hoare annotation was computed. [2022-11-23 02:50:49,578 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 183) no Hoare annotation was computed. [2022-11-23 02:50:49,578 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 186) no Hoare annotation was computed. [2022-11-23 02:50:49,580 INFO L895 garLoopResultBuilder]: At program point L173-1(lines 165 189) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1|)) (.cse8 (<= 2 |timeShift_getWaterLevel_#res#1|)) (.cse9 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~1#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse0 (and .cse2 .cse3 .cse4 .cse5) (not (<= 1 |old(~waterLevel~0)|)) (not .cse6)) (or .cse0 (and .cse7 .cse5 .cse8) .cse6 .cse9) (or (and .cse2 .cse3 (<= 1 ~waterLevel~0) .cse4) .cse6 (and .cse7 (<= 2 ~waterLevel~0) .cse8) .cse9))) [2022-11-23 02:50:49,581 INFO L899 garLoopResultBuilder]: For program point L904(lines 904 908) no Hoare annotation was computed. [2022-11-23 02:50:49,581 INFO L895 garLoopResultBuilder]: At program point L904-2(lines 900 911) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,583 INFO L895 garLoopResultBuilder]: At program point L430(lines 425 433) the Hoare annotation is: (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|))) (or (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|)))) [2022-11-23 02:50:49,584 INFO L899 garLoopResultBuilder]: For program point L364(lines 364 372) no Hoare annotation was computed. [2022-11-23 02:50:49,584 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 377) no Hoare annotation was computed. [2022-11-23 02:50:49,584 INFO L899 garLoopResultBuilder]: For program point L158(line 158) no Hoare annotation was computed. [2022-11-23 02:50:49,585 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 272 295) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= ~waterLevel~0 1))) (or .cse0 (and .cse1 .cse2) .cse3) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (= 0 ~systemActive~0) .cse3))) [2022-11-23 02:50:49,585 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 272 295) no Hoare annotation was computed. [2022-11-23 02:50:49,585 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 158) no Hoare annotation was computed. [2022-11-23 02:50:49,585 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-23 02:50:49,586 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-23 02:50:49,586 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-23 02:50:49,586 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-23 02:50:49,586 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-23 02:50:49,586 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-23 02:50:49,587 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-23 02:50:49,587 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-23 02:50:49,587 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-23 02:50:49,587 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-23 02:50:49,587 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-23 02:50:49,588 INFO L895 garLoopResultBuilder]: At program point L250(lines 203 252) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-23 02:50:49,588 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 219) no Hoare annotation was computed. [2022-11-23 02:50:49,588 INFO L899 garLoopResultBuilder]: For program point L213-1(lines 213 219) no Hoare annotation was computed. [2022-11-23 02:50:49,588 INFO L899 garLoopResultBuilder]: For program point L205(lines 205 209) no Hoare annotation was computed. [2022-11-23 02:50:49,589 INFO L895 garLoopResultBuilder]: At program point L1031(lines 1026 1034) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 02:50:49,589 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-23 02:50:49,589 INFO L895 garLoopResultBuilder]: At program point L1023(lines 1019 1025) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 02:50:49,589 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-23 02:50:49,590 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-23 02:50:49,590 INFO L895 garLoopResultBuilder]: At program point L528(lines 523 530) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2022-11-23 02:50:49,590 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-23 02:50:49,590 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-23 02:50:49,591 INFO L895 garLoopResultBuilder]: At program point L520(lines 508 522) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,591 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 02:50:49,591 INFO L899 garLoopResultBuilder]: For program point L512(lines 512 518) no Hoare annotation was computed. [2022-11-23 02:50:49,591 INFO L902 garLoopResultBuilder]: At program point L256(lines 193 260) the Hoare annotation is: true [2022-11-23 02:50:49,591 INFO L899 garLoopResultBuilder]: For program point L223(lines 223 229) no Hoare annotation was computed. [2022-11-23 02:50:49,592 INFO L899 garLoopResultBuilder]: For program point L512-1(lines 512 518) no Hoare annotation was computed. [2022-11-23 02:50:49,592 INFO L899 garLoopResultBuilder]: For program point L223-1(lines 223 229) no Hoare annotation was computed. [2022-11-23 02:50:49,592 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-23 02:50:49,593 INFO L895 garLoopResultBuilder]: At program point L1016(lines 1012 1018) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 02:50:49,593 INFO L895 garLoopResultBuilder]: At program point L215(line 215) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-23 02:50:49,593 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-23 02:50:49,593 INFO L895 garLoopResultBuilder]: At program point L253(lines 202 254) the Hoare annotation is: false [2022-11-23 02:50:49,594 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-23 02:50:49,594 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 247) no Hoare annotation was computed. [2022-11-23 02:50:49,596 INFO L895 garLoopResultBuilder]: At program point L241-2(lines 233 248) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (= 0 ~systemActive~0))))) [2022-11-23 02:50:49,597 INFO L899 garLoopResultBuilder]: For program point L204(lines 203 252) no Hoare annotation was computed. [2022-11-23 02:50:49,597 INFO L899 garLoopResultBuilder]: For program point L233(lines 233 248) no Hoare annotation was computed. [2022-11-23 02:50:49,597 INFO L895 garLoopResultBuilder]: At program point L514(line 514) the Hoare annotation is: (and (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-23 02:50:49,598 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 304 328) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,598 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 483) no Hoare annotation was computed. [2022-11-23 02:50:49,598 INFO L895 garLoopResultBuilder]: At program point L318(line 318) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) (not (<= 1 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse1))) [2022-11-23 02:50:49,598 INFO L899 garLoopResultBuilder]: For program point L479-2(lines 479 483) no Hoare annotation was computed. [2022-11-23 02:50:49,599 INFO L899 garLoopResultBuilder]: For program point L312(lines 312 320) no Hoare annotation was computed. [2022-11-23 02:50:49,600 INFO L899 garLoopResultBuilder]: For program point L981(lines 981 987) no Hoare annotation was computed. [2022-11-23 02:50:49,600 INFO L899 garLoopResultBuilder]: For program point L308(lines 308 325) no Hoare annotation was computed. [2022-11-23 02:50:49,601 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,601 INFO L899 garLoopResultBuilder]: For program point L323-1(lines 304 328) no Hoare annotation was computed. [2022-11-23 02:50:49,601 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 304 328) no Hoare annotation was computed. [2022-11-23 02:50:49,602 INFO L895 garLoopResultBuilder]: At program point L986(lines 977 990) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-11-23 02:50:49,602 INFO L899 garLoopResultBuilder]: For program point L396(lines 396 402) no Hoare annotation was computed. [2022-11-23 02:50:49,602 INFO L895 garLoopResultBuilder]: At program point L394(line 394) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (not (<= 2 ~waterLevel~0)) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-23 02:50:49,603 INFO L895 garLoopResultBuilder]: At program point L396-2(lines 389 405) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,603 INFO L899 garLoopResultBuilder]: For program point L394-1(line 394) no Hoare annotation was computed. [2022-11-23 02:50:49,603 INFO L895 garLoopResultBuilder]: At program point L485(lines 470 488) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse0 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~7#1| 0)) .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2))) [2022-11-23 02:50:49,604 INFO L895 garLoopResultBuilder]: At program point L386(lines 381 388) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,604 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 912 923) no Hoare annotation was computed. [2022-11-23 02:50:49,604 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 912 923) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-23 02:50:49,604 INFO L899 garLoopResultBuilder]: For program point L916-1(lines 912 923) no Hoare annotation was computed. [2022-11-23 02:50:49,605 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,605 INFO L899 garLoopResultBuilder]: For program point L349-1(lines 330 354) no Hoare annotation was computed. [2022-11-23 02:50:49,605 INFO L895 garLoopResultBuilder]: At program point L504(lines 489 507) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-23 02:50:49,605 INFO L899 garLoopResultBuilder]: For program point L498(lines 498 502) no Hoare annotation was computed. [2022-11-23 02:50:49,606 INFO L899 garLoopResultBuilder]: For program point L498-2(lines 498 502) no Hoare annotation was computed. [2022-11-23 02:50:49,606 INFO L895 garLoopResultBuilder]: At program point L996(lines 991 999) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-23 02:50:49,606 INFO L895 garLoopResultBuilder]: At program point L344(line 344) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,606 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~3#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~4#1|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-23 02:50:49,607 INFO L899 garLoopResultBuilder]: For program point L338(lines 338 346) no Hoare annotation was computed. [2022-11-23 02:50:49,607 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 330 354) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-23 02:50:49,607 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 351) no Hoare annotation was computed. [2022-11-23 02:50:49,607 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 330 354) no Hoare annotation was computed. [2022-11-23 02:50:49,607 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 414 424) the Hoare annotation is: true [2022-11-23 02:50:49,608 INFO L902 garLoopResultBuilder]: At program point L941(lines 936 944) the Hoare annotation is: true [2022-11-23 02:50:49,608 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 414 424) no Hoare annotation was computed. [2022-11-23 02:50:49,608 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 414 424) no Hoare annotation was computed. [2022-11-23 02:50:49,615 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:50:49,617 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 02:50:49,650 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:50:49 BoogieIcfgContainer [2022-11-23 02:50:49,650 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 02:50:49,651 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 02:50:49,651 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 02:50:49,651 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 02:50:49,652 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:50:34" (3/4) ... [2022-11-23 02:50:49,656 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 02:50:49,664 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 02:50:49,664 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 02:50:49,664 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 02:50:49,664 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 02:50:49,664 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 02:50:49,665 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:50:49,665 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 02:50:49,665 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-23 02:50:49,666 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-23 02:50:49,676 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-23 02:50:49,677 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-23 02:50:49,677 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-23 02:50:49,678 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 02:50:49,679 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 02:50:49,719 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-23 02:50:49,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-23 02:50:49,720 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-23 02:50:49,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-23 02:50:49,721 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-11-23 02:50:49,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) [2022-11-23 02:50:49,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) [2022-11-23 02:50:49,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive [2022-11-23 02:50:49,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) [2022-11-23 02:50:49,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-11-23 02:50:49,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-11-23 02:50:49,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-11-23 02:50:49,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-11-23 02:50:49,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-11-23 02:50:49,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-11-23 02:50:49,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) [2022-11-23 02:50:49,726 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) [2022-11-23 02:50:49,792 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/witness.graphml [2022-11-23 02:50:49,792 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 02:50:49,793 INFO L158 Benchmark]: Toolchain (without parser) took 16953.96ms. Allocated memory was 157.3MB in the beginning and 226.5MB in the end (delta: 69.2MB). Free memory was 106.3MB in the beginning and 96.2MB in the end (delta: 10.1MB). Peak memory consumption was 81.4MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,793 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 121.6MB. Free memory is still 95.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 02:50:49,794 INFO L158 Benchmark]: CACSL2BoogieTranslator took 863.61ms. Allocated memory is still 157.3MB. Free memory was 105.9MB in the beginning and 126.6MB in the end (delta: -20.8MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,794 INFO L158 Benchmark]: Boogie Procedure Inliner took 110.46ms. Allocated memory is still 157.3MB. Free memory was 126.6MB in the beginning and 124.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,795 INFO L158 Benchmark]: Boogie Preprocessor took 36.32ms. Allocated memory is still 157.3MB. Free memory was 124.2MB in the beginning and 122.9MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,796 INFO L158 Benchmark]: RCFGBuilder took 699.30ms. Allocated memory is still 157.3MB. Free memory was 122.9MB in the beginning and 104.7MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,797 INFO L158 Benchmark]: TraceAbstraction took 15089.28ms. Allocated memory was 157.3MB in the beginning and 226.5MB in the end (delta: 69.2MB). Free memory was 104.0MB in the beginning and 102.5MB in the end (delta: 1.5MB). Peak memory consumption was 117.6MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,798 INFO L158 Benchmark]: Witness Printer took 141.29ms. Allocated memory is still 226.5MB. Free memory was 102.5MB in the beginning and 96.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 02:50:49,801 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 121.6MB. Free memory is still 95.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 863.61ms. Allocated memory is still 157.3MB. Free memory was 105.9MB in the beginning and 126.6MB in the end (delta: -20.8MB). Peak memory consumption was 24.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 110.46ms. Allocated memory is still 157.3MB. Free memory was 126.6MB in the beginning and 124.2MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 36.32ms. Allocated memory is still 157.3MB. Free memory was 124.2MB in the beginning and 122.9MB in the end (delta: 1.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 699.30ms. Allocated memory is still 157.3MB. Free memory was 122.9MB in the beginning and 104.7MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 15089.28ms. Allocated memory was 157.3MB in the beginning and 226.5MB in the end (delta: 69.2MB). Free memory was 104.0MB in the beginning and 102.5MB in the end (delta: 1.5MB). Peak memory consumption was 117.6MB. Max. memory is 16.1GB. * Witness Printer took 141.29ms. Allocated memory is still 226.5MB. Free memory was 102.5MB in the beginning and 96.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 158]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 108 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.0s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 5.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1790 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1762 mSDsluCounter, 4555 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3210 mSDsCounter, 485 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2614 IncrementalHoareTripleChecker+Invalid, 3099 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 485 mSolverCounterUnsat, 1345 mSDtfsCounter, 2614 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 759 GetRequests, 631 SyntacticMatches, 14 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 336 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=972occurred in iteration=11, InterpolantAutomatonStates: 111, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 12 MinimizatonAttempts, 234 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 1778 PreInvPairs, 1920 NumberOfFragments, 1138 HoareAnnotationTreeSize, 1778 FomulaSimplifications, 1961 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 51 FomulaSimplificationsInter, 7370 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1131 NumberOfCodeBlocks, 1131 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1218 ConstructedInterpolants, 0 QuantifiedInterpolants, 2096 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1288 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 449/507 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && !(\result == 0)) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 508]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && 0 == systemActive - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 523]: Loop Invariant Derived loop invariant: ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 1012]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (tmp == 1 && \result == 1)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || ((2 <= tmp && \old(waterLevel) == waterLevel) && 2 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) || 0 == systemActive) || ((2 <= tmp && 2 <= waterLevel) && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 356]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(0 == systemActive)) && (((2 <= waterLevel || 0 == systemActive) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 425]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) - InvariantResult [Line: 968]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) || !(2 <= \old(waterLevel)))) && ((((2 <= waterLevel && 2 <= \result) || ((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || 0 == systemActive) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || \result == 1) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) || ((((\result == 1 && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1026]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 381]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 900]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && \result == 0) && tmp == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 1019]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: (!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) && (0 == systemActive || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-11-23 02:50:49,833 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_cdf48376-4f94-4d87-a4c7-968afc7cee41/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE