./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 16:50:26,109 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 16:50:26,111 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 16:50:26,139 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 16:50:26,140 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 16:50:26,143 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 16:50:26,146 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 16:50:26,150 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 16:50:26,152 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 16:50:26,161 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 16:50:26,162 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 16:50:26,164 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 16:50:26,164 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 16:50:26,165 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 16:50:26,166 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 16:50:26,167 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 16:50:26,168 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 16:50:26,169 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 16:50:26,171 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 16:50:26,172 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 16:50:26,174 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 16:50:26,175 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 16:50:26,176 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 16:50:26,177 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 16:50:26,180 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 16:50:26,181 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 16:50:26,181 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 16:50:26,182 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 16:50:26,182 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 16:50:26,183 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 16:50:26,184 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 16:50:26,185 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 16:50:26,186 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 16:50:26,186 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 16:50:26,187 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 16:50:26,188 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 16:50:26,188 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 16:50:26,189 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 16:50:26,189 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 16:50:26,190 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 16:50:26,191 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 16:50:26,192 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 16:50:26,214 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 16:50:26,214 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 16:50:26,215 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 16:50:26,215 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 16:50:26,216 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 16:50:26,216 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 16:50:26,217 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 16:50:26,217 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 16:50:26,217 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 16:50:26,217 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 16:50:26,218 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 16:50:26,218 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 16:50:26,218 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 16:50:26,218 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 16:50:26,219 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 16:50:26,219 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 16:50:26,219 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 16:50:26,219 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 16:50:26,220 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 16:50:26,220 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 16:50:26,220 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 16:50:26,220 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 16:50:26,220 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 16:50:26,221 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 16:50:26,221 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 16:50:26,221 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 16:50:26,221 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 16:50:26,222 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 16:50:26,222 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 16:50:26,222 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 16:50:26,222 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 16:50:26,223 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 16:50:26,223 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 16:50:26,223 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 16:50:26,223 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a218bb67596641a4ce71d6987e627686ed630ab4299f0e9b54dfa98d78549c82 [2022-11-25 16:50:26,523 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 16:50:26,556 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 16:50:26,559 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 16:50:26,560 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 16:50:26,560 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 16:50:26,562 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-11-25 16:50:29,621 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 16:50:29,967 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 16:50:29,970 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2022-11-25 16:50:29,983 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/data/0324522d6/c13a63803eef4631af36ed77c18612a3/FLAG062bcd789 [2022-11-25 16:50:29,998 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/data/0324522d6/c13a63803eef4631af36ed77c18612a3 [2022-11-25 16:50:30,001 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 16:50:30,003 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 16:50:30,005 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 16:50:30,005 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 16:50:30,009 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 16:50:30,010 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,011 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5cd9dd7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30, skipping insertion in model container [2022-11-25 16:50:30,011 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,019 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 16:50:30,079 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 16:50:30,243 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-11-25 16:50:30,412 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 16:50:30,432 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 16:50:30,470 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c[3241,3254] [2022-11-25 16:50:30,543 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 16:50:30,563 INFO L208 MainTranslator]: Completed translation [2022-11-25 16:50:30,563 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30 WrapperNode [2022-11-25 16:50:30,563 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 16:50:30,565 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 16:50:30,565 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 16:50:30,566 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 16:50:30,574 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,588 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,614 INFO L138 Inliner]: procedures = 59, calls = 104, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 226 [2022-11-25 16:50:30,614 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 16:50:30,615 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 16:50:30,615 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 16:50:30,616 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 16:50:30,626 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,626 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,628 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,629 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,635 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,640 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,642 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,643 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,646 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 16:50:30,647 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 16:50:30,647 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 16:50:30,648 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 16:50:30,649 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (1/1) ... [2022-11-25 16:50:30,655 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 16:50:30,668 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 16:50:30,682 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 16:50:30,712 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 16:50:30,750 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 16:50:30,751 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 16:50:30,751 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 16:50:30,751 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 16:50:30,752 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 16:50:30,752 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 16:50:30,753 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 16:50:30,753 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-25 16:50:30,753 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-25 16:50:30,753 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 16:50:30,753 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 16:50:30,753 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 16:50:30,754 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 16:50:30,754 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-25 16:50:30,754 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-25 16:50:30,755 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 16:50:30,755 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 16:50:30,755 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 16:50:30,755 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 16:50:30,756 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 16:50:30,879 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 16:50:30,882 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 16:50:31,270 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 16:50:31,277 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 16:50:31,278 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 16:50:31,280 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 04:50:31 BoogieIcfgContainer [2022-11-25 16:50:31,280 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 16:50:31,282 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 16:50:31,282 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 16:50:31,286 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 16:50:31,286 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 04:50:30" (1/3) ... [2022-11-25 16:50:31,287 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a40b4ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 04:50:31, skipping insertion in model container [2022-11-25 16:50:31,287 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 04:50:30" (2/3) ... [2022-11-25 16:50:31,288 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a40b4ec and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 04:50:31, skipping insertion in model container [2022-11-25 16:50:31,288 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 04:50:31" (3/3) ... [2022-11-25 16:50:31,289 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product60.cil.c [2022-11-25 16:50:31,318 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 16:50:31,319 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 16:50:31,373 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 16:50:31,380 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4f810536, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 16:50:31,380 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 16:50:31,390 INFO L276 IsEmpty]: Start isEmpty. Operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-25 16:50:31,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 16:50:31,405 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:31,406 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:31,407 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:31,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:31,413 INFO L85 PathProgramCache]: Analyzing trace with hash 1691208954, now seen corresponding path program 1 times [2022-11-25 16:50:31,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:31,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1451547865] [2022-11-25 16:50:31,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:31,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:31,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:31,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 16:50:31,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:31,632 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 16:50:31,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:31,633 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1451547865] [2022-11-25 16:50:31,634 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1451547865] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:31,634 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:31,634 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 16:50:31,636 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584528961] [2022-11-25 16:50:31,636 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:31,641 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 16:50:31,641 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:31,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 16:50:31,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 16:50:31,673 INFO L87 Difference]: Start difference. First operand has 101 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 86 states have internal predecessors, (106), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:31,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:31,712 INFO L93 Difference]: Finished difference Result 193 states and 262 transitions. [2022-11-25 16:50:31,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 16:50:31,714 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-25 16:50:31,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:31,724 INFO L225 Difference]: With dead ends: 193 [2022-11-25 16:50:31,724 INFO L226 Difference]: Without dead ends: 92 [2022-11-25 16:50:31,728 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 16:50:31,732 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:31,733 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 16:50:31,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-25 16:50:31,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-11-25 16:50:31,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 78 states have internal predecessors, (92), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-25 16:50:31,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-11-25 16:50:31,781 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 25 [2022-11-25 16:50:31,782 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:31,782 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-11-25 16:50:31,782 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:31,782 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-11-25 16:50:31,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 16:50:31,785 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:31,785 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:31,785 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 16:50:31,786 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:31,786 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:31,787 INFO L85 PathProgramCache]: Analyzing trace with hash 356391721, now seen corresponding path program 1 times [2022-11-25 16:50:31,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:31,787 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214425046] [2022-11-25 16:50:31,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:31,788 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:31,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:31,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-25 16:50:31,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:31,948 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 16:50:31,948 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:31,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214425046] [2022-11-25 16:50:31,953 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214425046] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:31,953 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:31,953 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 16:50:31,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374266816] [2022-11-25 16:50:31,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:31,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 16:50:31,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:31,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 16:50:31,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 16:50:31,961 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:31,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:31,987 INFO L93 Difference]: Finished difference Result 144 states and 186 transitions. [2022-11-25 16:50:31,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 16:50:31,988 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-25 16:50:31,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:31,990 INFO L225 Difference]: With dead ends: 144 [2022-11-25 16:50:31,990 INFO L226 Difference]: Without dead ends: 83 [2022-11-25 16:50:31,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 16:50:31,992 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 17 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:31,993 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 190 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 16:50:31,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-11-25 16:50:32,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2022-11-25 16:50:32,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 64 states have (on average 1.328125) internal successors, (85), 72 states have internal predecessors, (85), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-25 16:50:32,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 107 transitions. [2022-11-25 16:50:32,005 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 107 transitions. Word has length 26 [2022-11-25 16:50:32,005 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:32,005 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 107 transitions. [2022-11-25 16:50:32,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:32,006 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 107 transitions. [2022-11-25 16:50:32,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 16:50:32,007 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:32,008 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:32,008 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 16:50:32,008 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:32,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:32,009 INFO L85 PathProgramCache]: Analyzing trace with hash 1826063129, now seen corresponding path program 1 times [2022-11-25 16:50:32,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:32,010 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494459532] [2022-11-25 16:50:32,010 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:32,010 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:32,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:32,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:32,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:32,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 16:50:32,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:32,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494459532] [2022-11-25 16:50:32,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494459532] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:32,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:32,180 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 16:50:32,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1517818696] [2022-11-25 16:50:32,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:32,181 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 16:50:32,181 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:32,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 16:50:32,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 16:50:32,182 INFO L87 Difference]: Start difference. First operand 83 states and 107 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:32,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:32,312 INFO L93 Difference]: Finished difference Result 201 states and 263 transitions. [2022-11-25 16:50:32,312 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 16:50:32,313 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-25 16:50:32,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:32,315 INFO L225 Difference]: With dead ends: 201 [2022-11-25 16:50:32,317 INFO L226 Difference]: Without dead ends: 126 [2022-11-25 16:50:32,318 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 16:50:32,319 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 172 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:32,322 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 363 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 16:50:32,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 126 states. [2022-11-25 16:50:32,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 126 to 123. [2022-11-25 16:50:32,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 123 states, 94 states have (on average 1.351063829787234) internal successors, (127), 105 states have internal predecessors, (127), 16 states have call successors, (16), 12 states have call predecessors, (16), 12 states have return successors, (17), 12 states have call predecessors, (17), 16 states have call successors, (17) [2022-11-25 16:50:32,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 160 transitions. [2022-11-25 16:50:32,364 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 160 transitions. Word has length 31 [2022-11-25 16:50:32,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:32,364 INFO L495 AbstractCegarLoop]: Abstraction has 123 states and 160 transitions. [2022-11-25 16:50:32,365 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:32,365 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 160 transitions. [2022-11-25 16:50:32,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-25 16:50:32,369 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:32,370 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:32,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 16:50:32,370 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:32,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:32,371 INFO L85 PathProgramCache]: Analyzing trace with hash 1496608149, now seen corresponding path program 1 times [2022-11-25 16:50:32,372 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:32,372 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825910036] [2022-11-25 16:50:32,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:32,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:32,395 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:32,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 16:50:32,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:32,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 16:50:32,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:32,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825910036] [2022-11-25 16:50:32,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825910036] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:32,535 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:32,536 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 16:50:32,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821944841] [2022-11-25 16:50:32,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:32,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 16:50:32,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:32,539 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 16:50:32,540 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 16:50:32,540 INFO L87 Difference]: Start difference. First operand 123 states and 160 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:32,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:32,666 INFO L93 Difference]: Finished difference Result 283 states and 379 transitions. [2022-11-25 16:50:32,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 16:50:32,667 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-25 16:50:32,668 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:32,675 INFO L225 Difference]: With dead ends: 283 [2022-11-25 16:50:32,676 INFO L226 Difference]: Without dead ends: 168 [2022-11-25 16:50:32,681 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 16:50:32,686 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 85 mSDsluCounter, 285 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:32,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 394 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 16:50:32,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2022-11-25 16:50:32,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 158. [2022-11-25 16:50:32,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 158 states, 121 states have (on average 1.2892561983471074) internal successors, (156), 132 states have internal predecessors, (156), 19 states have call successors, (19), 17 states have call predecessors, (19), 17 states have return successors, (25), 18 states have call predecessors, (25), 19 states have call successors, (25) [2022-11-25 16:50:32,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 200 transitions. [2022-11-25 16:50:32,728 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 200 transitions. Word has length 34 [2022-11-25 16:50:32,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:32,729 INFO L495 AbstractCegarLoop]: Abstraction has 158 states and 200 transitions. [2022-11-25 16:50:32,730 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 16:50:32,730 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 200 transitions. [2022-11-25 16:50:32,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 16:50:32,739 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:32,740 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:32,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 16:50:32,740 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:32,741 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:32,741 INFO L85 PathProgramCache]: Analyzing trace with hash 1570330873, now seen corresponding path program 1 times [2022-11-25 16:50:32,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:32,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [799249346] [2022-11-25 16:50:32,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:32,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:32,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:32,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:32,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:33,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 16:50:33,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,035 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:33,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:33,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [799249346] [2022-11-25 16:50:33,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [799249346] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:33,036 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:33,037 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 16:50:33,039 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643086333] [2022-11-25 16:50:33,040 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:33,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 16:50:33,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:33,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 16:50:33,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 16:50:33,047 INFO L87 Difference]: Start difference. First operand 158 states and 200 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 16:50:33,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:33,242 INFO L93 Difference]: Finished difference Result 341 states and 444 transitions. [2022-11-25 16:50:33,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 16:50:33,243 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-11-25 16:50:33,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:33,248 INFO L225 Difference]: With dead ends: 341 [2022-11-25 16:50:33,248 INFO L226 Difference]: Without dead ends: 191 [2022-11-25 16:50:33,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 16:50:33,249 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 68 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 379 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:33,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 379 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 16:50:33,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2022-11-25 16:50:33,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 184. [2022-11-25 16:50:33,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 142 states have (on average 1.2746478873239437) internal successors, (181), 153 states have internal predecessors, (181), 21 states have call successors, (21), 17 states have call predecessors, (21), 20 states have return successors, (30), 22 states have call predecessors, (30), 21 states have call successors, (30) [2022-11-25 16:50:33,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 232 transitions. [2022-11-25 16:50:33,274 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 232 transitions. Word has length 53 [2022-11-25 16:50:33,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:33,275 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 232 transitions. [2022-11-25 16:50:33,275 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 16:50:33,275 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 232 transitions. [2022-11-25 16:50:33,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 16:50:33,276 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:33,276 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:33,276 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 16:50:33,277 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:33,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:33,277 INFO L85 PathProgramCache]: Analyzing trace with hash -801408389, now seen corresponding path program 1 times [2022-11-25 16:50:33,277 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:33,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2117246130] [2022-11-25 16:50:33,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:33,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:33,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:33,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:33,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 16:50:33,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,404 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:33,405 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:33,405 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2117246130] [2022-11-25 16:50:33,405 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2117246130] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:33,405 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:33,405 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 16:50:33,406 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2086333599] [2022-11-25 16:50:33,406 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:33,406 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 16:50:33,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:33,407 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 16:50:33,407 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-25 16:50:33,407 INFO L87 Difference]: Start difference. First operand 184 states and 232 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 16:50:33,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:33,653 INFO L93 Difference]: Finished difference Result 373 states and 483 transitions. [2022-11-25 16:50:33,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 16:50:33,654 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-11-25 16:50:33,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:33,655 INFO L225 Difference]: With dead ends: 373 [2022-11-25 16:50:33,655 INFO L226 Difference]: Without dead ends: 197 [2022-11-25 16:50:33,657 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-11-25 16:50:33,658 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 120 mSDsluCounter, 327 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 203 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:33,661 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 415 Invalid, 203 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 16:50:33,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 197 states. [2022-11-25 16:50:33,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 197 to 186. [2022-11-25 16:50:33,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 186 states, 144 states have (on average 1.2708333333333333) internal successors, (183), 155 states have internal predecessors, (183), 21 states have call successors, (21), 17 states have call predecessors, (21), 20 states have return successors, (30), 22 states have call predecessors, (30), 21 states have call successors, (30) [2022-11-25 16:50:33,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186 states to 186 states and 234 transitions. [2022-11-25 16:50:33,701 INFO L78 Accepts]: Start accepts. Automaton has 186 states and 234 transitions. Word has length 53 [2022-11-25 16:50:33,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:33,701 INFO L495 AbstractCegarLoop]: Abstraction has 186 states and 234 transitions. [2022-11-25 16:50:33,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 16:50:33,702 INFO L276 IsEmpty]: Start isEmpty. Operand 186 states and 234 transitions. [2022-11-25 16:50:33,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 16:50:33,704 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:33,704 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:33,704 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 16:50:33,705 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:33,705 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:33,705 INFO L85 PathProgramCache]: Analyzing trace with hash 584795005, now seen corresponding path program 1 times [2022-11-25 16:50:33,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:33,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1379917665] [2022-11-25 16:50:33,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:33,706 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:33,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:33,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:33,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 16:50:33,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:33,829 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:33,829 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:33,830 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1379917665] [2022-11-25 16:50:33,830 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1379917665] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:33,830 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:33,830 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 16:50:33,830 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231259185] [2022-11-25 16:50:33,830 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:33,831 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 16:50:33,831 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:33,831 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 16:50:33,831 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 16:50:33,832 INFO L87 Difference]: Start difference. First operand 186 states and 234 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 16:50:34,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:34,118 INFO L93 Difference]: Finished difference Result 557 states and 730 transitions. [2022-11-25 16:50:34,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 16:50:34,119 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 53 [2022-11-25 16:50:34,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:34,123 INFO L225 Difference]: With dead ends: 557 [2022-11-25 16:50:34,124 INFO L226 Difference]: Without dead ends: 379 [2022-11-25 16:50:34,125 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 16:50:34,128 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 222 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 228 SdHoareTripleChecker+Valid, 326 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:34,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [228 Valid, 326 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 16:50:34,131 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 379 states. [2022-11-25 16:50:34,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 379 to 377. [2022-11-25 16:50:34,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 289 states have (on average 1.2491349480968859) internal successors, (361), 308 states have internal predecessors, (361), 45 states have call successors, (45), 42 states have call predecessors, (45), 42 states have return successors, (71), 44 states have call predecessors, (71), 45 states have call successors, (71) [2022-11-25 16:50:34,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 477 transitions. [2022-11-25 16:50:34,178 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 477 transitions. Word has length 53 [2022-11-25 16:50:34,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:34,179 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 477 transitions. [2022-11-25 16:50:34,179 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 16:50:34,179 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 477 transitions. [2022-11-25 16:50:34,180 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-25 16:50:34,180 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:34,181 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:34,181 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 16:50:34,181 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:34,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:34,182 INFO L85 PathProgramCache]: Analyzing trace with hash -2002712797, now seen corresponding path program 1 times [2022-11-25 16:50:34,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:34,182 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942092555] [2022-11-25 16:50:34,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:34,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:34,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:34,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 16:50:34,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:34,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 16:50:34,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:34,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:34,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:34,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-11-25 16:50:34,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:34,426 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:34,426 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:34,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942092555] [2022-11-25 16:50:34,427 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942092555] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:34,427 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:34,427 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-25 16:50:34,427 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [817392472] [2022-11-25 16:50:34,427 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:34,428 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 16:50:34,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:34,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 16:50:34,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-25 16:50:34,430 INFO L87 Difference]: Start difference. First operand 377 states and 477 transitions. Second operand has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 16:50:35,288 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:35,288 INFO L93 Difference]: Finished difference Result 1220 states and 1619 transitions. [2022-11-25 16:50:35,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 16:50:35,293 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-25 16:50:35,293 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:35,298 INFO L225 Difference]: With dead ends: 1220 [2022-11-25 16:50:35,299 INFO L226 Difference]: Without dead ends: 851 [2022-11-25 16:50:35,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 190 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=210, Invalid=720, Unknown=0, NotChecked=0, Total=930 [2022-11-25 16:50:35,304 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 353 mSDsluCounter, 533 mSDsCounter, 0 mSdLazyCounter, 656 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 361 SdHoareTripleChecker+Valid, 617 SdHoareTripleChecker+Invalid, 789 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 656 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:35,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [361 Valid, 617 Invalid, 789 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 656 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 16:50:35,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 851 states. [2022-11-25 16:50:35,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 851 to 793. [2022-11-25 16:50:35,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 793 states, 599 states have (on average 1.2170283806343907) internal successors, (729), 645 states have internal predecessors, (729), 101 states have call successors, (101), 82 states have call predecessors, (101), 92 states have return successors, (181), 99 states have call predecessors, (181), 101 states have call successors, (181) [2022-11-25 16:50:35,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 793 states to 793 states and 1011 transitions. [2022-11-25 16:50:35,413 INFO L78 Accepts]: Start accepts. Automaton has 793 states and 1011 transitions. Word has length 57 [2022-11-25 16:50:35,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:35,413 INFO L495 AbstractCegarLoop]: Abstraction has 793 states and 1011 transitions. [2022-11-25 16:50:35,413 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 16:50:35,414 INFO L276 IsEmpty]: Start isEmpty. Operand 793 states and 1011 transitions. [2022-11-25 16:50:35,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-11-25 16:50:35,417 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:35,417 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:35,417 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 16:50:35,418 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:35,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:35,418 INFO L85 PathProgramCache]: Analyzing trace with hash 984940751, now seen corresponding path program 1 times [2022-11-25 16:50:35,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:35,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81256164] [2022-11-25 16:50:35,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:35,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:35,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 16:50:35,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:35,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 16:50:35,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:35,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,583 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 16:50:35,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 16:50:35,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 16:50:35,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:35,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-25 16:50:35,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,607 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-25 16:50:35,608 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:35,608 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81256164] [2022-11-25 16:50:35,608 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81256164] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 16:50:35,608 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [681447787] [2022-11-25 16:50:35,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:35,609 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 16:50:35,609 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 16:50:35,616 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 16:50:35,646 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 16:50:35,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:35,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 16:50:35,768 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 16:50:35,885 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:35,885 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 16:50:35,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [681447787] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:35,886 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 16:50:35,886 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-25 16:50:35,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1777360450] [2022-11-25 16:50:35,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:35,887 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 16:50:35,887 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:35,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 16:50:35,888 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-25 16:50:35,888 INFO L87 Difference]: Start difference. First operand 793 states and 1011 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-25 16:50:35,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:35,985 INFO L93 Difference]: Finished difference Result 1184 states and 1552 transitions. [2022-11-25 16:50:35,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 16:50:35,986 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-11-25 16:50:35,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:35,992 INFO L225 Difference]: With dead ends: 1184 [2022-11-25 16:50:35,992 INFO L226 Difference]: Without dead ends: 1182 [2022-11-25 16:50:35,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-25 16:50:35,994 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 55 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 213 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:35,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 213 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 16:50:35,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1182 states. [2022-11-25 16:50:36,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1182 to 1070. [2022-11-25 16:50:36,104 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1070 states, 805 states have (on average 1.2285714285714286) internal successors, (989), 874 states have internal predecessors, (989), 144 states have call successors, (144), 112 states have call predecessors, (144), 120 states have return successors, (291), 126 states have call predecessors, (291), 144 states have call successors, (291) [2022-11-25 16:50:36,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1070 states to 1070 states and 1424 transitions. [2022-11-25 16:50:36,111 INFO L78 Accepts]: Start accepts. Automaton has 1070 states and 1424 transitions. Word has length 100 [2022-11-25 16:50:36,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:36,111 INFO L495 AbstractCegarLoop]: Abstraction has 1070 states and 1424 transitions. [2022-11-25 16:50:36,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-25 16:50:36,112 INFO L276 IsEmpty]: Start isEmpty. Operand 1070 states and 1424 transitions. [2022-11-25 16:50:36,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 16:50:36,119 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:36,119 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:36,128 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-25 16:50:36,328 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-25 16:50:36,329 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:36,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:36,329 INFO L85 PathProgramCache]: Analyzing trace with hash 1042607335, now seen corresponding path program 1 times [2022-11-25 16:50:36,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:36,330 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687183908] [2022-11-25 16:50:36,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:36,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:36,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 16:50:36,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:36,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 16:50:36,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:36,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 16:50:36,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 16:50:36,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 16:50:36,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 16:50:36,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:36,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 16:50:36,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 16:50:36,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:36,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 16:50:36,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,626 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 25 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-25 16:50:36,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:36,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687183908] [2022-11-25 16:50:36,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687183908] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 16:50:36,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [428791906] [2022-11-25 16:50:36,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:36,627 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 16:50:36,627 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 16:50:36,629 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 16:50:36,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 16:50:36,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:36,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 16:50:36,766 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 16:50:36,943 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 68 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 16:50:36,944 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 16:50:37,221 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 24 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-25 16:50:37,221 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [428791906] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 16:50:37,222 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 16:50:37,222 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-11-25 16:50:37,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2071823407] [2022-11-25 16:50:37,222 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 16:50:37,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-25 16:50:37,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:37,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-25 16:50:37,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-25 16:50:37,224 INFO L87 Difference]: Start difference. First operand 1070 states and 1424 transitions. Second operand has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-25 16:50:38,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:38,395 INFO L93 Difference]: Finished difference Result 2625 states and 3660 transitions. [2022-11-25 16:50:38,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-25 16:50:38,396 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 142 [2022-11-25 16:50:38,396 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:38,407 INFO L225 Difference]: With dead ends: 2625 [2022-11-25 16:50:38,407 INFO L226 Difference]: Without dead ends: 1727 [2022-11-25 16:50:38,412 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 308 SyntacticMatches, 6 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 215 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=300, Invalid=630, Unknown=0, NotChecked=0, Total=930 [2022-11-25 16:50:38,413 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 540 mSDsluCounter, 208 mSDsCounter, 0 mSdLazyCounter, 579 mSolverCounterSat, 239 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 543 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 818 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 239 IncrementalHoareTripleChecker+Valid, 579 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:38,413 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [543 Valid, 265 Invalid, 818 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [239 Valid, 579 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-25 16:50:38,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1727 states. [2022-11-25 16:50:38,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1727 to 1497. [2022-11-25 16:50:38,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1497 states, 1120 states have (on average 1.2366071428571428) internal successors, (1385), 1218 states have internal predecessors, (1385), 205 states have call successors, (205), 163 states have call predecessors, (205), 171 states have return successors, (433), 169 states have call predecessors, (433), 205 states have call successors, (433) [2022-11-25 16:50:38,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1497 states to 1497 states and 2023 transitions. [2022-11-25 16:50:38,627 INFO L78 Accepts]: Start accepts. Automaton has 1497 states and 2023 transitions. Word has length 142 [2022-11-25 16:50:38,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:38,627 INFO L495 AbstractCegarLoop]: Abstraction has 1497 states and 2023 transitions. [2022-11-25 16:50:38,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-25 16:50:38,628 INFO L276 IsEmpty]: Start isEmpty. Operand 1497 states and 2023 transitions. [2022-11-25 16:50:38,634 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 16:50:38,635 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:38,635 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:38,645 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 16:50:38,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-25 16:50:38,841 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:38,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:38,842 INFO L85 PathProgramCache]: Analyzing trace with hash -343596059, now seen corresponding path program 1 times [2022-11-25 16:50:38,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:38,842 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [427500430] [2022-11-25 16:50:38,842 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:38,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:38,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 16:50:39,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:39,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 16:50:39,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:39,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 16:50:39,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 16:50:39,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,062 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 16:50:39,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 16:50:39,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:39,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 16:50:39,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 16:50:39,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:39,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 16:50:39,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,185 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-25 16:50:39,185 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:39,185 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [427500430] [2022-11-25 16:50:39,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [427500430] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 16:50:39,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [100292816] [2022-11-25 16:50:39,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:39,186 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 16:50:39,186 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 16:50:39,187 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 16:50:39,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 16:50:39,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:39,306 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 16:50:39,310 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 16:50:39,567 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 16:50:39,567 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 16:50:39,806 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-25 16:50:39,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [100292816] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 16:50:39,807 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 16:50:39,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-11-25 16:50:39,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258052870] [2022-11-25 16:50:39,807 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 16:50:39,808 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 16:50:39,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:39,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 16:50:39,809 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-11-25 16:50:39,809 INFO L87 Difference]: Start difference. First operand 1497 states and 2023 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-25 16:50:42,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:42,441 INFO L93 Difference]: Finished difference Result 4251 states and 6104 transitions. [2022-11-25 16:50:42,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-11-25 16:50:42,442 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-11-25 16:50:42,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:42,466 INFO L225 Difference]: With dead ends: 4251 [2022-11-25 16:50:42,466 INFO L226 Difference]: Without dead ends: 2922 [2022-11-25 16:50:42,476 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 358 GetRequests, 304 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 605 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=628, Invalid=1922, Unknown=0, NotChecked=0, Total=2550 [2022-11-25 16:50:42,476 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 892 mSDsluCounter, 418 mSDsCounter, 0 mSdLazyCounter, 1684 mSolverCounterSat, 497 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 504 SdHoareTripleChecker+Invalid, 2181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 497 IncrementalHoareTripleChecker+Valid, 1684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:42,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [897 Valid, 504 Invalid, 2181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [497 Valid, 1684 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-25 16:50:42,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2922 states. [2022-11-25 16:50:42,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2922 to 2363. [2022-11-25 16:50:42,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2363 states, 1762 states have (on average 1.2275822928490352) internal successors, (2163), 1898 states have internal predecessors, (2163), 325 states have call successors, (325), 273 states have call predecessors, (325), 275 states have return successors, (640), 268 states have call predecessors, (640), 325 states have call successors, (640) [2022-11-25 16:50:42,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2363 states to 2363 states and 3128 transitions. [2022-11-25 16:50:42,775 INFO L78 Accepts]: Start accepts. Automaton has 2363 states and 3128 transitions. Word has length 142 [2022-11-25 16:50:42,776 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:42,776 INFO L495 AbstractCegarLoop]: Abstraction has 2363 states and 3128 transitions. [2022-11-25 16:50:42,777 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-25 16:50:42,777 INFO L276 IsEmpty]: Start isEmpty. Operand 2363 states and 3128 transitions. [2022-11-25 16:50:42,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 16:50:42,785 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 16:50:42,786 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:42,796 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 16:50:42,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 16:50:42,992 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 16:50:42,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 16:50:42,992 INFO L85 PathProgramCache]: Analyzing trace with hash -1075563485, now seen corresponding path program 1 times [2022-11-25 16:50:42,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 16:50:42,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1638658962] [2022-11-25 16:50:42,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 16:50:42,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 16:50:43,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 16:50:43,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 16:50:43,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 16:50:43,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 16:50:43,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 16:50:43,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 16:50:43,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 16:50:43,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 16:50:43,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:43,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 16:50:43,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 16:50:43,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 16:50:43,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 16:50:43,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 16:50:43,210 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-11-25 16:50:43,210 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 16:50:43,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1638658962] [2022-11-25 16:50:43,210 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1638658962] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 16:50:43,211 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 16:50:43,211 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-25 16:50:43,211 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1575712531] [2022-11-25 16:50:43,211 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 16:50:43,212 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 16:50:43,212 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 16:50:43,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 16:50:43,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-11-25 16:50:43,213 INFO L87 Difference]: Start difference. First operand 2363 states and 3128 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-25 16:50:43,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 16:50:43,911 INFO L93 Difference]: Finished difference Result 2976 states and 3874 transitions. [2022-11-25 16:50:43,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 16:50:43,912 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-11-25 16:50:43,912 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 16:50:43,914 INFO L225 Difference]: With dead ends: 2976 [2022-11-25 16:50:43,914 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 16:50:43,922 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-11-25 16:50:43,922 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 229 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 716 mSolverCounterSat, 71 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 787 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 71 IncrementalHoareTripleChecker+Valid, 716 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 16:50:43,923 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 219 Invalid, 787 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [71 Valid, 716 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 16:50:43,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 16:50:43,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 16:50:43,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 16:50:43,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 16:50:43,924 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-11-25 16:50:43,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 16:50:43,925 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 16:50:43,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-25 16:50:43,925 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 16:50:43,926 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 16:50:43,928 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 16:50:43,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-25 16:50:43,931 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 16:50:50,247 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 862 869) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 16:50:50,247 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 862 869) no Hoare annotation was computed. [2022-11-25 16:50:50,247 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 862 869) no Hoare annotation was computed. [2022-11-25 16:50:50,247 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 777 783) no Hoare annotation was computed. [2022-11-25 16:50:50,247 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 777 783) the Hoare annotation is: true [2022-11-25 16:50:50,248 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse1 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~pumpRunning~0 0)) (not (<= 1 ~waterLevel~0)) .cse0 .cse1) (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) .cse1))) [2022-11-25 16:50:50,248 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-25 16:50:50,248 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-25 16:50:50,248 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-25 16:50:50,248 INFO L895 garLoopResultBuilder]: At program point L960(lines 945 963) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,249 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,249 INFO L895 garLoopResultBuilder]: At program point L886(lines 881 889) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (= 0 ~systemActive~0)) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 .cse5 (= ~waterLevel~0 1))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse3 .cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3) .cse6 .cse7) (or .cse0 .cse1 (and .cse3 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) .cse7) (or .cse1 .cse2 .cse6 .cse7))) [2022-11-25 16:50:50,250 INFO L899 garLoopResultBuilder]: For program point L1010(lines 1010 1016) no Hoare annotation was computed. [2022-11-25 16:50:50,250 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 753 776) no Hoare annotation was computed. [2022-11-25 16:50:50,250 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,250 INFO L895 garLoopResultBuilder]: At program point L825(line 825) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,251 INFO L895 garLoopResultBuilder]: At program point L821(line 821) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,251 INFO L895 garLoopResultBuilder]: At program point L1003(line 1003) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse5 (not .cse6))) (and (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse7 .cse8 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) .cse4)))) (or .cse0 (and (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse1 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and .cse2 .cse3 .cse4 .cse5) .cse6 (and .cse7 .cse1) (not (<= 2 |old(~waterLevel~0)|))))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) (and .cse8 .cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (and .cse2 .cse3 .cse9 .cse5)))))) [2022-11-25 16:50:50,251 INFO L899 garLoopResultBuilder]: For program point L1003-1(line 1003) no Hoare annotation was computed. [2022-11-25 16:50:50,252 INFO L899 garLoopResultBuilder]: For program point L165(line 165) no Hoare annotation was computed. [2022-11-25 16:50:50,252 INFO L895 garLoopResultBuilder]: At program point L830(line 830) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (not .cse2))))) [2022-11-25 16:50:50,252 INFO L895 garLoopResultBuilder]: At program point L830-1(lines 811 835) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse3 (<= 2 ~waterLevel~0)) (.cse5 (not .cse6))) (and (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse7 .cse8 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) .cse4)))) (or .cse0 (and (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse1 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and .cse2 .cse3 .cse4 .cse5) .cse6 (and .cse7 .cse1) (not (<= 2 |old(~waterLevel~0)|))))) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) (and .cse8 .cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse5) (and .cse2 .cse3 .cse9 .cse5)))))) [2022-11-25 16:50:50,252 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 764 770) no Hoare annotation was computed. [2022-11-25 16:50:50,253 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 958) no Hoare annotation was computed. [2022-11-25 16:50:50,253 INFO L899 garLoopResultBuilder]: For program point L954-2(lines 954 958) no Hoare annotation was computed. [2022-11-25 16:50:50,253 INFO L895 garLoopResultBuilder]: At program point L166(lines 161 168) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,253 INFO L899 garLoopResultBuilder]: For program point L757-1(lines 756 775) no Hoare annotation was computed. [2022-11-25 16:50:50,253 INFO L899 garLoopResultBuilder]: For program point L819(lines 819 827) no Hoare annotation was computed. [2022-11-25 16:50:50,254 INFO L899 garLoopResultBuilder]: For program point L1009(lines 1009 1019) no Hoare annotation was computed. [2022-11-25 16:50:50,254 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 753 776) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) (and (= ~pumpRunning~0 0) .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (= 0 ~systemActive~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 16:50:50,254 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 832) no Hoare annotation was computed. [2022-11-25 16:50:50,254 INFO L899 garLoopResultBuilder]: For program point L1005(lines 1005 1022) no Hoare annotation was computed. [2022-11-25 16:50:50,255 INFO L895 garLoopResultBuilder]: At program point L1005-1(lines 997 1025) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse11 (= ~methaneLevelCritical~0 0))) (let ((.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~10#1| 0)) (.cse1 (not .cse11)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse12 (<= 2 ~waterLevel~0)) (.cse9 (not .cse2))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) .cse5) (or .cse6 .cse0 .cse4 .cse7 .cse1) (let ((.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse9) .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 .cse3 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) .cse10 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse9) (and .cse11 .cse12 .cse10) .cse2 .cse5)) (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse6 .cse0 (and .cse8 .cse3 .cse13) .cse7 (and .cse11 .cse12 .cse13 .cse9)))))) [2022-11-25 16:50:50,255 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 753 776) no Hoare annotation was computed. [2022-11-25 16:50:50,255 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 165) no Hoare annotation was computed. [2022-11-25 16:50:50,255 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2022-11-25 16:50:50,255 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 172 201) no Hoare annotation was computed. [2022-11-25 16:50:50,256 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 172 201) the Hoare annotation is: true [2022-11-25 16:50:50,256 INFO L899 garLoopResultBuilder]: For program point L186(lines 186 190) no Hoare annotation was computed. [2022-11-25 16:50:50,256 INFO L902 garLoopResultBuilder]: At program point L186-1(lines 186 190) the Hoare annotation is: true [2022-11-25 16:50:50,256 INFO L899 garLoopResultBuilder]: For program point L183(line 183) no Hoare annotation was computed. [2022-11-25 16:50:50,256 INFO L902 garLoopResultBuilder]: At program point L182-2(lines 182 196) the Hoare annotation is: true [2022-11-25 16:50:50,257 INFO L902 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: true [2022-11-25 16:50:50,257 INFO L899 garLoopResultBuilder]: For program point L178-1(line 178) no Hoare annotation was computed. [2022-11-25 16:50:50,257 INFO L902 garLoopResultBuilder]: At program point L197(lines 172 201) the Hoare annotation is: true [2022-11-25 16:50:50,257 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-25 16:50:50,257 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-11-25 16:50:50,257 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-25 16:50:50,258 INFO L902 garLoopResultBuilder]: At program point L374(lines 311 378) the Hoare annotation is: true [2022-11-25 16:50:50,258 INFO L899 garLoopResultBuilder]: For program point L341(lines 341 347) no Hoare annotation was computed. [2022-11-25 16:50:50,258 INFO L899 garLoopResultBuilder]: For program point L341-1(lines 341 347) no Hoare annotation was computed. [2022-11-25 16:50:50,258 INFO L895 garLoopResultBuilder]: At program point L304(lines 299 307) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,258 INFO L895 garLoopResultBuilder]: At program point L333(line 333) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)))) [2022-11-25 16:50:50,259 INFO L895 garLoopResultBuilder]: At program point L296(lines 292 298) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,259 INFO L895 garLoopResultBuilder]: At program point L994(lines 989 996) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,259 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 16:50:50,259 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 16:50:50,259 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 16:50:50,260 INFO L895 garLoopResultBuilder]: At program point L371(lines 320 372) the Hoare annotation is: false [2022-11-25 16:50:50,260 INFO L895 garLoopResultBuilder]: At program point L970(line 970) the Hoare annotation is: (and (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= 2 ~waterLevel~0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,260 INFO L895 garLoopResultBuilder]: At program point L231(lines 227 233) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,260 INFO L899 garLoopResultBuilder]: For program point L359(lines 359 365) no Hoare annotation was computed. [2022-11-25 16:50:50,261 INFO L895 garLoopResultBuilder]: At program point L359-2(lines 351 366) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)))) [2022-11-25 16:50:50,261 INFO L899 garLoopResultBuilder]: For program point L260(lines 260 267) no Hoare annotation was computed. [2022-11-25 16:50:50,261 INFO L899 garLoopResultBuilder]: For program point L322(lines 321 370) no Hoare annotation was computed. [2022-11-25 16:50:50,261 INFO L899 garLoopResultBuilder]: For program point L260-2(lines 260 267) no Hoare annotation was computed. [2022-11-25 16:50:50,261 INFO L895 garLoopResultBuilder]: At program point L289(lines 285 291) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 16:50:50,261 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 16:50:50,262 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 366) no Hoare annotation was computed. [2022-11-25 16:50:50,262 INFO L895 garLoopResultBuilder]: At program point L343(line 343) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)))) [2022-11-25 16:50:50,262 INFO L902 garLoopResultBuilder]: At program point L244(lines 236 246) the Hoare annotation is: true [2022-11-25 16:50:50,262 INFO L895 garLoopResultBuilder]: At program point L368(lines 321 370) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 (not (= 0 ~systemActive~0))) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0)))) [2022-11-25 16:50:50,262 INFO L902 garLoopResultBuilder]: At program point L269(lines 250 272) the Hoare annotation is: true [2022-11-25 16:50:50,263 INFO L899 garLoopResultBuilder]: For program point L331(lines 331 337) no Hoare annotation was computed. [2022-11-25 16:50:50,263 INFO L899 garLoopResultBuilder]: For program point L331-1(lines 331 337) no Hoare annotation was computed. [2022-11-25 16:50:50,263 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 327) no Hoare annotation was computed. [2022-11-25 16:50:50,263 INFO L895 garLoopResultBuilder]: At program point L984(lines 979 986) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~waterLevel~0) .cse4) (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4))) [2022-11-25 16:50:50,263 INFO L895 garLoopResultBuilder]: At program point L976(lines 964 978) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= 1 ~waterLevel~0)) [2022-11-25 16:50:50,264 INFO L899 garLoopResultBuilder]: For program point L968(lines 968 974) no Hoare annotation was computed. [2022-11-25 16:50:50,264 INFO L899 garLoopResultBuilder]: For program point L968-1(lines 968 974) no Hoare annotation was computed. [2022-11-25 16:50:50,264 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 785 809) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-11-25 16:50:50,264 INFO L895 garLoopResultBuilder]: At program point L799(line 799) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 16:50:50,264 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 801) no Hoare annotation was computed. [2022-11-25 16:50:50,265 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2022-11-25 16:50:50,265 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-25 16:50:50,265 INFO L895 garLoopResultBuilder]: At program point L841(lines 836 843) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 16:50:50,265 INFO L895 garLoopResultBuilder]: At program point L804(line 804) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 16:50:50,265 INFO L899 garLoopResultBuilder]: For program point L804-1(lines 785 809) no Hoare annotation was computed. [2022-11-25 16:50:50,266 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 785 809) no Hoare annotation was computed. [2022-11-25 16:50:50,266 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 858) no Hoare annotation was computed. [2022-11-25 16:50:50,266 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-11-25 16:50:50,266 INFO L895 garLoopResultBuilder]: At program point L852-2(lines 845 861) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) .cse0) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)) (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~7#1|) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)))) [2022-11-25 16:50:50,266 INFO L895 garLoopResultBuilder]: At program point L941(lines 926 944) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 0)) .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-11-25 16:50:50,267 INFO L895 garLoopResultBuilder]: At program point L877(lines 870 880) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 16:50:50,267 INFO L895 garLoopResultBuilder]: At program point L875(line 875) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (= ~pumpRunning~0 0) (not (<= 2 ~waterLevel~0)) .cse1 .cse2) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2))) [2022-11-25 16:50:50,267 INFO L899 garLoopResultBuilder]: For program point L875-1(line 875) no Hoare annotation was computed. [2022-11-25 16:50:50,267 INFO L899 garLoopResultBuilder]: For program point L935(lines 935 939) no Hoare annotation was computed. [2022-11-25 16:50:50,267 INFO L899 garLoopResultBuilder]: For program point L935-2(lines 935 939) no Hoare annotation was computed. [2022-11-25 16:50:50,268 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-25 16:50:50,268 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-25 16:50:50,268 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= ~methAndRunningLastTime~0 0))) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (= ~waterLevel~0 1) .cse1) (or (not (= ~methaneLevelCritical~0 0)) .cse2 (= 0 ~systemActive~0) .cse1 .cse3) (or .cse0 .cse2 .cse1 .cse3))) [2022-11-25 16:50:50,272 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 16:50:50,274 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 16:50:50,300 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 04:50:50 BoogieIcfgContainer [2022-11-25 16:50:50,300 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 16:50:50,301 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 16:50:50,301 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 16:50:50,302 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 16:50:50,302 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 04:50:31" (3/4) ... [2022-11-25 16:50:50,305 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 16:50:50,312 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-25 16:50:50,312 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 16:50:50,312 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 16:50:50,313 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 16:50:50,313 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 16:50:50,313 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-25 16:50:50,313 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 16:50:50,314 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 16:50:50,320 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-25 16:50:50,321 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 16:50:50,322 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 16:50:50,322 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 16:50:50,322 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 16:50:50,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 16:50:50,348 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 16:50:50,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 16:50:50,349 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) [2022-11-25 16:50:50,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-11-25 16:50:50,350 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= \result && 1 <= tmp) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) && 1 <= tmp___0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) [2022-11-25 16:50:50,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) || (((((methAndRunningLastTime == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-25 16:50:50,351 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (methAndRunningLastTime == 0 && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || tmp == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && !(0 == systemActive))) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) [2022-11-25 16:50:50,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 16:50:50,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel [2022-11-25 16:50:50,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-25 16:50:50,352 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-11-25 16:50:50,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) [2022-11-25 16:50:50,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && !(\result == 0))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-25 16:50:50,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 16:50:50,353 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) [2022-11-25 16:50:50,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-25 16:50:50,354 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 16:50:50,377 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 16:50:50,378 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 16:50:50,378 INFO L158 Benchmark]: Toolchain (without parser) took 20375.62ms. Allocated memory was 176.2MB in the beginning and 308.3MB in the end (delta: 132.1MB). Free memory was 131.0MB in the beginning and 130.6MB in the end (delta: 393.6kB). Peak memory consumption was 134.1MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,379 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 132.1MB. Free memory is still 76.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 16:50:50,379 INFO L158 Benchmark]: CACSL2BoogieTranslator took 559.30ms. Allocated memory is still 176.2MB. Free memory was 130.4MB in the beginning and 111.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,379 INFO L158 Benchmark]: Boogie Procedure Inliner took 49.99ms. Allocated memory is still 176.2MB. Free memory was 111.5MB in the beginning and 108.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,380 INFO L158 Benchmark]: Boogie Preprocessor took 31.04ms. Allocated memory is still 176.2MB. Free memory was 108.8MB in the beginning and 107.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,380 INFO L158 Benchmark]: RCFGBuilder took 633.06ms. Allocated memory is still 176.2MB. Free memory was 107.3MB in the beginning and 89.7MB in the end (delta: 17.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,381 INFO L158 Benchmark]: TraceAbstraction took 19018.32ms. Allocated memory was 176.2MB in the beginning and 308.3MB in the end (delta: 132.1MB). Free memory was 89.1MB in the beginning and 136.9MB in the end (delta: -47.9MB). Peak memory consumption was 135.4MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,381 INFO L158 Benchmark]: Witness Printer took 76.85ms. Allocated memory is still 308.3MB. Free memory was 136.9MB in the beginning and 130.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 16:50:50,383 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 132.1MB. Free memory is still 76.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 559.30ms. Allocated memory is still 176.2MB. Free memory was 130.4MB in the beginning and 111.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 49.99ms. Allocated memory is still 176.2MB. Free memory was 111.5MB in the beginning and 108.8MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.04ms. Allocated memory is still 176.2MB. Free memory was 108.8MB in the beginning and 107.3MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 633.06ms. Allocated memory is still 176.2MB. Free memory was 107.3MB in the beginning and 89.7MB in the end (delta: 17.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 19018.32ms. Allocated memory was 176.2MB in the beginning and 308.3MB in the end (delta: 132.1MB). Free memory was 89.1MB in the beginning and 136.9MB in the end (delta: -47.9MB). Peak memory consumption was 135.4MB. Max. memory is 16.1GB. * Witness Printer took 76.85ms. Allocated memory is still 308.3MB. Free memory was 136.9MB in the beginning and 130.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 165]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 101 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.9s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 6.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2787 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2753 mSDsluCounter, 4013 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2858 mSDsCounter, 1089 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4134 IncrementalHoareTripleChecker+Invalid, 5223 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1089 mSolverCounterUnsat, 1155 mSDtfsCounter, 4134 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 993 GetRequests, 818 SyntacticMatches, 11 SemanticMatches, 164 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1068 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2363occurred in iteration=11, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 992 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 3444 PreInvPairs, 3846 NumberOfFragments, 1632 HoareAnnotationTreeSize, 3444 FomulaSimplifications, 4770 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 47 FomulaSimplificationsInter, 28345 FormulaSimplificationTreeSizeReductionInter, 5.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 1242 NumberOfCodeBlocks, 1242 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1509 ConstructedInterpolants, 0 QuantifiedInterpolants, 3071 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1265 ConjunctsInSsa, 25 ConjunctsInUnsatCore, 17 InterpolantComputations, 10 PerfectInterpolantSequences, 663/781 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: ((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 236]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 836]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((((((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 292]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((!(tmp == 0) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical) - InvariantResult [Line: 250]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && !(\result == 0))) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 299]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel) && !(0 == systemActive)) || (((((methAndRunningLastTime == 0 && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 964]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 1 <= waterLevel - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: ((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || (methAndRunningLastTime == 0 && tmp == 0)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || tmp == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(0 == systemActive)) || !(\old(methAndRunningLastTime) == 0)) || ((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && !(0 == systemActive))) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || (((1 <= \result && 1 <= tmp) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) && 1 <= tmp___0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))) || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || (((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime) && !(0 == systemActive))) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2022-11-25 16:50:50,420 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_87cc7427-5e5b-4572-9db6-ca960d79f557/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE