./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 18:26:05,075 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 18:26:05,077 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 18:26:05,107 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 18:26:05,107 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 18:26:05,110 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 18:26:05,113 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 18:26:05,116 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 18:26:05,118 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 18:26:05,124 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 18:26:05,125 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 18:26:05,128 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 18:26:05,128 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 18:26:05,133 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 18:26:05,134 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 18:26:05,134 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 18:26:05,135 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 18:26:05,136 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 18:26:05,137 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 18:26:05,139 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 18:26:05,140 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 18:26:05,144 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 18:26:05,146 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 18:26:05,147 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 18:26:05,159 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 18:26:05,159 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 18:26:05,160 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 18:26:05,160 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 18:26:05,161 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 18:26:05,162 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 18:26:05,162 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 18:26:05,163 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 18:26:05,163 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 18:26:05,164 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 18:26:05,165 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 18:26:05,165 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 18:26:05,166 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 18:26:05,166 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 18:26:05,166 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 18:26:05,167 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 18:26:05,168 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 18:26:05,174 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 18:26:05,212 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 18:26:05,213 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 18:26:05,213 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 18:26:05,213 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 18:26:05,214 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 18:26:05,214 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 18:26:05,215 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 18:26:05,215 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 18:26:05,216 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 18:26:05,216 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 18:26:05,217 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 18:26:05,217 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 18:26:05,217 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 18:26:05,217 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 18:26:05,218 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 18:26:05,218 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 18:26:05,218 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 18:26:05,218 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 18:26:05,218 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 18:26:05,219 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 18:26:05,219 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 18:26:05,219 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 18:26:05,219 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 18:26:05,219 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 18:26:05,220 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:26:05,220 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 18:26:05,220 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 18:26:05,220 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 18:26:05,220 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 18:26:05,221 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 18:26:05,221 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 18:26:05,221 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 18:26:05,221 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 18:26:05,222 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 18:26:05,222 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 53b1b58c0a8af862b137647fd316df606e2053e614741221b62b3a107765e608 [2022-11-25 18:26:05,527 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 18:26:05,559 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 18:26:05,562 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 18:26:05,563 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 18:26:05,564 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 18:26:05,565 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2022-11-25 18:26:08,588 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 18:26:08,818 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 18:26:08,818 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c [2022-11-25 18:26:08,829 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/data/8985914b7/faf29affcc2d4e68bdf3a7956fa148cb/FLAGdb695ee49 [2022-11-25 18:26:08,844 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/data/8985914b7/faf29affcc2d4e68bdf3a7956fa148cb [2022-11-25 18:26:08,847 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 18:26:08,848 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 18:26:08,849 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 18:26:08,850 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 18:26:08,853 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 18:26:08,854 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:26:08" (1/1) ... [2022-11-25 18:26:08,855 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@78b90ddf and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:08, skipping insertion in model container [2022-11-25 18:26:08,855 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:26:08" (1/1) ... [2022-11-25 18:26:08,863 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 18:26:08,901 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 18:26:09,097 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2022-11-25 18:26:09,222 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:26:09,234 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 18:26:09,274 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/sv-benchmarks/c/product-lines/minepump_spec3_product61.cil.c[7381,7394] [2022-11-25 18:26:09,311 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:26:09,328 INFO L208 MainTranslator]: Completed translation [2022-11-25 18:26:09,328 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09 WrapperNode [2022-11-25 18:26:09,328 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 18:26:09,330 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 18:26:09,330 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 18:26:09,330 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 18:26:09,337 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,349 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,374 INFO L138 Inliner]: procedures = 57, calls = 105, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 224 [2022-11-25 18:26:09,374 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 18:26:09,375 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 18:26:09,375 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 18:26:09,375 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 18:26:09,385 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,385 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,387 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,387 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,393 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,441 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,442 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,443 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,446 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 18:26:09,446 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 18:26:09,447 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 18:26:09,447 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 18:26:09,448 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (1/1) ... [2022-11-25 18:26:09,460 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:26:09,471 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:26:09,484 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 18:26:09,493 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 18:26:09,523 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 18:26:09,523 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 18:26:09,523 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 18:26:09,524 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-25 18:26:09,524 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-25 18:26:09,524 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 18:26:09,526 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 18:26:09,526 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 18:26:09,526 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 18:26:09,526 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:26:09,526 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:26:09,526 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 18:26:09,527 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 18:26:09,527 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:26:09,527 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:26:09,527 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-25 18:26:09,527 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-25 18:26:09,527 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-25 18:26:09,527 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-25 18:26:09,527 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 18:26:09,528 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 18:26:09,528 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 18:26:09,528 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 18:26:09,528 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 18:26:09,607 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 18:26:09,609 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 18:26:10,028 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 18:26:10,036 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 18:26:10,036 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 18:26:10,038 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:26:10 BoogieIcfgContainer [2022-11-25 18:26:10,039 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 18:26:10,041 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 18:26:10,041 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 18:26:10,044 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 18:26:10,044 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 06:26:08" (1/3) ... [2022-11-25 18:26:10,045 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@638386a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:26:10, skipping insertion in model container [2022-11-25 18:26:10,045 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:26:09" (2/3) ... [2022-11-25 18:26:10,046 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@638386a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:26:10, skipping insertion in model container [2022-11-25 18:26:10,046 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:26:10" (3/3) ... [2022-11-25 18:26:10,047 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product61.cil.c [2022-11-25 18:26:10,065 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 18:26:10,065 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 18:26:10,121 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 18:26:10,128 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@5d4df6c2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 18:26:10,128 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 18:26:10,133 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-25 18:26:10,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 18:26:10,143 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:10,144 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:10,144 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:10,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:10,149 INFO L85 PathProgramCache]: Analyzing trace with hash -1589663850, now seen corresponding path program 1 times [2022-11-25 18:26:10,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:10,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [474101358] [2022-11-25 18:26:10,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:10,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:10,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 18:26:10,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:10,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:10,357 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [474101358] [2022-11-25 18:26:10,357 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [474101358] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:10,358 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:10,358 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 18:26:10,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [63892836] [2022-11-25 18:26:10,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:10,365 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 18:26:10,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:10,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 18:26:10,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:26:10,429 INFO L87 Difference]: Start difference. First operand has 110 states, 80 states have (on average 1.375) internal successors, (110), 90 states have internal predecessors, (110), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:10,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:10,504 INFO L93 Difference]: Finished difference Result 212 states and 287 transitions. [2022-11-25 18:26:10,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 18:26:10,506 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-25 18:26:10,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:10,522 INFO L225 Difference]: With dead ends: 212 [2022-11-25 18:26:10,523 INFO L226 Difference]: Without dead ends: 101 [2022-11-25 18:26:10,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:26:10,540 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:10,541 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:26:10,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-25 18:26:10,587 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2022-11-25 18:26:10,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 73 states have (on average 1.3150684931506849) internal successors, (96), 82 states have internal predecessors, (96), 18 states have call successors, (18), 10 states have call predecessors, (18), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-25 18:26:10,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2022-11-25 18:26:10,592 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 25 [2022-11-25 18:26:10,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:10,593 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2022-11-25 18:26:10,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:10,593 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2022-11-25 18:26:10,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 18:26:10,596 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:10,596 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:10,596 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 18:26:10,597 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:10,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:10,598 INFO L85 PathProgramCache]: Analyzing trace with hash 363264377, now seen corresponding path program 1 times [2022-11-25 18:26:10,598 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:10,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1622078200] [2022-11-25 18:26:10,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:10,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:10,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 18:26:10,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:10,709 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:10,709 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1622078200] [2022-11-25 18:26:10,710 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1622078200] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:10,710 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:10,710 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:26:10,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [668154660] [2022-11-25 18:26:10,711 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:10,712 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 18:26:10,712 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:10,713 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:26:10,713 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:26:10,714 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:10,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:10,734 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2022-11-25 18:26:10,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:26:10,735 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-25 18:26:10,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:10,736 INFO L225 Difference]: With dead ends: 168 [2022-11-25 18:26:10,736 INFO L226 Difference]: Without dead ends: 92 [2022-11-25 18:26:10,737 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:26:10,741 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 12 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:10,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 220 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:26:10,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-25 18:26:10,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-11-25 18:26:10,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.328358208955224) internal successors, (89), 76 states have internal predecessors, (89), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-25 18:26:10,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-11-25 18:26:10,765 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 26 [2022-11-25 18:26:10,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:10,769 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-11-25 18:26:10,769 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:10,770 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-11-25 18:26:10,771 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-25 18:26:10,772 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:10,773 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:10,773 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 18:26:10,774 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:10,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:10,776 INFO L85 PathProgramCache]: Analyzing trace with hash -1922022974, now seen corresponding path program 1 times [2022-11-25 18:26:10,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:10,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1833148708] [2022-11-25 18:26:10,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:10,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:10,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:26:10,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:10,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:10,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:10,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1833148708] [2022-11-25 18:26:10,961 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1833148708] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:10,961 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:10,961 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:26:10,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1850694908] [2022-11-25 18:26:10,962 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:10,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 18:26:10,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:10,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:26:10,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:26:10,963 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:11,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:11,120 INFO L93 Difference]: Finished difference Result 177 states and 232 transitions. [2022-11-25 18:26:11,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:26:11,120 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-25 18:26:11,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:11,122 INFO L225 Difference]: With dead ends: 177 [2022-11-25 18:26:11,122 INFO L226 Difference]: Without dead ends: 92 [2022-11-25 18:26:11,123 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 18:26:11,124 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 217 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 250 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:11,125 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [217 Valid, 250 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 18:26:11,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-25 18:26:11,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-11-25 18:26:11,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 76 states have internal predecessors, (88), 15 states have call successors, (15), 9 states have call predecessors, (15), 9 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-25 18:26:11,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 118 transitions. [2022-11-25 18:26:11,140 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 118 transitions. Word has length 30 [2022-11-25 18:26:11,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:11,144 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 118 transitions. [2022-11-25 18:26:11,144 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 18:26:11,145 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 118 transitions. [2022-11-25 18:26:11,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-25 18:26:11,146 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:11,147 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:11,147 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 18:26:11,147 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:11,148 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:11,148 INFO L85 PathProgramCache]: Analyzing trace with hash -1575345012, now seen corresponding path program 1 times [2022-11-25 18:26:11,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:11,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [632578450] [2022-11-25 18:26:11,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:11,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:11,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:26:11,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:11,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:11,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-25 18:26:11,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,276 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:11,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:11,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [632578450] [2022-11-25 18:26:11,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [632578450] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:11,277 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:11,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:26:11,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1761871055] [2022-11-25 18:26:11,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:11,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 18:26:11,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:11,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:26:11,280 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:26:11,280 INFO L87 Difference]: Start difference. First operand 92 states and 118 transitions. Second operand has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 18:26:11,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:11,514 INFO L93 Difference]: Finished difference Result 268 states and 342 transitions. [2022-11-25 18:26:11,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 18:26:11,514 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 45 [2022-11-25 18:26:11,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:11,516 INFO L225 Difference]: With dead ends: 268 [2022-11-25 18:26:11,516 INFO L226 Difference]: Without dead ends: 183 [2022-11-25 18:26:11,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-25 18:26:11,519 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 231 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 77 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 322 SdHoareTripleChecker+Invalid, 225 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:11,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [233 Valid, 322 Invalid, 225 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 18:26:11,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183 states. [2022-11-25 18:26:11,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183 to 177. [2022-11-25 18:26:11,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 131 states have (on average 1.251908396946565) internal successors, (164), 140 states have internal predecessors, (164), 22 states have call successors, (22), 18 states have call predecessors, (22), 23 states have return successors, (29), 24 states have call predecessors, (29), 22 states have call successors, (29) [2022-11-25 18:26:11,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 215 transitions. [2022-11-25 18:26:11,546 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 215 transitions. Word has length 45 [2022-11-25 18:26:11,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:11,547 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 215 transitions. [2022-11-25 18:26:11,547 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.2) internal successors, (36), 5 states have internal predecessors, (36), 4 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 18:26:11,547 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 215 transitions. [2022-11-25 18:26:11,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-25 18:26:11,548 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:11,549 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:11,549 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 18:26:11,549 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:11,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:11,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1919204828, now seen corresponding path program 1 times [2022-11-25 18:26:11,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:11,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1046018384] [2022-11-25 18:26:11,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:11,551 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:11,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:26:11,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:11,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:11,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-25 18:26:11,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:11,721 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:11,721 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:11,721 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1046018384] [2022-11-25 18:26:11,721 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1046018384] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:11,722 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:11,722 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:26:11,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486820024] [2022-11-25 18:26:11,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:11,723 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 18:26:11,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:11,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:26:11,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:26:11,724 INFO L87 Difference]: Start difference. First operand 177 states and 215 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 18:26:12,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:12,046 INFO L93 Difference]: Finished difference Result 452 states and 570 transitions. [2022-11-25 18:26:12,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 18:26:12,047 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-25 18:26:12,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:12,050 INFO L225 Difference]: With dead ends: 452 [2022-11-25 18:26:12,051 INFO L226 Difference]: Without dead ends: 282 [2022-11-25 18:26:12,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-25 18:26:12,058 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 161 mSDsluCounter, 311 mSDsCounter, 0 mSdLazyCounter, 215 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 414 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 215 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:12,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 414 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 215 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 18:26:12,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-11-25 18:26:12,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 274. [2022-11-25 18:26:12,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 203 states have (on average 1.2413793103448276) internal successors, (252), 215 states have internal predecessors, (252), 35 states have call successors, (35), 30 states have call predecessors, (35), 35 states have return successors, (48), 37 states have call predecessors, (48), 35 states have call successors, (48) [2022-11-25 18:26:12,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 335 transitions. [2022-11-25 18:26:12,109 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 335 transitions. Word has length 51 [2022-11-25 18:26:12,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:12,110 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 335 transitions. [2022-11-25 18:26:12,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 18:26:12,110 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 335 transitions. [2022-11-25 18:26:12,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-25 18:26:12,112 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:12,112 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:12,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 18:26:12,113 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:12,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:12,113 INFO L85 PathProgramCache]: Analyzing trace with hash -1745115842, now seen corresponding path program 1 times [2022-11-25 18:26:12,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:12,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1916799705] [2022-11-25 18:26:12,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:12,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:12,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:12,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:26:12,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:12,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:12,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:26:12,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:12,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:12,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:12,282 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1916799705] [2022-11-25 18:26:12,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1916799705] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:12,282 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:12,282 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:26:12,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1225726263] [2022-11-25 18:26:12,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:12,283 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-25 18:26:12,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:12,284 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-25 18:26:12,284 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-25 18:26:12,285 INFO L87 Difference]: Start difference. First operand 274 states and 335 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-25 18:26:13,040 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:13,041 INFO L93 Difference]: Finished difference Result 674 states and 862 transitions. [2022-11-25 18:26:13,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-25 18:26:13,042 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 55 [2022-11-25 18:26:13,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:13,050 INFO L225 Difference]: With dead ends: 674 [2022-11-25 18:26:13,050 INFO L226 Difference]: Without dead ends: 504 [2022-11-25 18:26:13,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 96 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=141, Invalid=365, Unknown=0, NotChecked=0, Total=506 [2022-11-25 18:26:13,062 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 453 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 468 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 458 SdHoareTripleChecker+Valid, 335 SdHoareTripleChecker+Invalid, 666 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 468 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:13,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [458 Valid, 335 Invalid, 666 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 468 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-25 18:26:13,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2022-11-25 18:26:13,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 458. [2022-11-25 18:26:13,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 337 states have (on average 1.2195845697329377) internal successors, (411), 359 states have internal predecessors, (411), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-11-25 18:26:13,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 566 transitions. [2022-11-25 18:26:13,120 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 566 transitions. Word has length 55 [2022-11-25 18:26:13,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:13,120 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 566 transitions. [2022-11-25 18:26:13,121 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-25 18:26:13,121 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 566 transitions. [2022-11-25 18:26:13,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-25 18:26:13,123 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:13,123 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:13,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 18:26:13,124 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:13,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:13,124 INFO L85 PathProgramCache]: Analyzing trace with hash -1683076228, now seen corresponding path program 1 times [2022-11-25 18:26:13,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:13,125 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1248562126] [2022-11-25 18:26:13,125 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:13,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:13,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:13,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:26:13,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:13,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:13,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:26:13,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:13,233 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:13,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1248562126] [2022-11-25 18:26:13,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1248562126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:13,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:13,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:26:13,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765098559] [2022-11-25 18:26:13,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:13,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 18:26:13,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:13,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:26:13,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:26:13,236 INFO L87 Difference]: Start difference. First operand 458 states and 566 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-25 18:26:13,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:13,621 INFO L93 Difference]: Finished difference Result 850 states and 1060 transitions. [2022-11-25 18:26:13,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-25 18:26:13,622 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2022-11-25 18:26:13,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:13,625 INFO L225 Difference]: With dead ends: 850 [2022-11-25 18:26:13,625 INFO L226 Difference]: Without dead ends: 492 [2022-11-25 18:26:13,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-25 18:26:13,628 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 186 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 334 mSolverCounterSat, 72 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 334 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:13,628 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 281 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 334 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 18:26:13,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 492 states. [2022-11-25 18:26:13,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 492 to 458. [2022-11-25 18:26:13,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 337 states have (on average 1.2166172106824926) internal successors, (410), 359 states have internal predecessors, (410), 60 states have call successors, (60), 46 states have call predecessors, (60), 60 states have return successors, (95), 64 states have call predecessors, (95), 60 states have call successors, (95) [2022-11-25 18:26:13,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 565 transitions. [2022-11-25 18:26:13,677 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 565 transitions. Word has length 55 [2022-11-25 18:26:13,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:13,678 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 565 transitions. [2022-11-25 18:26:13,678 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-25 18:26:13,678 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 565 transitions. [2022-11-25 18:26:13,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-25 18:26:13,679 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:13,680 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:13,680 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 18:26:13,680 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:13,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:13,681 INFO L85 PathProgramCache]: Analyzing trace with hash -1817089734, now seen corresponding path program 1 times [2022-11-25 18:26:13,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:13,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [429851970] [2022-11-25 18:26:13,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:13,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:13,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:13,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:26:13,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:13,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:13,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:26:13,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:13,864 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:26:13,864 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:13,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [429851970] [2022-11-25 18:26:13,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [429851970] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:13,865 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:13,865 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-25 18:26:13,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152980025] [2022-11-25 18:26:13,865 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:13,865 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-25 18:26:13,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:13,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-25 18:26:13,866 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-11-25 18:26:13,866 INFO L87 Difference]: Start difference. First operand 458 states and 565 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-25 18:26:14,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:14,349 INFO L93 Difference]: Finished difference Result 938 states and 1173 transitions. [2022-11-25 18:26:14,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 18:26:14,349 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2022-11-25 18:26:14,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:14,352 INFO L225 Difference]: With dead ends: 938 [2022-11-25 18:26:14,353 INFO L226 Difference]: Without dead ends: 487 [2022-11-25 18:26:14,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=156, Unknown=0, NotChecked=0, Total=210 [2022-11-25 18:26:14,355 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 221 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 568 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 224 SdHoareTripleChecker+Valid, 426 SdHoareTripleChecker+Invalid, 638 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 568 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:14,356 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [224 Valid, 426 Invalid, 638 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 568 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 18:26:14,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2022-11-25 18:26:14,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 461. [2022-11-25 18:26:14,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 461 states, 342 states have (on average 1.2105263157894737) internal successors, (414), 363 states have internal predecessors, (414), 59 states have call successors, (59), 45 states have call predecessors, (59), 59 states have return successors, (94), 63 states have call predecessors, (94), 59 states have call successors, (94) [2022-11-25 18:26:14,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 461 states to 461 states and 567 transitions. [2022-11-25 18:26:14,400 INFO L78 Accepts]: Start accepts. Automaton has 461 states and 567 transitions. Word has length 55 [2022-11-25 18:26:14,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:14,401 INFO L495 AbstractCegarLoop]: Abstraction has 461 states and 567 transitions. [2022-11-25 18:26:14,401 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-25 18:26:14,401 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 567 transitions. [2022-11-25 18:26:14,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-25 18:26:14,403 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:14,403 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:14,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 18:26:14,403 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:14,404 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:14,404 INFO L85 PathProgramCache]: Analyzing trace with hash 1139830327, now seen corresponding path program 1 times [2022-11-25 18:26:14,404 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:14,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [908770936] [2022-11-25 18:26:14,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:14,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:14,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:14,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:26:14,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:14,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:14,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:26:14,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-11-25 18:26:14,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:14,660 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:26:14,660 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:14,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [908770936] [2022-11-25 18:26:14,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [908770936] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:14,660 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:14,661 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-25 18:26:14,661 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [359386092] [2022-11-25 18:26:14,661 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:14,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-25 18:26:14,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:14,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-25 18:26:14,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=109, Unknown=0, NotChecked=0, Total=132 [2022-11-25 18:26:14,664 INFO L87 Difference]: Start difference. First operand 461 states and 567 transitions. Second operand has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-25 18:26:15,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:15,877 INFO L93 Difference]: Finished difference Result 1353 states and 1732 transitions. [2022-11-25 18:26:15,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-25 18:26:15,878 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) Word has length 64 [2022-11-25 18:26:15,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:15,883 INFO L225 Difference]: With dead ends: 1353 [2022-11-25 18:26:15,883 INFO L226 Difference]: Without dead ends: 899 [2022-11-25 18:26:15,886 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 261 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=243, Invalid=1017, Unknown=0, NotChecked=0, Total=1260 [2022-11-25 18:26:15,886 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 233 mSDsluCounter, 793 mSDsCounter, 0 mSdLazyCounter, 1376 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 910 SdHoareTripleChecker+Invalid, 1507 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 1376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:15,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [240 Valid, 910 Invalid, 1507 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 1376 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 18:26:15,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 899 states. [2022-11-25 18:26:15,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 899 to 862. [2022-11-25 18:26:15,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 862 states, 629 states have (on average 1.1828298887122417) internal successors, (744), 667 states have internal predecessors, (744), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (205), 123 states have call predecessors, (205), 117 states have call successors, (205) [2022-11-25 18:26:15,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1066 transitions. [2022-11-25 18:26:15,998 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1066 transitions. Word has length 64 [2022-11-25 18:26:15,998 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:15,999 INFO L495 AbstractCegarLoop]: Abstraction has 862 states and 1066 transitions. [2022-11-25 18:26:15,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.083333333333333) internal successors, (49), 7 states have internal predecessors, (49), 2 states have call successors, (7), 3 states have call predecessors, (7), 4 states have return successors, (6), 5 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-25 18:26:15,999 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1066 transitions. [2022-11-25 18:26:16,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-25 18:26:16,003 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:16,003 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:16,004 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 18:26:16,004 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:16,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:16,006 INFO L85 PathProgramCache]: Analyzing trace with hash 890398829, now seen corresponding path program 1 times [2022-11-25 18:26:16,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:16,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1613569172] [2022-11-25 18:26:16,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:16,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:16,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:16,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:26:16,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:16,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:16,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:26:16,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-25 18:26:16,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:16,197 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:26:16,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:16,198 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1613569172] [2022-11-25 18:26:16,198 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1613569172] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:26:16,198 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:26:16,199 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-25 18:26:16,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213917595] [2022-11-25 18:26:16,199 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:26:16,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-25 18:26:16,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:16,200 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-25 18:26:16,200 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-25 18:26:16,200 INFO L87 Difference]: Start difference. First operand 862 states and 1066 transitions. Second operand has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-25 18:26:16,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:16,820 INFO L93 Difference]: Finished difference Result 1726 states and 2134 transitions. [2022-11-25 18:26:16,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-25 18:26:16,820 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 65 [2022-11-25 18:26:16,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:16,825 INFO L225 Difference]: With dead ends: 1726 [2022-11-25 18:26:16,825 INFO L226 Difference]: Without dead ends: 871 [2022-11-25 18:26:16,828 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=296, Unknown=0, NotChecked=0, Total=380 [2022-11-25 18:26:16,829 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 333 mSDsluCounter, 483 mSDsCounter, 0 mSdLazyCounter, 708 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 334 SdHoareTripleChecker+Valid, 592 SdHoareTripleChecker+Invalid, 838 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 708 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:16,830 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [334 Valid, 592 Invalid, 838 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 708 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 18:26:16,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 871 states. [2022-11-25 18:26:16,899 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 871 to 862. [2022-11-25 18:26:16,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 862 states, 629 states have (on average 1.1701112877583466) internal successors, (736), 667 states have internal predecessors, (736), 117 states have call successors, (117), 90 states have call predecessors, (117), 115 states have return successors, (186), 123 states have call predecessors, (186), 117 states have call successors, (186) [2022-11-25 18:26:16,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 862 states to 862 states and 1039 transitions. [2022-11-25 18:26:16,905 INFO L78 Accepts]: Start accepts. Automaton has 862 states and 1039 transitions. Word has length 65 [2022-11-25 18:26:16,906 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:16,907 INFO L495 AbstractCegarLoop]: Abstraction has 862 states and 1039 transitions. [2022-11-25 18:26:16,907 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.0) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-25 18:26:16,907 INFO L276 IsEmpty]: Start isEmpty. Operand 862 states and 1039 transitions. [2022-11-25 18:26:16,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2022-11-25 18:26:16,914 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:26:16,914 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:16,914 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-25 18:26:16,914 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:26:16,916 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:26:16,916 INFO L85 PathProgramCache]: Analyzing trace with hash -1014722144, now seen corresponding path program 1 times [2022-11-25 18:26:16,916 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:26:16,916 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [364100194] [2022-11-25 18:26:16,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:16,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:26:16,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-25 18:26:17,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:26:17,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 18:26:17,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:26:17,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:26:17,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:26:17,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-25 18:26:17,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-25 18:26:17,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:26:17,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-25 18:26:17,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2022-11-25 18:26:17,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,265 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-25 18:26:17,266 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:26:17,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [364100194] [2022-11-25 18:26:17,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [364100194] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 18:26:17,266 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1868188075] [2022-11-25 18:26:17,266 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:26:17,267 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 18:26:17,267 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:26:17,271 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 18:26:17,295 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 18:26:17,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:26:17,408 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-25 18:26:17,416 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 18:26:17,753 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-25 18:26:17,753 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 18:26:18,184 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-25 18:26:18,185 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1868188075] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 18:26:18,185 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 18:26:18,185 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2022-11-25 18:26:18,186 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1369019192] [2022-11-25 18:26:18,186 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 18:26:18,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-25 18:26:18,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:26:18,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-25 18:26:18,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-25 18:26:18,188 INFO L87 Difference]: Start difference. First operand 862 states and 1039 transitions. Second operand has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) [2022-11-25 18:26:20,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:26:20,350 INFO L93 Difference]: Finished difference Result 1813 states and 2250 transitions. [2022-11-25 18:26:20,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-11-25 18:26:20,351 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) Word has length 105 [2022-11-25 18:26:20,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:26:20,352 INFO L225 Difference]: With dead ends: 1813 [2022-11-25 18:26:20,352 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 18:26:20,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 306 GetRequests, 228 SyntacticMatches, 7 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1420 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1173, Invalid=4083, Unknown=0, NotChecked=0, Total=5256 [2022-11-25 18:26:20,358 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 1391 mSDsluCounter, 519 mSDsCounter, 0 mSdLazyCounter, 1452 mSolverCounterSat, 793 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1393 SdHoareTripleChecker+Valid, 570 SdHoareTripleChecker+Invalid, 2245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 793 IncrementalHoareTripleChecker+Valid, 1452 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:26:20,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1393 Valid, 570 Invalid, 2245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [793 Valid, 1452 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-25 18:26:20,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 18:26:20,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 18:26:20,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:26:20,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 18:26:20,361 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 105 [2022-11-25 18:26:20,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:26:20,361 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 18:26:20,361 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.681818181818182) internal successors, (147), 15 states have internal predecessors, (147), 7 states have call successors, (28), 10 states have call predecessors, (28), 10 states have return successors, (28), 10 states have call predecessors, (28), 7 states have call successors, (28) [2022-11-25 18:26:20,362 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 18:26:20,362 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 18:26:20,366 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 18:26:20,373 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 18:26:20,573 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-25 18:26:20,575 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 18:26:26,649 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 266 273) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) [2022-11-25 18:26:26,649 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 266 273) no Hoare annotation was computed. [2022-11-25 18:26:26,649 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 266 273) no Hoare annotation was computed. [2022-11-25 18:26:26,649 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 156 162) no Hoare annotation was computed. [2022-11-25 18:26:26,649 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 156 162) the Hoare annotation is: true [2022-11-25 18:26:26,650 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,650 INFO L899 garLoopResultBuilder]: For program point L209-1(lines 190 214) no Hoare annotation was computed. [2022-11-25 18:26:26,651 INFO L895 garLoopResultBuilder]: At program point L364(lines 349 367) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,651 INFO L899 garLoopResultBuilder]: For program point L358(lines 358 362) no Hoare annotation was computed. [2022-11-25 18:26:26,651 INFO L899 garLoopResultBuilder]: For program point L358-2(lines 358 362) no Hoare annotation was computed. [2022-11-25 18:26:26,651 INFO L895 garLoopResultBuilder]: At program point L468(lines 463 471) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,651 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 190 214) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-11-25 18:26:26,652 INFO L895 garLoopResultBuilder]: At program point L204(line 204) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,652 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 190 214) no Hoare annotation was computed. [2022-11-25 18:26:26,652 INFO L895 garLoopResultBuilder]: At program point L200(line 200) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,652 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 206) no Hoare annotation was computed. [2022-11-25 18:26:26,652 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2022-11-25 18:26:26,653 INFO L899 garLoopResultBuilder]: For program point L400-1(lines 396 407) no Hoare annotation was computed. [2022-11-25 18:26:26,653 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 396 407) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 0)) (.cse6 (= |old(~methaneLevelCritical~0)| 0))) (let ((.cse0 (not .cse6)) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not .cse1)) (.cse4 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse5 .cse2 .cse6 .cse7 .cse4)))) [2022-11-25 18:26:26,653 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 396 407) no Hoare annotation was computed. [2022-11-25 18:26:26,653 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 408 416) the Hoare annotation is: true [2022-11-25 18:26:26,653 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 408 416) no Hoare annotation was computed. [2022-11-25 18:26:26,654 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 408 416) no Hoare annotation was computed. [2022-11-25 18:26:26,654 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 483 512) no Hoare annotation was computed. [2022-11-25 18:26:26,654 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 483 512) the Hoare annotation is: true [2022-11-25 18:26:26,654 INFO L902 garLoopResultBuilder]: At program point L508(lines 483 512) the Hoare annotation is: true [2022-11-25 18:26:26,654 INFO L899 garLoopResultBuilder]: For program point L504(line 504) no Hoare annotation was computed. [2022-11-25 18:26:26,654 INFO L899 garLoopResultBuilder]: For program point L497(lines 497 501) no Hoare annotation was computed. [2022-11-25 18:26:26,655 INFO L902 garLoopResultBuilder]: At program point L497-1(lines 497 501) the Hoare annotation is: true [2022-11-25 18:26:26,655 INFO L899 garLoopResultBuilder]: For program point L494(line 494) no Hoare annotation was computed. [2022-11-25 18:26:26,655 INFO L902 garLoopResultBuilder]: At program point L493-2(lines 493 507) the Hoare annotation is: true [2022-11-25 18:26:26,655 INFO L902 garLoopResultBuilder]: At program point L489(line 489) the Hoare annotation is: true [2022-11-25 18:26:26,655 INFO L899 garLoopResultBuilder]: For program point L489-1(line 489) no Hoare annotation was computed. [2022-11-25 18:26:26,655 INFO L899 garLoopResultBuilder]: For program point L477(line 477) no Hoare annotation was computed. [2022-11-25 18:26:26,656 INFO L899 garLoopResultBuilder]: For program point L143-1(lines 143 149) no Hoare annotation was computed. [2022-11-25 18:26:26,656 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 132 155) no Hoare annotation was computed. [2022-11-25 18:26:26,656 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-25 18:26:26,656 INFO L895 garLoopResultBuilder]: At program point L226(line 226) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-25 18:26:26,656 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-25 18:26:26,657 INFO L895 garLoopResultBuilder]: At program point L478(lines 473 480) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-25 18:26:26,657 INFO L899 garLoopResultBuilder]: For program point L222-1(line 222) no Hoare annotation was computed. [2022-11-25 18:26:26,657 INFO L895 garLoopResultBuilder]: At program point L445(lines 440 448) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0)) (.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse8 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse2 (and .cse4 .cse5 .cse6 .cse7) .cse3 (and (<= 1 ~pumpRunning~0) .cse4 .cse7))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2 .cse8) (let ((.cse9 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse6 .cse9 .cse8) .cse10 (and .cse4 .cse5 .cse6 .cse9 .cse8) .cse3)) (or .cse1 .cse2 .cse10 .cse3))) [2022-11-25 18:26:26,657 INFO L899 garLoopResultBuilder]: For program point L590(lines 590 610) no Hoare annotation was computed. [2022-11-25 18:26:26,658 INFO L895 garLoopResultBuilder]: At program point L235(line 235) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1))) [2022-11-25 18:26:26,658 INFO L895 garLoopResultBuilder]: At program point L235-1(lines 216 240) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 (not .cse5) (and (<= 1 ~pumpRunning~0) .cse2) .cse6) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse0 .cse1 .cse7) .cse6)) (or .cse3 (and .cse0 .cse2) .cse5 .cse4 .cse6))) [2022-11-25 18:26:26,658 INFO L899 garLoopResultBuilder]: For program point L136-1(lines 135 154) no Hoare annotation was computed. [2022-11-25 18:26:26,658 INFO L899 garLoopResultBuilder]: For program point L376(lines 376 380) no Hoare annotation was computed. [2022-11-25 18:26:26,658 INFO L895 garLoopResultBuilder]: At program point L376-2(lines 372 383) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-25 18:26:26,659 INFO L895 garLoopResultBuilder]: At program point L290(lines 285 293) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1) (or (and (<= 1 ~pumpRunning~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse2))) [2022-11-25 18:26:26,659 INFO L899 garLoopResultBuilder]: For program point L224(lines 224 232) no Hoare annotation was computed. [2022-11-25 18:26:26,659 INFO L899 garLoopResultBuilder]: For program point L220(lines 220 237) no Hoare annotation was computed. [2022-11-25 18:26:26,659 INFO L899 garLoopResultBuilder]: For program point L600(lines 600 606) no Hoare annotation was computed. [2022-11-25 18:26:26,659 INFO L899 garLoopResultBuilder]: For program point L596(lines 596 609) no Hoare annotation was computed. [2022-11-25 18:26:26,660 INFO L895 garLoopResultBuilder]: At program point L596-1(lines 581 613) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0)) (.cse14 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~8#1| 0))) (let ((.cse9 (not .cse14)) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (not .cse6)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (<= ~waterLevel~0 1)) (.cse3 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1| 1)) (.cse4 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse10 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4) .cse5) (or .cse1 .cse6 .cse2 (and .cse7 .cse8 .cse9) .cse10) (or .cse6 .cse2 (and .cse7 .cse11 .cse9) .cse12 .cse10 (and .cse13 .cse11 .cse9)) (or .cse1 .cse2 .cse5 (and .cse14 .cse7 .cse11 .cse8) .cse10 (and (<= 1 ~pumpRunning~0) .cse14 .cse8)) (or (and .cse14 .cse7 .cse11 .cse3 .cse4) .cse2 .cse12 .cse5 (and .cse13 .cse14 .cse11 .cse3 .cse4) .cse10) (or .cse0 .cse2 .cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|))))) [2022-11-25 18:26:26,660 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 132 155) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2022-11-25 18:26:26,660 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 (not .cse5) (and (<= 1 ~pumpRunning~0) .cse2) .cse6) (let ((.cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7) (not (<= 1 |old(~pumpRunning~0)|)) (and .cse0 .cse1 .cse7) .cse6)) (or .cse3 (and .cse0 .cse2) .cse5 .cse4 .cse6))) [2022-11-25 18:26:26,660 INFO L899 garLoopResultBuilder]: For program point L588-1(line 588) no Hoare annotation was computed. [2022-11-25 18:26:26,661 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 132 155) no Hoare annotation was computed. [2022-11-25 18:26:26,661 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 477) no Hoare annotation was computed. [2022-11-25 18:26:26,661 INFO L902 garLoopResultBuilder]: At program point L576(lines 557 579) the Hoare annotation is: true [2022-11-25 18:26:26,661 INFO L895 garLoopResultBuilder]: At program point L630(lines 626 632) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-25 18:26:26,661 INFO L895 garLoopResultBuilder]: At program point L110(lines 63 111) the Hoare annotation is: false [2022-11-25 18:26:26,662 INFO L899 garLoopResultBuilder]: For program point L65(lines 64 109) no Hoare annotation was computed. [2022-11-25 18:26:26,662 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 18:26:26,662 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 105) no Hoare annotation was computed. [2022-11-25 18:26:26,662 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 18:26:26,662 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 18:26:26,662 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-25 18:26:26,663 INFO L895 garLoopResultBuilder]: At program point L107(lines 64 109) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= ~waterLevel~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse8 (<= ~waterLevel~0 2)) (.cse5 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse2 .cse3 .cse4 .cse8 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 (not .cse7) .cse3 .cse4 .cse8 .cse5))) [2022-11-25 18:26:26,663 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2022-11-25 18:26:26,663 INFO L899 garLoopResultBuilder]: For program point L74-1(lines 74 80) no Hoare annotation was computed. [2022-11-25 18:26:26,663 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-25 18:26:26,663 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 18:26:26,663 INFO L895 garLoopResultBuilder]: At program point L541(lines 537 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0)) [2022-11-25 18:26:26,664 INFO L895 garLoopResultBuilder]: At program point L645(lines 640 648) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-25 18:26:26,664 INFO L899 garLoopResultBuilder]: For program point L100(lines 100 104) no Hoare annotation was computed. [2022-11-25 18:26:26,664 INFO L895 garLoopResultBuilder]: At program point L100-2(lines 94 105) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-25 18:26:26,664 INFO L895 garLoopResultBuilder]: At program point L637(lines 633 639) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-25 18:26:26,664 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 574) no Hoare annotation was computed. [2022-11-25 18:26:26,665 INFO L899 garLoopResultBuilder]: For program point L567-2(lines 567 574) no Hoare annotation was computed. [2022-11-25 18:26:26,665 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-11-25 18:26:26,665 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-11-25 18:26:26,665 INFO L902 garLoopResultBuilder]: At program point L113(lines 54 117) the Hoare annotation is: true [2022-11-25 18:26:26,665 INFO L895 garLoopResultBuilder]: At program point L76(line 76) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (<= ~waterLevel~0 1)) (.cse8 (= ~pumpRunning~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_main_~tmp~7#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse6) (and (= |ULTIMATE.start_main_~tmp~7#1| 1) .cse8 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse7 .cse4 .cse6) (and .cse8 .cse2 (not .cse1) .cse3 .cse4 .cse5 .cse6))) [2022-11-25 18:26:26,666 INFO L902 garLoopResultBuilder]: At program point L551(lines 544 553) the Hoare annotation is: true [2022-11-25 18:26:26,666 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 164 188) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))))) [2022-11-25 18:26:26,666 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 262) no Hoare annotation was computed. [2022-11-25 18:26:26,666 INFO L895 garLoopResultBuilder]: At program point L254(line 254) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and .cse2 .cse1) (and .cse2 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))))) [2022-11-25 18:26:26,667 INFO L895 garLoopResultBuilder]: At program point L256-2(lines 249 265) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|)) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (.cse8 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) (.cse9 (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|)) (.cse10 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse11 (not (<= ~waterLevel~0 2)))) (and (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse5 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|))) (or .cse0 .cse1 (not .cse2) (and .cse3 .cse4 .cse5) (and .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11)) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse4)) (let ((.cse12 (= ~pumpRunning~0 0)) (.cse13 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|))) (or .cse0 .cse2 .cse1 (and .cse12 .cse6 .cse7 .cse13 .cse8 .cse9 .cse10) (and .cse12 .cse4 .cse13) .cse11)))) [2022-11-25 18:26:26,667 INFO L899 garLoopResultBuilder]: For program point L254-1(line 254) no Hoare annotation was computed. [2022-11-25 18:26:26,667 INFO L895 garLoopResultBuilder]: At program point L345(lines 330 348) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (and .cse2 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and .cse2 .cse1))))) [2022-11-25 18:26:26,667 INFO L895 garLoopResultBuilder]: At program point L246(lines 241 248) the Hoare annotation is: (let ((.cse1 (<= ~waterLevel~0 1)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~waterLevel~0 2)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= 0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|))) (or .cse2 .cse0 (and .cse3 .cse1 .cse4) (and .cse3 .cse4 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse5)) (or .cse2 (= ~methaneLevelCritical~0 0) .cse0 .cse5))) [2022-11-25 18:26:26,667 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 343) no Hoare annotation was computed. [2022-11-25 18:26:26,668 INFO L895 garLoopResultBuilder]: At program point L178(line 178) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse1)) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)))) [2022-11-25 18:26:26,668 INFO L899 garLoopResultBuilder]: For program point L339-2(lines 339 343) no Hoare annotation was computed. [2022-11-25 18:26:26,668 INFO L899 garLoopResultBuilder]: For program point L172(lines 172 180) no Hoare annotation was computed. [2022-11-25 18:26:26,668 INFO L899 garLoopResultBuilder]: For program point L168(lines 168 185) no Hoare annotation was computed. [2022-11-25 18:26:26,668 INFO L899 garLoopResultBuilder]: For program point L453(lines 453 459) no Hoare annotation was computed. [2022-11-25 18:26:26,668 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 164 188) no Hoare annotation was computed. [2022-11-25 18:26:26,669 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-25 18:26:26,669 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 164 188) no Hoare annotation was computed. [2022-11-25 18:26:26,669 INFO L895 garLoopResultBuilder]: At program point L458(lines 449 462) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and .cse2 .cse1))))) [2022-11-25 18:26:26,669 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 384 395) no Hoare annotation was computed. [2022-11-25 18:26:26,670 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 384 395) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3) (or .cse6 .cse1 .cse0 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse3))) [2022-11-25 18:26:26,670 INFO L899 garLoopResultBuilder]: For program point L388-1(lines 384 395) no Hoare annotation was computed. [2022-11-25 18:26:26,670 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 274 284) the Hoare annotation is: true [2022-11-25 18:26:26,670 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 274 284) no Hoare annotation was computed. [2022-11-25 18:26:26,670 INFO L902 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: true [2022-11-25 18:26:26,671 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 274 284) no Hoare annotation was computed. [2022-11-25 18:26:26,671 INFO L899 garLoopResultBuilder]: For program point L279-1(line 279) no Hoare annotation was computed. [2022-11-25 18:26:26,674 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:26:26,676 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 18:26:26,706 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 06:26:26 BoogieIcfgContainer [2022-11-25 18:26:26,707 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 18:26:26,707 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 18:26:26,707 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 18:26:26,708 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 18:26:26,708 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:26:10" (3/4) ... [2022-11-25 18:26:26,711 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 18:26:26,717 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-25 18:26:26,718 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 18:26:26,718 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 18:26:26,718 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-25 18:26:26,718 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 18:26:26,718 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 18:26:26,719 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:26:26,719 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 18:26:26,719 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-25 18:26:26,719 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-25 18:26:26,726 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-25 18:26:26,727 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 18:26:26,727 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 18:26:26,728 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:26:26,728 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:26:26,753 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-25 18:26:26,753 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-11-25 18:26:26,754 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || (((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) [2022-11-25 18:26:26,754 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-25 18:26:26,755 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-25 18:26:26,756 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel))) && (((((((((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) [2022-11-25 18:26:26,756 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || \result <= 1)) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || ((((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2022-11-25 18:26:26,757 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && 0 == tmp)) || ((((((1 <= pumpRunning && 0 == tmp) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((pumpRunning == 0 && 1 <= \result) && tmp == 0) && methaneLevelCritical == tmp) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) [2022-11-25 18:26:26,757 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && waterLevel <= 1) && 0 == tmp)) || ((((((1 <= pumpRunning && 0 == tmp) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-25 18:26:26,757 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-25 18:26:26,757 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) [2022-11-25 18:26:26,758 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-25 18:26:26,758 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) [2022-11-25 18:26:26,758 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((((((pumpRunning == 0 && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) [2022-11-25 18:26:26,759 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-25 18:26:26,784 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 18:26:26,784 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 18:26:26,784 INFO L158 Benchmark]: Toolchain (without parser) took 17936.62ms. Allocated memory was 146.8MB in the beginning and 255.9MB in the end (delta: 109.1MB). Free memory was 103.8MB in the beginning and 174.9MB in the end (delta: -71.1MB). Peak memory consumption was 39.4MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,785 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 109.1MB. Free memory is still 84.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 18:26:26,785 INFO L158 Benchmark]: CACSL2BoogieTranslator took 479.47ms. Allocated memory is still 146.8MB. Free memory was 103.4MB in the beginning and 84.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,785 INFO L158 Benchmark]: Boogie Procedure Inliner took 44.96ms. Allocated memory is still 146.8MB. Free memory was 84.5MB in the beginning and 82.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,786 INFO L158 Benchmark]: Boogie Preprocessor took 70.77ms. Allocated memory is still 146.8MB. Free memory was 82.0MB in the beginning and 119.5MB in the end (delta: -37.5MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,786 INFO L158 Benchmark]: RCFGBuilder took 592.25ms. Allocated memory is still 146.8MB. Free memory was 119.5MB in the beginning and 101.5MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,787 INFO L158 Benchmark]: TraceAbstraction took 16666.20ms. Allocated memory was 146.8MB in the beginning and 255.9MB in the end (delta: 109.1MB). Free memory was 100.8MB in the beginning and 181.2MB in the end (delta: -80.4MB). Peak memory consumption was 135.5MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,787 INFO L158 Benchmark]: Witness Printer took 76.69ms. Allocated memory is still 255.9MB. Free memory was 181.2MB in the beginning and 174.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 18:26:26,789 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 109.1MB. Free memory is still 84.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 479.47ms. Allocated memory is still 146.8MB. Free memory was 103.4MB in the beginning and 84.5MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 44.96ms. Allocated memory is still 146.8MB. Free memory was 84.5MB in the beginning and 82.0MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 70.77ms. Allocated memory is still 146.8MB. Free memory was 82.0MB in the beginning and 119.5MB in the end (delta: -37.5MB). Peak memory consumption was 6.9MB. Max. memory is 16.1GB. * RCFGBuilder took 592.25ms. Allocated memory is still 146.8MB. Free memory was 119.5MB in the beginning and 101.5MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 16666.20ms. Allocated memory was 146.8MB in the beginning and 255.9MB in the end (delta: 109.1MB). Free memory was 100.8MB in the beginning and 181.2MB in the end (delta: -80.4MB). Peak memory consumption was 135.5MB. Max. memory is 16.1GB. * Witness Printer took 76.69ms. Allocated memory is still 255.9MB. Free memory was 181.2MB in the beginning and 174.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 477]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.6s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3471 SdHoareTripleChecker+Valid, 4.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3438 mSDsluCounter, 4460 SdHoareTripleChecker+Invalid, 3.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3366 mSDsCounter, 1554 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5335 IncrementalHoareTripleChecker+Invalid, 6889 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1554 mSolverCounterUnsat, 1094 mSDtfsCounter, 5335 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 536 GetRequests, 340 SyntacticMatches, 7 SemanticMatches, 189 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1840 ImplicationChecksByTransitivity, 1.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=862occurred in iteration=9, InterpolantAutomatonStates: 169, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 166 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 2205 PreInvPairs, 2518 NumberOfFragments, 1942 HoareAnnotationTreeSize, 2205 FomulaSimplifications, 418 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 50 FomulaSimplificationsInter, 15815 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.5s InterpolantComputationTime, 681 NumberOfCodeBlocks, 681 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 773 ConstructedInterpolants, 0 QuantifiedInterpolants, 1466 SizeOfPredicates, 4 NumberOfNonLiveVariables, 348 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 99/126 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 633]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 216]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 557]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 449]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && waterLevel <= 1) && 0 == tmp)) || ((((((1 <= pumpRunning && 0 == tmp) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2))) && (((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 473]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) || ((((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive)) || (((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive)) || ((((((pumpRunning == 0 && 1 == systemActive) && !(methaneLevelCritical == 0)) && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((((((((pumpRunning == 0 && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && \result == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 2)) || (pumpRunning == 0 && waterLevel <= 1)) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 349]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 249]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((1 <= pumpRunning && waterLevel <= 1) && 0 == tmp)) || ((((((1 <= pumpRunning && 0 == tmp) && 1 <= \result) && tmp == 0) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((((((pumpRunning == 0 && 1 <= \result) && tmp == 0) && methaneLevelCritical == tmp) && 1 <= tmp___0) && 1 <= tmp) && \result == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && methaneLevelCritical == tmp)) || !(waterLevel <= 2)) - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 581]: Loop Invariant Derived loop invariant: ((((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (tmp___0 <= 1 && \result <= 1)) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel))) && (((((((((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && waterLevel <= 1) && tmp___0 <= 1) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || \result <= 1)) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || ((((tmp == 0 && pumpRunning == 0) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2))) && (((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 626]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((((((1 <= pumpRunning && tmp == 0) && !(\result == 0)) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 640]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-25 18:26:26,831 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_050ef985-3caf-4cb8-abfc-10dcd3750ab6/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE