./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 14:11:35,295 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 14:11:35,296 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 14:11:35,315 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 14:11:35,316 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 14:11:35,317 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 14:11:35,318 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 14:11:35,320 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 14:11:35,321 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 14:11:35,322 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 14:11:35,323 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 14:11:35,324 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 14:11:35,325 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 14:11:35,326 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 14:11:35,327 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 14:11:35,328 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 14:11:35,329 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 14:11:35,330 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 14:11:35,331 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 14:11:35,333 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 14:11:35,335 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 14:11:35,336 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 14:11:35,337 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 14:11:35,338 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 14:11:35,342 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 14:11:35,342 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 14:11:35,342 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 14:11:35,343 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 14:11:35,344 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 14:11:35,345 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 14:11:35,345 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 14:11:35,346 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 14:11:35,346 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 14:11:35,347 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 14:11:35,348 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 14:11:35,348 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 14:11:35,349 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 14:11:35,349 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 14:11:35,349 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 14:11:35,350 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 14:11:35,350 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 14:11:35,351 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 14:11:35,371 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 14:11:35,371 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 14:11:35,372 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 14:11:35,372 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 14:11:35,372 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 14:11:35,373 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 14:11:35,373 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 14:11:35,373 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 14:11:35,373 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 14:11:35,374 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 14:11:35,374 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 14:11:35,374 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 14:11:35,374 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 14:11:35,374 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 14:11:35,374 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 14:11:35,375 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 14:11:35,376 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 14:11:35,376 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 14:11:35,376 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 14:11:35,377 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 14:11:35,377 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 14:11:35,377 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 14:11:35,377 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 14:11:35,377 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 14:11:35,378 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 14:11:35,378 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 909de5fe3a7d5a638d67615e2b4d48b563eefeab07033d1b2a29843c731be596 [2022-12-13 14:11:35,564 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 14:11:35,583 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 14:11:35,585 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 14:11:35,586 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 14:11:35,587 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 14:11:35,588 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-12-13 14:11:38,056 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 14:11:38,234 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 14:11:38,235 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c [2022-12-13 14:11:38,249 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/data/caaa18f74/3a6420ebabc74d1baf538609061954dd/FLAG926a8cd49 [2022-12-13 14:11:38,625 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/data/caaa18f74/3a6420ebabc74d1baf538609061954dd [2022-12-13 14:11:38,627 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 14:11:38,628 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 14:11:38,628 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 14:11:38,628 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 14:11:38,631 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 14:11:38,632 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,633 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ec73850 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38, skipping insertion in model container [2022-12-13 14:11:38,633 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,639 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 14:11:38,668 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 14:11:38,840 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-12-13 14:11:38,843 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 14:11:38,850 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 14:11:38,895 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/sv-benchmarks/c/product-lines/minepump_spec2_product57.cil.c[19040,19053] [2022-12-13 14:11:38,896 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 14:11:38,908 INFO L208 MainTranslator]: Completed translation [2022-12-13 14:11:38,908 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38 WrapperNode [2022-12-13 14:11:38,908 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 14:11:38,909 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 14:11:38,909 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 14:11:38,909 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 14:11:38,914 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,923 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,941 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 220 [2022-12-13 14:11:38,941 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 14:11:38,942 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 14:11:38,942 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 14:11:38,942 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 14:11:38,949 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,949 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,951 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,951 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,955 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,958 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,959 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,960 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,962 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 14:11:38,963 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 14:11:38,963 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 14:11:38,963 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 14:11:38,964 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (1/1) ... [2022-12-13 14:11:38,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 14:11:38,977 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 14:11:38,988 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 14:11:38,990 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 14:11:39,023 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 14:11:39,023 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 14:11:39,023 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 14:11:39,023 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 14:11:39,023 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 14:11:39,023 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 14:11:39,023 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 14:11:39,024 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 14:11:39,024 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 14:11:39,024 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 14:11:39,024 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 14:11:39,024 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 14:11:39,024 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 14:11:39,024 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 14:11:39,024 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 14:11:39,025 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 14:11:39,025 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 14:11:39,025 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 14:11:39,093 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 14:11:39,095 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 14:11:39,318 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 14:11:39,325 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 14:11:39,325 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 14:11:39,327 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 02:11:39 BoogieIcfgContainer [2022-12-13 14:11:39,327 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 14:11:39,330 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 14:11:39,330 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 14:11:39,333 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 14:11:39,334 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 02:11:38" (1/3) ... [2022-12-13 14:11:39,334 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76f64c52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 02:11:39, skipping insertion in model container [2022-12-13 14:11:39,334 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 02:11:38" (2/3) ... [2022-12-13 14:11:39,335 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@76f64c52 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 02:11:39, skipping insertion in model container [2022-12-13 14:11:39,335 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 02:11:39" (3/3) ... [2022-12-13 14:11:39,336 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product57.cil.c [2022-12-13 14:11:39,356 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 14:11:39,356 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 14:11:39,400 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 14:11:39,406 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7a83f620, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 14:11:39,406 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 14:11:39,410 INFO L276 IsEmpty]: Start isEmpty. Operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-13 14:11:39,418 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 14:11:39,418 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:39,419 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:39,419 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:39,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:39,424 INFO L85 PathProgramCache]: Analyzing trace with hash 1702094398, now seen corresponding path program 1 times [2022-12-13 14:11:39,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:39,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161048872] [2022-12-13 14:11:39,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:39,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:39,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 14:11:39,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 14:11:39,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:39,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161048872] [2022-12-13 14:11:39,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161048872] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:39,595 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:39,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 14:11:39,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096308117] [2022-12-13 14:11:39,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:39,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 14:11:39,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:39,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 14:11:39,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 14:11:39,630 INFO L87 Difference]: Start difference. First operand has 93 states, 72 states have (on average 1.3888888888888888) internal successors, (100), 80 states have internal predecessors, (100), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:39,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:39,659 INFO L93 Difference]: Finished difference Result 177 states and 242 transitions. [2022-12-13 14:11:39,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 14:11:39,660 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 14:11:39,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:39,667 INFO L225 Difference]: With dead ends: 177 [2022-12-13 14:11:39,667 INFO L226 Difference]: Without dead ends: 84 [2022-12-13 14:11:39,671 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 14:11:39,674 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 118 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:39,675 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 14:11:39,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-12-13 14:11:39,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-12-13 14:11:39,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 65 states have (on average 1.323076923076923) internal successors, (86), 72 states have internal predecessors, (86), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-13 14:11:39,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-12-13 14:11:39,708 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 25 [2022-12-13 14:11:39,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:39,709 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-12-13 14:11:39,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:39,709 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-12-13 14:11:39,711 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 14:11:39,711 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:39,711 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:39,712 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 14:11:39,712 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:39,712 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:39,713 INFO L85 PathProgramCache]: Analyzing trace with hash 2038444326, now seen corresponding path program 1 times [2022-12-13 14:11:39,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:39,713 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1264003042] [2022-12-13 14:11:39,713 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:39,713 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:39,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 14:11:39,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,810 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 14:11:39,810 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:39,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1264003042] [2022-12-13 14:11:39,810 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1264003042] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:39,810 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:39,811 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 14:11:39,811 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661023749] [2022-12-13 14:11:39,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:39,812 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 14:11:39,812 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:39,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 14:11:39,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 14:11:39,813 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:39,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:39,831 INFO L93 Difference]: Finished difference Result 133 states and 173 transitions. [2022-12-13 14:11:39,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 14:11:39,831 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 14:11:39,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:39,832 INFO L225 Difference]: With dead ends: 133 [2022-12-13 14:11:39,832 INFO L226 Difference]: Without dead ends: 75 [2022-12-13 14:11:39,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 14:11:39,834 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 12 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:39,834 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 176 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 14:11:39,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-12-13 14:11:39,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-12-13 14:11:39,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3389830508474576) internal successors, (79), 66 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-13 14:11:39,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 97 transitions. [2022-12-13 14:11:39,843 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 97 transitions. Word has length 26 [2022-12-13 14:11:39,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:39,844 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 97 transitions. [2022-12-13 14:11:39,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:39,844 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 97 transitions. [2022-12-13 14:11:39,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-13 14:11:39,844 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:39,844 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:39,845 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 14:11:39,845 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:39,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:39,845 INFO L85 PathProgramCache]: Analyzing trace with hash -1677666248, now seen corresponding path program 1 times [2022-12-13 14:11:39,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:39,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1731015279] [2022-12-13 14:11:39,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:39,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:39,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:39,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:39,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 14:11:39,978 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:39,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1731015279] [2022-12-13 14:11:39,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1731015279] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:39,979 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:39,979 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 14:11:39,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1020651990] [2022-12-13 14:11:39,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:39,980 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 14:11:39,980 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:39,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 14:11:39,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-13 14:11:39,981 INFO L87 Difference]: Start difference. First operand 75 states and 97 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:40,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:40,070 INFO L93 Difference]: Finished difference Result 142 states and 187 transitions. [2022-12-13 14:11:40,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 14:11:40,070 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-12-13 14:11:40,071 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:40,071 INFO L225 Difference]: With dead ends: 142 [2022-12-13 14:11:40,072 INFO L226 Difference]: Without dead ends: 75 [2022-12-13 14:11:40,072 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-13 14:11:40,073 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 123 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 123 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:40,074 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [123 Valid, 206 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 14:11:40,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-12-13 14:11:40,083 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-12-13 14:11:40,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 66 states have internal predecessors, (78), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-13 14:11:40,085 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-12-13 14:11:40,085 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 30 [2022-12-13 14:11:40,085 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:40,085 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-12-13 14:11:40,086 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 14:11:40,086 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-12-13 14:11:40,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-13 14:11:40,087 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:40,087 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:40,087 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 14:11:40,088 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:40,088 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:40,088 INFO L85 PathProgramCache]: Analyzing trace with hash -1006789740, now seen corresponding path program 1 times [2022-12-13 14:11:40,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:40,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [115999783] [2022-12-13 14:11:40,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:40,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:40,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:40,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:40,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-12-13 14:11:40,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 14:11:40,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:40,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [115999783] [2022-12-13 14:11:40,192 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [115999783] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:40,192 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:40,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 14:11:40,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484410077] [2022-12-13 14:11:40,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:40,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 14:11:40,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:40,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 14:11:40,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 14:11:40,194 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 14:11:40,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:40,330 INFO L93 Difference]: Finished difference Result 217 states and 279 transitions. [2022-12-13 14:11:40,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 14:11:40,331 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-12-13 14:11:40,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:40,333 INFO L225 Difference]: With dead ends: 217 [2022-12-13 14:11:40,333 INFO L226 Difference]: Without dead ends: 150 [2022-12-13 14:11:40,334 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-12-13 14:11:40,336 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 179 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:40,337 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 291 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 14:11:40,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-12-13 14:11:40,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 144. [2022-12-13 14:11:40,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 112 states have (on average 1.2857142857142858) internal successors, (144), 120 states have internal predecessors, (144), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-12-13 14:11:40,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 179 transitions. [2022-12-13 14:11:40,350 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 179 transitions. Word has length 40 [2022-12-13 14:11:40,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:40,351 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 179 transitions. [2022-12-13 14:11:40,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 14:11:40,351 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 179 transitions. [2022-12-13 14:11:40,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-13 14:11:40,353 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:40,353 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:40,353 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 14:11:40,353 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:40,354 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:40,354 INFO L85 PathProgramCache]: Analyzing trace with hash -251696612, now seen corresponding path program 1 times [2022-12-13 14:11:40,354 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:40,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [120684265] [2022-12-13 14:11:40,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:40,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:40,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:40,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:40,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-12-13 14:11:40,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 14:11:40,445 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:40,445 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [120684265] [2022-12-13 14:11:40,445 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [120684265] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:40,445 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:40,446 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 14:11:40,446 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449733643] [2022-12-13 14:11:40,446 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:40,446 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 14:11:40,446 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:40,447 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 14:11:40,447 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 14:11:40,447 INFO L87 Difference]: Start difference. First operand 144 states and 179 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 14:11:40,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:40,613 INFO L93 Difference]: Finished difference Result 292 states and 364 transitions. [2022-12-13 14:11:40,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 14:11:40,614 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 46 [2022-12-13 14:11:40,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:40,616 INFO L225 Difference]: With dead ends: 292 [2022-12-13 14:11:40,616 INFO L226 Difference]: Without dead ends: 156 [2022-12-13 14:11:40,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-12-13 14:11:40,617 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 107 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 154 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 154 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:40,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [111 Valid, 410 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 154 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 14:11:40,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-12-13 14:11:40,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 142. [2022-12-13 14:11:40,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 110 states have (on average 1.2545454545454546) internal successors, (138), 118 states have internal predecessors, (138), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-12-13 14:11:40,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 173 transitions. [2022-12-13 14:11:40,638 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 173 transitions. Word has length 46 [2022-12-13 14:11:40,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:40,638 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 173 transitions. [2022-12-13 14:11:40,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 14:11:40,638 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 173 transitions. [2022-12-13 14:11:40,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 14:11:40,641 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:40,641 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:40,641 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 14:11:40,641 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:40,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:40,642 INFO L85 PathProgramCache]: Analyzing trace with hash -1277770087, now seen corresponding path program 1 times [2022-12-13 14:11:40,642 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:40,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139289267] [2022-12-13 14:11:40,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:40,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:40,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:40,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:40,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 14:11:40,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,737 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:40,738 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:40,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139289267] [2022-12-13 14:11:40,738 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [139289267] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:40,738 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:40,738 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 14:11:40,738 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017603356] [2022-12-13 14:11:40,739 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:40,739 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 14:11:40,739 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:40,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 14:11:40,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 14:11:40,740 INFO L87 Difference]: Start difference. First operand 142 states and 173 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 14:11:40,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:40,853 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2022-12-13 14:11:40,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 14:11:40,854 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-12-13 14:11:40,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:40,855 INFO L225 Difference]: With dead ends: 286 [2022-12-13 14:11:40,856 INFO L226 Difference]: Without dead ends: 152 [2022-12-13 14:11:40,856 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 14:11:40,858 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 66 mSDsluCounter, 279 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:40,858 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 364 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 14:11:40,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-12-13 14:11:40,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 145. [2022-12-13 14:11:40,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 113 states have (on average 1.247787610619469) internal successors, (141), 121 states have internal predecessors, (141), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-12-13 14:11:40,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 176 transitions. [2022-12-13 14:11:40,879 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 176 transitions. Word has length 52 [2022-12-13 14:11:40,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:40,879 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 176 transitions. [2022-12-13 14:11:40,879 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 14:11:40,879 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 176 transitions. [2022-12-13 14:11:40,881 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 14:11:40,881 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:40,881 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:40,881 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 14:11:40,881 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:40,882 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:40,882 INFO L85 PathProgramCache]: Analyzing trace with hash 645457947, now seen corresponding path program 1 times [2022-12-13 14:11:40,882 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:40,882 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795904026] [2022-12-13 14:11:40,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:40,882 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:40,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:40,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:40,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 14:11:40,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:40,967 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:40,967 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:40,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795904026] [2022-12-13 14:11:40,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795904026] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:40,968 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:40,968 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 14:11:40,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338206982] [2022-12-13 14:11:40,968 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:40,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 14:11:40,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:40,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 14:11:40,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 14:11:40,969 INFO L87 Difference]: Start difference. First operand 145 states and 176 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 14:11:41,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:41,057 INFO L93 Difference]: Finished difference Result 292 states and 361 transitions. [2022-12-13 14:11:41,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 14:11:41,057 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-12-13 14:11:41,058 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:41,058 INFO L225 Difference]: With dead ends: 292 [2022-12-13 14:11:41,059 INFO L226 Difference]: Without dead ends: 155 [2022-12-13 14:11:41,059 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 14:11:41,060 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 70 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 105 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:41,060 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 284 Invalid, 105 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 14:11:41,061 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-12-13 14:11:41,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 147. [2022-12-13 14:11:41,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 147 states, 115 states have (on average 1.2434782608695651) internal successors, (143), 123 states have internal predecessors, (143), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-12-13 14:11:41,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 147 states to 147 states and 178 transitions. [2022-12-13 14:11:41,076 INFO L78 Accepts]: Start accepts. Automaton has 147 states and 178 transitions. Word has length 52 [2022-12-13 14:11:41,077 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:41,077 INFO L495 AbstractCegarLoop]: Abstraction has 147 states and 178 transitions. [2022-12-13 14:11:41,077 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 14:11:41,077 INFO L276 IsEmpty]: Start isEmpty. Operand 147 states and 178 transitions. [2022-12-13 14:11:41,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 14:11:41,078 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:41,078 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:41,078 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 14:11:41,079 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:41,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:41,079 INFO L85 PathProgramCache]: Analyzing trace with hash 2031661341, now seen corresponding path program 1 times [2022-12-13 14:11:41,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:41,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674324330] [2022-12-13 14:11:41,080 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:41,080 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:41,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:41,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:41,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 14:11:41,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,148 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:41,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:41,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674324330] [2022-12-13 14:11:41,148 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674324330] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:41,148 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:41,148 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 14:11:41,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [70000466] [2022-12-13 14:11:41,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:41,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 14:11:41,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:41,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 14:11:41,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 14:11:41,150 INFO L87 Difference]: Start difference. First operand 147 states and 178 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 14:11:41,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:41,316 INFO L93 Difference]: Finished difference Result 400 states and 509 transitions. [2022-12-13 14:11:41,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 14:11:41,317 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 52 [2022-12-13 14:11:41,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:41,319 INFO L225 Difference]: With dead ends: 400 [2022-12-13 14:11:41,319 INFO L226 Difference]: Without dead ends: 261 [2022-12-13 14:11:41,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 14:11:41,321 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 189 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:41,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 304 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 14:11:41,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 261 states. [2022-12-13 14:11:41,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 261 to 259. [2022-12-13 14:11:41,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 199 states have (on average 1.2311557788944723) internal successors, (245), 211 states have internal predecessors, (245), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (45), 30 states have call predecessors, (45), 30 states have call successors, (45) [2022-12-13 14:11:41,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 320 transitions. [2022-12-13 14:11:41,349 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 320 transitions. Word has length 52 [2022-12-13 14:11:41,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:41,349 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 320 transitions. [2022-12-13 14:11:41,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 14:11:41,349 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 320 transitions. [2022-12-13 14:11:41,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-13 14:11:41,351 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:41,351 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:41,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 14:11:41,351 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:41,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:41,351 INFO L85 PathProgramCache]: Analyzing trace with hash 402144439, now seen corresponding path program 1 times [2022-12-13 14:11:41,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:41,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1814915149] [2022-12-13 14:11:41,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:41,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:41,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 14:11:41,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 14:11:41,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:41,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-12-13 14:11:41,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:41,519 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:41,519 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:41,519 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1814915149] [2022-12-13 14:11:41,519 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1814915149] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:41,520 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:41,520 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-12-13 14:11:41,520 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [651495788] [2022-12-13 14:11:41,520 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:41,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-13 14:11:41,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:41,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-13 14:11:41,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-12-13 14:11:41,521 INFO L87 Difference]: Start difference. First operand 259 states and 320 transitions. Second operand has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 14:11:42,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:42,016 INFO L93 Difference]: Finished difference Result 807 states and 1033 transitions. [2022-12-13 14:11:42,016 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-13 14:11:42,016 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-12-13 14:11:42,017 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:42,020 INFO L225 Difference]: With dead ends: 807 [2022-12-13 14:11:42,020 INFO L226 Difference]: Without dead ends: 556 [2022-12-13 14:11:42,021 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=210, Invalid=720, Unknown=0, NotChecked=0, Total=930 [2022-12-13 14:11:42,021 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 334 mSDsluCounter, 482 mSDsCounter, 0 mSdLazyCounter, 533 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 554 SdHoareTripleChecker+Invalid, 632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 533 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:42,022 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 554 Invalid, 632 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 533 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-13 14:11:42,022 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2022-12-13 14:11:42,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 531. [2022-12-13 14:11:42,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 531 states, 405 states have (on average 1.2) internal successors, (486), 433 states have internal predecessors, (486), 64 states have call successors, (64), 54 states have call predecessors, (64), 61 states have return successors, (103), 63 states have call predecessors, (103), 64 states have call successors, (103) [2022-12-13 14:11:42,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 531 states to 531 states and 653 transitions. [2022-12-13 14:11:42,063 INFO L78 Accepts]: Start accepts. Automaton has 531 states and 653 transitions. Word has length 56 [2022-12-13 14:11:42,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:42,063 INFO L495 AbstractCegarLoop]: Abstraction has 531 states and 653 transitions. [2022-12-13 14:11:42,064 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.090909090909091) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 14:11:42,064 INFO L276 IsEmpty]: Start isEmpty. Operand 531 states and 653 transitions. [2022-12-13 14:11:42,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-12-13 14:11:42,065 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:42,065 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:42,065 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 14:11:42,066 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:42,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:42,066 INFO L85 PathProgramCache]: Analyzing trace with hash -738171045, now seen corresponding path program 1 times [2022-12-13 14:11:42,066 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:42,066 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [249852682] [2022-12-13 14:11:42,066 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:42,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:42,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 14:11:42,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:42,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 14:11:42,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:42,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 14:11:42,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-12-13 14:11:42,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-12-13 14:11:42,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:42,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-12-13 14:11:42,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,176 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 14:11:42,176 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:42,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [249852682] [2022-12-13 14:11:42,177 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [249852682] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 14:11:42,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [897763565] [2022-12-13 14:11:42,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:42,177 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:42,177 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 14:11:42,178 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 14:11:42,179 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 14:11:42,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,250 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-13 14:11:42,258 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 14:11:42,337 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:42,337 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 14:11:42,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [897763565] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:42,338 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 14:11:42,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-12-13 14:11:42,338 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112583036] [2022-12-13 14:11:42,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:42,338 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 14:11:42,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:42,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 14:11:42,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 14:11:42,340 INFO L87 Difference]: Start difference. First operand 531 states and 653 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-13 14:11:42,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:42,417 INFO L93 Difference]: Finished difference Result 827 states and 1035 transitions. [2022-12-13 14:11:42,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 14:11:42,418 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-12-13 14:11:42,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:42,424 INFO L225 Difference]: With dead ends: 827 [2022-12-13 14:11:42,424 INFO L226 Difference]: Without dead ends: 825 [2022-12-13 14:11:42,425 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 14:11:42,426 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 45 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:42,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 189 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 14:11:42,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 825 states. [2022-12-13 14:11:42,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 825 to 619. [2022-12-13 14:11:42,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 619 states, 472 states have (on average 1.2161016949152543) internal successors, (574), 506 states have internal predecessors, (574), 74 states have call successors, (74), 62 states have call predecessors, (74), 72 states have return successors, (131), 73 states have call predecessors, (131), 74 states have call successors, (131) [2022-12-13 14:11:42,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 619 states to 619 states and 779 transitions. [2022-12-13 14:11:42,491 INFO L78 Accepts]: Start accepts. Automaton has 619 states and 779 transitions. Word has length 98 [2022-12-13 14:11:42,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:42,492 INFO L495 AbstractCegarLoop]: Abstraction has 619 states and 779 transitions. [2022-12-13 14:11:42,492 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-13 14:11:42,492 INFO L276 IsEmpty]: Start isEmpty. Operand 619 states and 779 transitions. [2022-12-13 14:11:42,497 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-12-13 14:11:42,497 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:42,497 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:42,503 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 14:11:42,698 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:42,698 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:42,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:42,699 INFO L85 PathProgramCache]: Analyzing trace with hash 602062054, now seen corresponding path program 1 times [2022-12-13 14:11:42,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:42,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [295729032] [2022-12-13 14:11:42,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:42,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:42,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 14:11:42,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:42,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 14:11:42,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:42,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 14:11:42,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-12-13 14:11:42,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-12-13 14:11:42,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 14:11:42,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:42,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:42,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-12-13 14:11:42,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:42,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-12-13 14:11:42,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:42,938 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 44 proven. 24 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-13 14:11:42,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:42,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [295729032] [2022-12-13 14:11:42,939 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [295729032] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 14:11:42,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1136750785] [2022-12-13 14:11:42,939 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:42,939 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:42,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 14:11:42,940 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 14:11:42,941 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 14:11:43,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:43,033 INFO L263 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-13 14:11:43,037 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 14:11:43,148 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 66 proven. 27 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-13 14:11:43,148 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 14:11:43,355 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 46 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-13 14:11:43,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1136750785] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 14:11:43,355 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 14:11:43,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-12-13 14:11:43,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838000169] [2022-12-13 14:11:43,356 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 14:11:43,356 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-13 14:11:43,356 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:43,357 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-13 14:11:43,357 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-12-13 14:11:43,357 INFO L87 Difference]: Start difference. First operand 619 states and 779 transitions. Second operand has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-12-13 14:11:43,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:43,963 INFO L93 Difference]: Finished difference Result 1475 states and 1933 transitions. [2022-12-13 14:11:43,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-13 14:11:43,964 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 139 [2022-12-13 14:11:43,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:43,969 INFO L225 Difference]: With dead ends: 1475 [2022-12-13 14:11:43,969 INFO L226 Difference]: Without dead ends: 958 [2022-12-13 14:11:43,972 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 334 GetRequests, 302 SyntacticMatches, 6 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 149 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=252, Invalid=504, Unknown=0, NotChecked=0, Total=756 [2022-12-13 14:11:43,973 INFO L413 NwaCegarLoop]: 45 mSDtfsCounter, 539 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 506 mSolverCounterSat, 188 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 540 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 694 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 188 IncrementalHoareTripleChecker+Valid, 506 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:43,973 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [540 Valid, 200 Invalid, 694 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [188 Valid, 506 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-13 14:11:43,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 958 states. [2022-12-13 14:11:44,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 958 to 882. [2022-12-13 14:11:44,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 882 states, 670 states have (on average 1.2208955223880598) internal successors, (818), 717 states have internal predecessors, (818), 106 states have call successors, (106), 92 states have call predecessors, (106), 105 states have return successors, (193), 100 states have call predecessors, (193), 106 states have call successors, (193) [2022-12-13 14:11:44,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 882 states to 882 states and 1117 transitions. [2022-12-13 14:11:44,051 INFO L78 Accepts]: Start accepts. Automaton has 882 states and 1117 transitions. Word has length 139 [2022-12-13 14:11:44,052 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:44,052 INFO L495 AbstractCegarLoop]: Abstraction has 882 states and 1117 transitions. [2022-12-13 14:11:44,052 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-12-13 14:11:44,052 INFO L276 IsEmpty]: Start isEmpty. Operand 882 states and 1117 transitions. [2022-12-13 14:11:44,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-12-13 14:11:44,054 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:44,054 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:44,059 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 14:11:44,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:44,255 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:44,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:44,255 INFO L85 PathProgramCache]: Analyzing trace with hash -784141340, now seen corresponding path program 1 times [2022-12-13 14:11:44,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:44,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884168051] [2022-12-13 14:11:44,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:44,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:44,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 14:11:44,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:44,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 14:11:44,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:44,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 14:11:44,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-12-13 14:11:44,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,431 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-12-13 14:11:44,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 14:11:44,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:44,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:44,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-12-13 14:11:44,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:44,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-12-13 14:11:44,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,540 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-13 14:11:44,540 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:44,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884168051] [2022-12-13 14:11:44,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [884168051] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 14:11:44,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1535264854] [2022-12-13 14:11:44,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:44,541 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:44,541 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 14:11:44,542 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 14:11:44,543 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-13 14:11:44,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:44,629 INFO L263 TraceCheckSpWp]: Trace formula consists of 450 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-13 14:11:44,632 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 14:11:44,815 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 14:11:44,816 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 14:11:45,017 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-13 14:11:45,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1535264854] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 14:11:45,017 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 14:11:45,017 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2022-12-13 14:11:45,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920049767] [2022-12-13 14:11:45,018 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 14:11:45,018 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-13 14:11:45,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:45,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-13 14:11:45,019 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2022-12-13 14:11:45,019 INFO L87 Difference]: Start difference. First operand 882 states and 1117 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-12-13 14:11:46,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:46,481 INFO L93 Difference]: Finished difference Result 2395 states and 3183 transitions. [2022-12-13 14:11:46,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-13 14:11:46,482 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2022-12-13 14:11:46,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:46,487 INFO L225 Difference]: With dead ends: 2395 [2022-12-13 14:11:46,487 INFO L226 Difference]: Without dead ends: 1612 [2022-12-13 14:11:46,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 344 GetRequests, 296 SyntacticMatches, 5 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 385 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=512, Invalid=1468, Unknown=0, NotChecked=0, Total=1980 [2022-12-13 14:11:46,490 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 768 mSDsluCounter, 399 mSDsCounter, 0 mSdLazyCounter, 1520 mSolverCounterSat, 348 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 770 SdHoareTripleChecker+Valid, 465 SdHoareTripleChecker+Invalid, 1868 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 348 IncrementalHoareTripleChecker+Valid, 1520 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:46,490 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [770 Valid, 465 Invalid, 1868 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [348 Valid, 1520 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-13 14:11:46,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1612 states. [2022-12-13 14:11:46,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1612 to 1479. [2022-12-13 14:11:46,572 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1479 states, 1115 states have (on average 1.2044843049327354) internal successors, (1343), 1185 states have internal predecessors, (1343), 182 states have call successors, (182), 163 states have call predecessors, (182), 181 states have return successors, (327), 168 states have call predecessors, (327), 182 states have call successors, (327) [2022-12-13 14:11:46,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1479 states to 1479 states and 1852 transitions. [2022-12-13 14:11:46,577 INFO L78 Accepts]: Start accepts. Automaton has 1479 states and 1852 transitions. Word has length 139 [2022-12-13 14:11:46,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:46,577 INFO L495 AbstractCegarLoop]: Abstraction has 1479 states and 1852 transitions. [2022-12-13 14:11:46,578 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-12-13 14:11:46,578 INFO L276 IsEmpty]: Start isEmpty. Operand 1479 states and 1852 transitions. [2022-12-13 14:11:46,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-12-13 14:11:46,580 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 14:11:46,580 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:46,586 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-13 14:11:46,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 14:11:46,781 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 14:11:46,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 14:11:46,781 INFO L85 PathProgramCache]: Analyzing trace with hash 1824646118, now seen corresponding path program 1 times [2022-12-13 14:11:46,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 14:11:46,781 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585917961] [2022-12-13 14:11:46,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 14:11:46,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 14:11:46,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 14:11:46,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:46,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 14:11:46,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 14:11:46,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 14:11:46,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-12-13 14:11:46,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-12-13 14:11:46,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 14:11:46,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:46,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 14:11:46,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-12-13 14:11:46,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 14:11:46,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-12-13 14:11:46,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 14:11:46,952 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-12-13 14:11:46,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 14:11:46,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585917961] [2022-12-13 14:11:46,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [585917961] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 14:11:46,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 14:11:46,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-12-13 14:11:46,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468397931] [2022-12-13 14:11:46,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 14:11:46,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-13 14:11:46,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 14:11:46,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-13 14:11:46,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-12-13 14:11:46,954 INFO L87 Difference]: Start difference. First operand 1479 states and 1852 transitions. Second operand has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-13 14:11:47,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 14:11:47,231 INFO L93 Difference]: Finished difference Result 1842 states and 2281 transitions. [2022-12-13 14:11:47,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 14:11:47,231 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 139 [2022-12-13 14:11:47,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 14:11:47,232 INFO L225 Difference]: With dead ends: 1842 [2022-12-13 14:11:47,232 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 14:11:47,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=200, Unknown=0, NotChecked=0, Total=272 [2022-12-13 14:11:47,237 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 248 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 419 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 249 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 488 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 419 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 14:11:47,237 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [249 Valid, 161 Invalid, 488 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 419 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 14:11:47,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 14:11:47,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 14:11:47,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 14:11:47,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 14:11:47,238 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 139 [2022-12-13 14:11:47,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 14:11:47,238 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 14:11:47,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 9.666666666666666) internal successors, (87), 5 states have internal predecessors, (87), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-13 14:11:47,239 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 14:11:47,239 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 14:11:47,241 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 14:11:47,242 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-12-13 14:11:47,244 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 14:11:50,504 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 370 376) no Hoare annotation was computed. [2022-12-13 14:11:50,504 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 370 376) the Hoare annotation is: true [2022-12-13 14:11:50,505 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-12-13 14:11:50,505 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 ~waterLevel~0)) .cse1 .cse2))) [2022-12-13 14:11:50,505 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-12-13 14:11:50,505 INFO L899 garLoopResultBuilder]: For program point L547-2(lines 547 551) no Hoare annotation was computed. [2022-12-13 14:11:50,505 INFO L899 garLoopResultBuilder]: For program point L993(line 993) no Hoare annotation was computed. [2022-12-13 14:11:50,505 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 189 197) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= ~methAndRunningLastTime~0 0) .cse4) .cse5) (or .cse6 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3 .cse6 .cse4) .cse5))) [2022-12-13 14:11:50,506 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 346 369) no Hoare annotation was computed. [2022-12-13 14:11:50,506 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-12-13 14:11:50,506 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2 .cse3 (not (<= 1 |old(~waterLevel~0)|))) (or .cse3 (not (= ~methaneLevelCritical~0 0)) (and .cse0 .cse5 .cse1) .cse4))) [2022-12-13 14:11:50,506 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 349 368) no Hoare annotation was computed. [2022-12-13 14:11:50,506 INFO L895 garLoopResultBuilder]: At program point L317(line 317) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse14 (= 1 ~systemActive~0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (and .cse2 (<= 2 ~waterLevel~0) .cse14 .cse13)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse14)) (.cse5 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not .cse2) (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11) (or .cse0 .cse12 .cse1 (and .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse11) (or .cse0 .cse4 .cse12 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (and .cse5 .cse13 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))))) [2022-12-13 14:11:50,506 INFO L899 garLoopResultBuilder]: For program point L412(lines 412 420) no Hoare annotation was computed. [2022-12-13 14:11:50,507 INFO L899 garLoopResultBuilder]: For program point L317-1(line 317) no Hoare annotation was computed. [2022-12-13 14:11:50,507 INFO L899 garLoopResultBuilder]: For program point L408(lines 408 425) no Hoare annotation was computed. [2022-12-13 14:11:50,507 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 989 996) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 .cse2))) [2022-12-13 14:11:50,507 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 346 369) the Hoare annotation is: (let ((.cse4 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or (and (= ~pumpRunning~0 0) .cse4 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1)))) [2022-12-13 14:11:50,507 INFO L899 garLoopResultBuilder]: For program point L323(lines 323 333) no Hoare annotation was computed. [2022-12-13 14:11:50,507 INFO L895 garLoopResultBuilder]: At program point L418(line 418) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 .cse2))) [2022-12-13 14:11:50,507 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 455 462) the Hoare annotation is: (let ((.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse6 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse8 (let ((.cse11 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse11) (and (not .cse11) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9) (or .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse10 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) .cse9) (or .cse10 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|))))) [2022-12-13 14:11:50,507 INFO L899 garLoopResultBuilder]: For program point L319(lines 319 336) no Hoare annotation was computed. [2022-12-13 14:11:50,508 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 538 556) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse2 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse3 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse4 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse5 (let ((.cse10 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse10) (and (not .cse10) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= 1 ~systemActive~0)))) (and (or (and .cse0 .cse1 (= ~methAndRunningLastTime~0 0) .cse2 .cse3 .cse4 .cse5) .cse6 .cse7 .cse8) (or (and .cse0 .cse1 .cse9 .cse2 .cse3 .cse4 .cse5) .cse7 (not (= ~methaneLevelCritical~0 0)) .cse8) (or .cse9 .cse6 .cse7 (not (<= 1 |old(~waterLevel~0)|))))) [2022-12-13 14:11:50,508 INFO L895 garLoopResultBuilder]: At program point L319-1(lines 311 339) the Hoare annotation is: (let ((.cse5 (= ~methAndRunningLastTime~0 0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse8 (= 1 ~systemActive~0)) (.cse18 (= ~methaneLevelCritical~0 0))) (let ((.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse11 (let ((.cse19 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse19) (and (not .cse19) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse15 (not .cse18)) (.cse14 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse8)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~pumpRunning~0 0)) (.cse13 (and .cse5 .cse18 (<= 2 ~waterLevel~0) .cse8 .cse17 .cse16))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse4 .cse8) .cse13 .cse14) (or .cse3 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse15 .cse16) (or .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse16) .cse15 .cse13 .cse14) (or .cse3 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (and .cse12 .cse4 .cse5 .cse8 .cse17) .cse13)))) [2022-12-13 14:11:50,508 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 346 369) no Hoare annotation was computed. [2022-12-13 14:11:50,508 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 474 482) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse9 (= 1 ~systemActive~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse3 .cse9 (= |old(~waterLevel~0)| ~waterLevel~0) .cse7)) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse9)) (.cse8 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse4 .cse5) (or .cse6 .cse0 .cse1 .cse4 .cse5) (or .cse6 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3 .cse7 (= ~waterLevel~0 1))) (or .cse1 .cse8 .cse5) (or .cse6 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse8)))) [2022-12-13 14:11:50,508 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 993) no Hoare annotation was computed. [2022-12-13 14:11:50,508 INFO L895 garLoopResultBuilder]: At program point L423(line 423) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (and .cse4 .cse5 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2 .cse3)))) [2022-12-13 14:11:50,508 INFO L895 garLoopResultBuilder]: At program point L423-1(lines 404 428) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 0)) (.cse14 (= 1 ~systemActive~0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse7 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (.cse10 (let ((.cse15 (= ~waterLevel~0 0))) (or (and (= |timeShift_isLowWaterLevel_~tmp~6#1| 1) .cse15) (and (not .cse15) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))))) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (and .cse2 (<= 2 ~waterLevel~0) .cse14 .cse13)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse14)) (.cse5 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not .cse2) (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) .cse11) (or .cse0 .cse12 .cse1 (and .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse11) (or .cse0 .cse4 .cse12 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (and .cse5 .cse13 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))))) [2022-12-13 14:11:50,508 INFO L899 garLoopResultBuilder]: For program point L357-1(lines 357 363) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 551) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 201 230) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L222(line 222) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 219) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point L215-1(lines 215 219) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L212(line 212) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point L211-2(lines 211 225) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point L207(line 207) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point L207-1(line 207) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 201 230) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point L226(lines 201 230) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 134 142) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 265 275) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 14:11:50,509 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 276 298) the Hoare annotation is: true [2022-12-13 14:11:50,509 INFO L895 garLoopResultBuilder]: At program point L614(lines 567 615) the Hoare annotation is: false [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L569(lines 568 613) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L598(lines 598 609) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L895 garLoopResultBuilder]: At program point L590(line 590) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2022-12-13 14:11:50,510 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 256 262) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 14:11:50,510 INFO L895 garLoopResultBuilder]: At program point L611(lines 568 613) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 584) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L578-1(lines 578 584) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 574) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L286(lines 286 293) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 303 310) the Hoare annotation is: (and (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0) (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L604(lines 604 608) no Hoare annotation was computed. [2022-12-13 14:11:50,510 INFO L899 garLoopResultBuilder]: For program point L286-2(lines 286 293) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point L604-2(lines 598 609) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse3 .cse4 .cse5 (= ~waterLevel~0 1)))) [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point L588(lines 588 594) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point L588-1(lines 588 594) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L902 garLoopResultBuilder]: At program point L617(lines 558 621) the Hoare annotation is: true [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_main_~tmp~0#1| ~systemActive~0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse0 (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 (<= 1 ~waterLevel~0)))) [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point L382(lines 382 399) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point L397(line 397) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point L397-1(lines 378 402) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 378 402) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 175 188) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)))) [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 519 537) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)))) [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 378 402) no Hoare annotation was computed. [2022-12-13 14:11:50,511 INFO L895 garLoopResultBuilder]: At program point L445-2(lines 438 454) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) .cse0) (and (= ~pumpRunning~0 0) .cse0 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0) (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|)))) [2022-12-13 14:11:50,512 INFO L895 garLoopResultBuilder]: At program point L468(line 468) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L468-1(line 468) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L528(lines 528 532) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L528-2(lines 528 532) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 463 473) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)))) [2022-12-13 14:11:50,512 INFO L895 garLoopResultBuilder]: At program point L392(line 392) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))) [2022-12-13 14:11:50,512 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 429 436) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0))) [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L386(lines 386 394) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-12-13 14:11:50,512 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse2))) [2022-12-13 14:11:50,514 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 14:11:50,516 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 14:11:50,542 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 02:11:50 BoogieIcfgContainer [2022-12-13 14:11:50,542 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 14:11:50,543 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 14:11:50,543 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 14:11:50,543 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 14:11:50,543 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 02:11:39" (3/4) ... [2022-12-13 14:11:50,546 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 14:11:50,552 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 14:11:50,552 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 14:11:50,552 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 14:11:50,553 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 14:11:50,553 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 14:11:50,553 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 14:11:50,553 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 14:11:50,558 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-12-13 14:11:50,559 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 14:11:50,559 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 14:11:50,559 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 14:11:50,560 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 14:11:50,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-12-13 14:11:50,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-12-13 14:11:50,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-12-13 14:11:50,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) [2022-12-13 14:11:50,583 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || ((((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical)) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) [2022-12-13 14:11:50,584 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel) [2022-12-13 14:11:50,585 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-12-13 14:11:50,599 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 14:11:50,599 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 14:11:50,600 INFO L158 Benchmark]: Toolchain (without parser) took 11972.23ms. Allocated memory was 123.7MB in the beginning and 218.1MB in the end (delta: 94.4MB). Free memory was 87.2MB in the beginning and 154.6MB in the end (delta: -67.4MB). Peak memory consumption was 30.1MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,600 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 123.7MB. Free memory is still 74.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 14:11:50,600 INFO L158 Benchmark]: CACSL2BoogieTranslator took 280.21ms. Allocated memory is still 123.7MB. Free memory was 86.8MB in the beginning and 68.3MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,600 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.21ms. Allocated memory is still 123.7MB. Free memory was 67.9MB in the beginning and 65.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,600 INFO L158 Benchmark]: Boogie Preprocessor took 20.54ms. Allocated memory is still 123.7MB. Free memory was 65.8MB in the beginning and 64.3MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 14:11:50,601 INFO L158 Benchmark]: RCFGBuilder took 364.81ms. Allocated memory was 123.7MB in the beginning and 148.9MB in the end (delta: 25.2MB). Free memory was 64.3MB in the beginning and 117.1MB in the end (delta: -52.9MB). Peak memory consumption was 24.5MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,601 INFO L158 Benchmark]: TraceAbstraction took 11212.03ms. Allocated memory was 148.9MB in the beginning and 218.1MB in the end (delta: 69.2MB). Free memory was 116.4MB in the beginning and 160.9MB in the end (delta: -44.5MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,601 INFO L158 Benchmark]: Witness Printer took 56.76ms. Allocated memory is still 218.1MB. Free memory was 160.9MB in the beginning and 154.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 14:11:50,602 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 123.7MB. Free memory is still 74.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 280.21ms. Allocated memory is still 123.7MB. Free memory was 86.8MB in the beginning and 68.3MB in the end (delta: 18.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.21ms. Allocated memory is still 123.7MB. Free memory was 67.9MB in the beginning and 65.8MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 20.54ms. Allocated memory is still 123.7MB. Free memory was 65.8MB in the beginning and 64.3MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 364.81ms. Allocated memory was 123.7MB in the beginning and 148.9MB in the end (delta: 25.2MB). Free memory was 64.3MB in the beginning and 117.1MB in the end (delta: -52.9MB). Peak memory consumption was 24.5MB. Max. memory is 16.1GB. * TraceAbstraction took 11212.03ms. Allocated memory was 148.9MB in the beginning and 218.1MB in the end (delta: 69.2MB). Free memory was 116.4MB in the beginning and 160.9MB in the end (delta: -44.5MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. * Witness Printer took 56.76ms. Allocated memory is still 218.1MB. Free memory was 160.9MB in the beginning and 154.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 993]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 93 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.1s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2713 SdHoareTripleChecker+Valid, 2.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2680 mSDsluCounter, 3722 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2576 mSDsCounter, 881 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3642 IncrementalHoareTripleChecker+Invalid, 4523 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 881 mSolverCounterUnsat, 1146 mSDtfsCounter, 3642 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 978 GetRequests, 808 SyntacticMatches, 11 SemanticMatches, 159 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 772 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1479occurred in iteration=12, InterpolantAutomatonStates: 140, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 477 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2035 PreInvPairs, 2239 NumberOfFragments, 1981 HoareAnnotationTreeSize, 2035 FomulaSimplifications, 3670 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 16656 FormulaSimplificationTreeSizeReductionInter, 2.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1270 NumberOfCodeBlocks, 1270 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1530 ConstructedInterpolants, 0 QuantifiedInterpolants, 3214 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1241 ConjunctsInSsa, 25 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 643/758 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 256]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 303]: Loop Invariant Derived loop invariant: (((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 567]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((((((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 311]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 == systemActive)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || tmp == 0)) && ((((!(1 == systemActive) || ((((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= tmp) && 1 <= \result) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0))) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) && tmp == 0)) - InvariantResult [Line: 474]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && tmp == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 568]: Loop Invariant Derived loop invariant: ((((((tmp == systemActive && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((tmp == systemActive && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && 2 <= waterLevel) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && !(\old(pumpRunning) == 0)) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 519]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 989]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || !(2 <= \old(waterLevel)))) && ((((((((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical)) - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) && ((tmp == 1 && waterLevel == 0) || (!(waterLevel == 0) && tmp == 0)))) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-13 14:11:50,621 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_7f6af16a-9604-462e-8a86-7de7c2c92cf5/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE