./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 13:53:53,907 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 13:53:53,909 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 13:53:53,924 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 13:53:53,924 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 13:53:53,925 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 13:53:53,926 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 13:53:53,927 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 13:53:53,928 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 13:53:53,929 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 13:53:53,929 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 13:53:53,930 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 13:53:53,930 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 13:53:53,931 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 13:53:53,932 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 13:53:53,933 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 13:53:53,933 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 13:53:53,934 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 13:53:53,935 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 13:53:53,936 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 13:53:53,937 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 13:53:53,938 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 13:53:53,939 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 13:53:53,940 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 13:53:53,942 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 13:53:53,942 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 13:53:53,942 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 13:53:53,943 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 13:53:53,943 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 13:53:53,944 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 13:53:53,944 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 13:53:53,945 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 13:53:53,945 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 13:53:53,946 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 13:53:53,946 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 13:53:53,946 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 13:53:53,947 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 13:53:53,947 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 13:53:53,947 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 13:53:53,948 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 13:53:53,948 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 13:53:53,949 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 13:53:53,964 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 13:53:53,964 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 13:53:53,964 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 13:53:53,964 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 13:53:53,965 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 13:53:53,965 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 13:53:53,966 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 13:53:53,966 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 13:53:53,966 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 13:53:53,966 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 13:53:53,966 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 13:53:53,966 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 13:53:53,967 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 13:53:53,968 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 13:53:53,968 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 13:53:53,968 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 13:53:53,969 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 [2022-12-13 13:53:54,142 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 13:53:54,159 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 13:53:54,161 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 13:53:54,162 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 13:53:54,162 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 13:53:54,163 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-12-13 13:53:56,815 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 13:53:57,047 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 13:53:57,047 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-12-13 13:53:57,058 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/data/bc16d210e/c46ebb524b354c4cb4c3dcd246d4161a/FLAG0aae96f90 [2022-12-13 13:53:57,071 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/data/bc16d210e/c46ebb524b354c4cb4c3dcd246d4161a [2022-12-13 13:53:57,074 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 13:53:57,075 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 13:53:57,076 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 13:53:57,076 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 13:53:57,080 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 13:53:57,080 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,081 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4c7ad843 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57, skipping insertion in model container [2022-12-13 13:53:57,081 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,088 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 13:53:57,121 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 13:53:57,295 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-12-13 13:53:57,298 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 13:53:57,306 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 13:53:57,353 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-12-13 13:53:57,353 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 13:53:57,365 INFO L208 MainTranslator]: Completed translation [2022-12-13 13:53:57,366 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57 WrapperNode [2022-12-13 13:53:57,366 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 13:53:57,367 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 13:53:57,367 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 13:53:57,367 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 13:53:57,372 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,381 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,398 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 223 [2022-12-13 13:53:57,398 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 13:53:57,399 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 13:53:57,399 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 13:53:57,399 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 13:53:57,406 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,406 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,408 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,408 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,412 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,416 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,417 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,418 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,419 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 13:53:57,420 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 13:53:57,420 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 13:53:57,420 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 13:53:57,421 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (1/1) ... [2022-12-13 13:53:57,426 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 13:53:57,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:53:57,444 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 13:53:57,446 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 13:53:57,472 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 13:53:57,473 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 13:53:57,473 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 13:53:57,473 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 13:53:57,473 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 13:53:57,473 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 13:53:57,473 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 13:53:57,473 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 13:53:57,473 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 13:53:57,473 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 13:53:57,474 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 13:53:57,474 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 13:53:57,474 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 13:53:57,474 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 13:53:57,474 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 13:53:57,474 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 13:53:57,474 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 13:53:57,474 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 13:53:57,531 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 13:53:57,532 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 13:53:57,740 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 13:53:57,746 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 13:53:57,746 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 13:53:57,747 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 01:53:57 BoogieIcfgContainer [2022-12-13 13:53:57,747 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 13:53:57,749 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 13:53:57,749 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 13:53:57,752 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 13:53:57,752 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 01:53:57" (1/3) ... [2022-12-13 13:53:57,752 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2099c33b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 01:53:57, skipping insertion in model container [2022-12-13 13:53:57,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 01:53:57" (2/3) ... [2022-12-13 13:53:57,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2099c33b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 01:53:57, skipping insertion in model container [2022-12-13 13:53:57,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 01:53:57" (3/3) ... [2022-12-13 13:53:57,754 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product58.cil.c [2022-12-13 13:53:57,768 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 13:53:57,768 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 13:53:57,805 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 13:53:57,810 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@536bc5d1, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 13:53:57,810 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 13:53:57,813 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-12-13 13:53:57,820 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 13:53:57,820 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:57,821 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:57,821 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:57,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:57,825 INFO L85 PathProgramCache]: Analyzing trace with hash 1936540556, now seen corresponding path program 1 times [2022-12-13 13:53:57,832 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:57,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735270725] [2022-12-13 13:53:57,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:57,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:57,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:57,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 13:53:57,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:57,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:57,958 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:57,958 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [735270725] [2022-12-13 13:53:57,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [735270725] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:57,959 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:57,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 13:53:57,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420005445] [2022-12-13 13:53:57,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:57,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 13:53:57,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:57,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 13:53:57,985 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 13:53:57,986 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,012 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-12-13 13:53:58,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 13:53:58,013 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 13:53:58,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,020 INFO L225 Difference]: With dead ends: 179 [2022-12-13 13:53:58,020 INFO L226 Difference]: Without dead ends: 85 [2022-12-13 13:53:58,023 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 13:53:58,025 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 13:53:58,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-12-13 13:53:58,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-12-13 13:53:58,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-13 13:53:58,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-12-13 13:53:58,062 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-12-13 13:53:58,062 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:58,062 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-12-13 13:53:58,062 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,062 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-12-13 13:53:58,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 13:53:58,064 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:58,064 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:58,064 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 13:53:58,064 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:58,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:58,065 INFO L85 PathProgramCache]: Analyzing trace with hash -433728910, now seen corresponding path program 1 times [2022-12-13 13:53:58,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:58,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850125461] [2022-12-13 13:53:58,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:58,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:58,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 13:53:58,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,139 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:58,139 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:58,140 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850125461] [2022-12-13 13:53:58,140 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850125461] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:58,140 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:58,140 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:53:58,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1497682288] [2022-12-13 13:53:58,140 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:58,142 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 13:53:58,142 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:58,142 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:53:58,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:53:58,143 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,156 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2022-12-13 13:53:58,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:53:58,156 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 13:53:58,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,158 INFO L225 Difference]: With dead ends: 134 [2022-12-13 13:53:58,158 INFO L226 Difference]: Without dead ends: 76 [2022-12-13 13:53:58,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:53:58,159 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,160 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 13:53:58,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-12-13 13:53:58,165 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-12-13 13:53:58,166 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-13 13:53:58,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-12-13 13:53:58,167 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-12-13 13:53:58,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:58,167 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-12-13 13:53:58,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,167 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-12-13 13:53:58,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-13 13:53:58,168 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:58,168 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:58,168 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 13:53:58,169 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:58,169 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:58,169 INFO L85 PathProgramCache]: Analyzing trace with hash -960870689, now seen corresponding path program 1 times [2022-12-13 13:53:58,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:58,169 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1752420489] [2022-12-13 13:53:58,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:58,170 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:58,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:53:58,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:58,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:58,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1752420489] [2022-12-13 13:53:58,262 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1752420489] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:58,263 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:58,263 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:53:58,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724936348] [2022-12-13 13:53:58,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:58,263 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 13:53:58,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:58,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:53:58,264 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:53:58,264 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,317 INFO L93 Difference]: Finished difference Result 144 states and 189 transitions. [2022-12-13 13:53:58,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 13:53:58,317 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-12-13 13:53:58,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,318 INFO L225 Difference]: With dead ends: 144 [2022-12-13 13:53:58,318 INFO L226 Difference]: Without dead ends: 76 [2022-12-13 13:53:58,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:53:58,319 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 125 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 239 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 13:53:58,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-12-13 13:53:58,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-12-13 13:53:58,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-13 13:53:58,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-12-13 13:53:58,328 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2022-12-13 13:53:58,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:58,328 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-12-13 13:53:58,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,328 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-12-13 13:53:58,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-12-13 13:53:58,330 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:58,330 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:58,330 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 13:53:58,331 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:58,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:58,331 INFO L85 PathProgramCache]: Analyzing trace with hash 1051649323, now seen corresponding path program 1 times [2022-12-13 13:53:58,331 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:58,331 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267967613] [2022-12-13 13:53:58,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:58,332 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:58,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-12-13 13:53:58,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:58,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:58,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267967613] [2022-12-13 13:53:58,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267967613] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:58,397 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:58,397 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 13:53:58,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42301305] [2022-12-13 13:53:58,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:58,397 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 13:53:58,398 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:58,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:53:58,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:53:58,399 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,438 INFO L93 Difference]: Finished difference Result 189 states and 247 transitions. [2022-12-13 13:53:58,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:53:58,438 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-12-13 13:53:58,439 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,440 INFO L225 Difference]: With dead ends: 189 [2022-12-13 13:53:58,440 INFO L226 Difference]: Without dead ends: 121 [2022-12-13 13:53:58,441 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 13:53:58,442 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 60 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 13:53:58,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-12-13 13:53:58,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-12-13 13:53:58,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-12-13 13:53:58,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 151 transitions. [2022-12-13 13:53:58,462 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 151 transitions. Word has length 39 [2022-12-13 13:53:58,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:58,462 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 151 transitions. [2022-12-13 13:53:58,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 13:53:58,463 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 151 transitions. [2022-12-13 13:53:58,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-13 13:53:58,464 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:58,464 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:58,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 13:53:58,464 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:58,465 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:58,465 INFO L85 PathProgramCache]: Analyzing trace with hash 1776043399, now seen corresponding path program 1 times [2022-12-13 13:53:58,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:58,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2065373164] [2022-12-13 13:53:58,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:58,465 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:58,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:53:58,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:53:58,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-12-13 13:53:58,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,574 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:58,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:58,574 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2065373164] [2022-12-13 13:53:58,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2065373164] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:58,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:58,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:53:58,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732033021] [2022-12-13 13:53:58,575 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:58,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 13:53:58,575 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:58,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:53:58,576 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:53:58,576 INFO L87 Difference]: Start difference. First operand 119 states and 151 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 13:53:58,704 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,704 INFO L93 Difference]: Finished difference Result 273 states and 359 transitions. [2022-12-13 13:53:58,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 13:53:58,705 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-12-13 13:53:58,705 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,706 INFO L225 Difference]: With dead ends: 273 [2022-12-13 13:53:58,706 INFO L226 Difference]: Without dead ends: 162 [2022-12-13 13:53:58,707 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-13 13:53:58,708 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 92 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 289 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 13:53:58,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-12-13 13:53:58,728 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 145. [2022-12-13 13:53:58,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2982456140350878) internal successors, (148), 122 states have internal predecessors, (148), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-12-13 13:53:58,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 185 transitions. [2022-12-13 13:53:58,730 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 185 transitions. Word has length 47 [2022-12-13 13:53:58,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:58,730 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 185 transitions. [2022-12-13 13:53:58,730 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 13:53:58,731 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 185 transitions. [2022-12-13 13:53:58,732 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-13 13:53:58,732 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:58,732 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:58,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 13:53:58,732 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:58,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:58,733 INFO L85 PathProgramCache]: Analyzing trace with hash 1353341573, now seen corresponding path program 1 times [2022-12-13 13:53:58,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:58,733 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589150036] [2022-12-13 13:53:58,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:58,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:58,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:53:58,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:53:58,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-12-13 13:53:58,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:58,821 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 13:53:58,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:58,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589150036] [2022-12-13 13:53:58,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589150036] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:58,821 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:58,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:53:58,822 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [754762222] [2022-12-13 13:53:58,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:58,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 13:53:58,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:58,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 13:53:58,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 13:53:58,823 INFO L87 Difference]: Start difference. First operand 145 states and 185 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 13:53:58,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:58,991 INFO L93 Difference]: Finished difference Result 294 states and 376 transitions. [2022-12-13 13:53:58,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 13:53:58,991 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-12-13 13:53:58,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:58,992 INFO L225 Difference]: With dead ends: 294 [2022-12-13 13:53:58,992 INFO L226 Difference]: Without dead ends: 157 [2022-12-13 13:53:58,993 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-12-13 13:53:58,993 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 116 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 399 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:58,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 399 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 13:53:58,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-12-13 13:53:59,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 143. [2022-12-13 13:53:59,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 112 states have (on average 1.2678571428571428) internal successors, (142), 120 states have internal predecessors, (142), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-12-13 13:53:59,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 179 transitions. [2022-12-13 13:53:59,006 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 179 transitions. Word has length 47 [2022-12-13 13:53:59,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:59,006 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 179 transitions. [2022-12-13 13:53:59,006 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 13:53:59,006 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 179 transitions. [2022-12-13 13:53:59,007 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-13 13:53:59,007 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:59,007 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:59,007 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 13:53:59,007 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:59,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:59,008 INFO L85 PathProgramCache]: Analyzing trace with hash -1275147008, now seen corresponding path program 1 times [2022-12-13 13:53:59,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:59,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443704406] [2022-12-13 13:53:59,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:59,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:59,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:53:59,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:53:59,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-12-13 13:53:59,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,080 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 13:53:59,080 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:59,080 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1443704406] [2022-12-13 13:53:59,080 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1443704406] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:59,080 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:59,080 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 13:53:59,081 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214508785] [2022-12-13 13:53:59,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:59,081 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 13:53:59,081 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:59,081 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 13:53:59,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 13:53:59,081 INFO L87 Difference]: Start difference. First operand 143 states and 179 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 13:53:59,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:59,212 INFO L93 Difference]: Finished difference Result 288 states and 371 transitions. [2022-12-13 13:53:59,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 13:53:59,213 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-12-13 13:53:59,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:59,214 INFO L225 Difference]: With dead ends: 288 [2022-12-13 13:53:59,215 INFO L226 Difference]: Without dead ends: 153 [2022-12-13 13:53:59,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 13:53:59,216 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 66 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:59,216 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 369 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 13:53:59,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-12-13 13:53:59,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 146. [2022-12-13 13:53:59,230 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 115 states have (on average 1.2608695652173914) internal successors, (145), 123 states have internal predecessors, (145), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-12-13 13:53:59,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 182 transitions. [2022-12-13 13:53:59,231 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 182 transitions. Word has length 53 [2022-12-13 13:53:59,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:59,232 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 182 transitions. [2022-12-13 13:53:59,232 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 13:53:59,232 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 182 transitions. [2022-12-13 13:53:59,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-13 13:53:59,233 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:59,233 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:59,233 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 13:53:59,233 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:59,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:59,233 INFO L85 PathProgramCache]: Analyzing trace with hash 2034284420, now seen corresponding path program 1 times [2022-12-13 13:53:59,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:59,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1435506614] [2022-12-13 13:53:59,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:59,234 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:59,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:53:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:53:59,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-12-13 13:53:59,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,309 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 13:53:59,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:59,309 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1435506614] [2022-12-13 13:53:59,309 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1435506614] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:59,309 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:59,309 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 13:53:59,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052992992] [2022-12-13 13:53:59,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:59,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 13:53:59,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:59,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 13:53:59,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 13:53:59,311 INFO L87 Difference]: Start difference. First operand 146 states and 182 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 13:53:59,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:53:59,477 INFO L93 Difference]: Finished difference Result 404 states and 525 transitions. [2022-12-13 13:53:59,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 13:53:59,478 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 53 [2022-12-13 13:53:59,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:53:59,479 INFO L225 Difference]: With dead ends: 404 [2022-12-13 13:53:59,479 INFO L226 Difference]: Without dead ends: 266 [2022-12-13 13:53:59,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:53:59,480 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 191 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 13:53:59,480 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [197 Valid, 310 Invalid, 209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 13:53:59,481 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-12-13 13:53:59,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 264. [2022-12-13 13:53:59,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 204 states have (on average 1.2352941176470589) internal successors, (252), 216 states have internal predecessors, (252), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (49), 30 states have call predecessors, (49), 30 states have call successors, (49) [2022-12-13 13:53:59,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 331 transitions. [2022-12-13 13:53:59,501 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 331 transitions. Word has length 53 [2022-12-13 13:53:59,501 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:53:59,501 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 331 transitions. [2022-12-13 13:53:59,501 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 13:53:59,501 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 331 transitions. [2022-12-13 13:53:59,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-13 13:53:59,502 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:53:59,502 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:53:59,502 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 13:53:59,502 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:53:59,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:53:59,502 INFO L85 PathProgramCache]: Analyzing trace with hash 1253719722, now seen corresponding path program 1 times [2022-12-13 13:53:59,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:53:59,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [372944226] [2022-12-13 13:53:59,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:53:59,503 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:53:59,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 13:53:59,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 13:53:59,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:53:59,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-12-13 13:53:59,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:53:59,640 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 13:53:59,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:53:59,640 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [372944226] [2022-12-13 13:53:59,640 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [372944226] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:53:59,640 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:53:59,641 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-12-13 13:53:59,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [548023992] [2022-12-13 13:53:59,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:53:59,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-13 13:53:59,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:53:59,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-13 13:53:59,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-12-13 13:53:59,647 INFO L87 Difference]: Start difference. First operand 264 states and 331 transitions. Second operand has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 13:54:00,153 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:54:00,154 INFO L93 Difference]: Finished difference Result 874 states and 1153 transitions. [2022-12-13 13:54:00,154 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-13 13:54:00,154 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-12-13 13:54:00,154 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:54:00,157 INFO L225 Difference]: With dead ends: 874 [2022-12-13 13:54:00,157 INFO L226 Difference]: Without dead ends: 618 [2022-12-13 13:54:00,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=210, Invalid=720, Unknown=0, NotChecked=0, Total=930 [2022-12-13 13:54:00,159 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 338 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 592 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 712 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 592 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-13 13:54:00,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [345 Valid, 566 Invalid, 712 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 592 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-13 13:54:00,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 618 states. [2022-12-13 13:54:00,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 618 to 569. [2022-12-13 13:54:00,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 569 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 69 states have call successors, (69), 54 states have call predecessors, (69), 64 states have return successors, (132), 71 states have call predecessors, (132), 69 states have call successors, (132) [2022-12-13 13:54:00,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 569 states to 569 states and 724 transitions. [2022-12-13 13:54:00,196 INFO L78 Accepts]: Start accepts. Automaton has 569 states and 724 transitions. Word has length 57 [2022-12-13 13:54:00,196 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:54:00,196 INFO L495 AbstractCegarLoop]: Abstraction has 569 states and 724 transitions. [2022-12-13 13:54:00,196 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 13:54:00,196 INFO L276 IsEmpty]: Start isEmpty. Operand 569 states and 724 transitions. [2022-12-13 13:54:00,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-12-13 13:54:00,198 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:54:00,198 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:54:00,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 13:54:00,198 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:54:00,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:54:00,198 INFO L85 PathProgramCache]: Analyzing trace with hash 1972813179, now seen corresponding path program 1 times [2022-12-13 13:54:00,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:54:00,199 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163971053] [2022-12-13 13:54:00,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:00,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:54:00,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 13:54:00,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:54:00,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 13:54:00,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:54:00,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 13:54:00,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-12-13 13:54:00,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-12-13 13:54:00,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:00,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-12-13 13:54:00,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,291 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 13:54:00,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:54:00,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163971053] [2022-12-13 13:54:00,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1163971053] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 13:54:00,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1985738306] [2022-12-13 13:54:00,291 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:00,291 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:54:00,292 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:54:00,293 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 13:54:00,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 13:54:00,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,369 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-13 13:54:00,376 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:54:00,456 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 13:54:00,456 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 13:54:00,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1985738306] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:54:00,456 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 13:54:00,457 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-12-13 13:54:00,457 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [379611113] [2022-12-13 13:54:00,457 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:54:00,457 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 13:54:00,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:54:00,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 13:54:00,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:54:00,458 INFO L87 Difference]: Start difference. First operand 569 states and 724 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-13 13:54:00,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:54:00,506 INFO L93 Difference]: Finished difference Result 888 states and 1165 transitions. [2022-12-13 13:54:00,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 13:54:00,507 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-12-13 13:54:00,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:54:00,510 INFO L225 Difference]: With dead ends: 888 [2022-12-13 13:54:00,510 INFO L226 Difference]: Without dead ends: 886 [2022-12-13 13:54:00,511 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 13:54:00,511 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 45 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 13:54:00,512 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 191 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 13:54:00,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 886 states. [2022-12-13 13:54:00,555 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 886 to 802. [2022-12-13 13:54:00,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 613 states have (on average 1.2185970636215335) internal successors, (747), 658 states have internal predecessors, (747), 100 states have call successors, (100), 76 states have call predecessors, (100), 88 states have return successors, (220), 94 states have call predecessors, (220), 100 states have call successors, (220) [2022-12-13 13:54:00,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 1067 transitions. [2022-12-13 13:54:00,559 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 1067 transitions. Word has length 100 [2022-12-13 13:54:00,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:54:00,560 INFO L495 AbstractCegarLoop]: Abstraction has 802 states and 1067 transitions. [2022-12-13 13:54:00,560 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-12-13 13:54:00,560 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 1067 transitions. [2022-12-13 13:54:00,563 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-12-13 13:54:00,563 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:54:00,563 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:54:00,569 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 13:54:00,764 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-13 13:54:00,764 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:54:00,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:54:00,765 INFO L85 PathProgramCache]: Analyzing trace with hash -1774926035, now seen corresponding path program 1 times [2022-12-13 13:54:00,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:54:00,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171808917] [2022-12-13 13:54:00,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:00,765 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:54:00,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 13:54:00,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:54:00,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 13:54:00,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:54:00,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 13:54:00,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-12-13 13:54:00,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:00,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-12-13 13:54:00,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 13:54:01,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:01,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 13:54:01,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-12-13 13:54:01,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:01,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-12-13 13:54:01,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,033 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 25 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-13 13:54:01,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:54:01,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171808917] [2022-12-13 13:54:01,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171808917] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 13:54:01,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [991356008] [2022-12-13 13:54:01,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:01,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:54:01,034 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:54:01,035 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 13:54:01,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 13:54:01,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:01,111 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-13 13:54:01,113 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:54:01,245 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 68 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-13 13:54:01,245 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 13:54:01,484 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 24 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-13 13:54:01,484 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [991356008] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 13:54:01,484 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 13:54:01,484 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-12-13 13:54:01,485 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042011551] [2022-12-13 13:54:01,485 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 13:54:01,486 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-13 13:54:01,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:54:01,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-13 13:54:01,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-12-13 13:54:01,487 INFO L87 Difference]: Start difference. First operand 802 states and 1067 transitions. Second operand has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-12-13 13:54:02,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:54:02,230 INFO L93 Difference]: Finished difference Result 1963 states and 2755 transitions. [2022-12-13 13:54:02,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-12-13 13:54:02,230 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 142 [2022-12-13 13:54:02,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:54:02,239 INFO L225 Difference]: With dead ends: 1963 [2022-12-13 13:54:02,239 INFO L226 Difference]: Without dead ends: 1265 [2022-12-13 13:54:02,243 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 308 SyntacticMatches, 6 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=283, Invalid=587, Unknown=0, NotChecked=0, Total=870 [2022-12-13 13:54:02,244 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 505 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 588 mSolverCounterSat, 220 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 506 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 808 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 220 IncrementalHoareTripleChecker+Valid, 588 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-13 13:54:02,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [506 Valid, 227 Invalid, 808 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [220 Valid, 588 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-13 13:54:02,246 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1265 states. [2022-12-13 13:54:02,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1265 to 1129. [2022-12-13 13:54:02,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1129 states, 858 states have (on average 1.2272727272727273) internal successors, (1053), 922 states have internal predecessors, (1053), 143 states have call successors, (143), 113 states have call predecessors, (143), 127 states have return successors, (329), 127 states have call predecessors, (329), 143 states have call successors, (329) [2022-12-13 13:54:02,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1129 states to 1129 states and 1525 transitions. [2022-12-13 13:54:02,332 INFO L78 Accepts]: Start accepts. Automaton has 1129 states and 1525 transitions. Word has length 142 [2022-12-13 13:54:02,332 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:54:02,332 INFO L495 AbstractCegarLoop]: Abstraction has 1129 states and 1525 transitions. [2022-12-13 13:54:02,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-12-13 13:54:02,333 INFO L276 IsEmpty]: Start isEmpty. Operand 1129 states and 1525 transitions. [2022-12-13 13:54:02,336 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-12-13 13:54:02,336 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:54:02,336 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:54:02,342 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 13:54:02,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:54:02,537 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:54:02,537 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:54:02,537 INFO L85 PathProgramCache]: Analyzing trace with hash 1133837867, now seen corresponding path program 1 times [2022-12-13 13:54:02,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:54:02,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354656868] [2022-12-13 13:54:02,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:02,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:54:02,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 13:54:02,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:54:02,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 13:54:02,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:54:02,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 13:54:02,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-12-13 13:54:02,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-12-13 13:54:02,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 13:54:02,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:02,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 13:54:02,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-12-13 13:54:02,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:02,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-12-13 13:54:02,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,837 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-13 13:54:02,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:54:02,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354656868] [2022-12-13 13:54:02,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1354656868] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 13:54:02,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [98510853] [2022-12-13 13:54:02,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:02,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:54:02,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 13:54:02,839 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 13:54:02,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-13 13:54:02,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:02,912 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-13 13:54:02,916 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 13:54:03,096 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 13:54:03,097 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 13:54:03,259 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-12-13 13:54:03,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [98510853] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 13:54:03,259 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 13:54:03,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-12-13 13:54:03,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705029886] [2022-12-13 13:54:03,260 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 13:54:03,260 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-13 13:54:03,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:54:03,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-13 13:54:03,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-12-13 13:54:03,262 INFO L87 Difference]: Start difference. First operand 1129 states and 1525 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-12-13 13:54:04,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:54:04,899 INFO L93 Difference]: Finished difference Result 3239 states and 4691 transitions. [2022-12-13 13:54:04,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-12-13 13:54:04,900 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-12-13 13:54:04,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:54:04,913 INFO L225 Difference]: With dead ends: 3239 [2022-12-13 13:54:04,913 INFO L226 Difference]: Without dead ends: 2210 [2022-12-13 13:54:04,920 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 354 GetRequests, 304 SyntacticMatches, 5 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 473 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=535, Invalid=1627, Unknown=0, NotChecked=0, Total=2162 [2022-12-13 13:54:04,921 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 674 mSDsluCounter, 361 mSDsCounter, 0 mSdLazyCounter, 1664 mSolverCounterSat, 337 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 676 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 2001 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 337 IncrementalHoareTripleChecker+Valid, 1664 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-13 13:54:04,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [676 Valid, 432 Invalid, 2001 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [337 Valid, 1664 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-13 13:54:04,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2210 states. [2022-12-13 13:54:05,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2210 to 1802. [2022-12-13 13:54:05,052 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1802 states, 1362 states have (on average 1.2143906020558002) internal successors, (1654), 1451 states have internal predecessors, (1654), 230 states have call successors, (230), 195 states have call predecessors, (230), 209 states have return successors, (494), 208 states have call predecessors, (494), 230 states have call successors, (494) [2022-12-13 13:54:05,057 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1802 states to 1802 states and 2378 transitions. [2022-12-13 13:54:05,058 INFO L78 Accepts]: Start accepts. Automaton has 1802 states and 2378 transitions. Word has length 142 [2022-12-13 13:54:05,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:54:05,058 INFO L495 AbstractCegarLoop]: Abstraction has 1802 states and 2378 transitions. [2022-12-13 13:54:05,058 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-12-13 13:54:05,058 INFO L276 IsEmpty]: Start isEmpty. Operand 1802 states and 2378 transitions. [2022-12-13 13:54:05,062 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-12-13 13:54:05,062 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 13:54:05,062 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:54:05,067 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-13 13:54:05,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 13:54:05,264 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 13:54:05,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 13:54:05,265 INFO L85 PathProgramCache]: Analyzing trace with hash 401870441, now seen corresponding path program 1 times [2022-12-13 13:54:05,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 13:54:05,265 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272780663] [2022-12-13 13:54:05,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 13:54:05,266 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 13:54:05,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 13:54:05,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 13:54:05,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 13:54:05,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 13:54:05,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 13:54:05,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-12-13 13:54:05,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-12-13 13:54:05,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 13:54:05,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:05,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 13:54:05,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-12-13 13:54:05,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 13:54:05,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-12-13 13:54:05,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 13:54:05,520 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-12-13 13:54:05,520 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 13:54:05,520 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272780663] [2022-12-13 13:54:05,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1272780663] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 13:54:05,521 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 13:54:05,521 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-12-13 13:54:05,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272718133] [2022-12-13 13:54:05,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 13:54:05,521 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-13 13:54:05,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 13:54:05,522 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-13 13:54:05,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-12-13 13:54:05,522 INFO L87 Difference]: Start difference. First operand 1802 states and 2378 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-13 13:54:05,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 13:54:05,917 INFO L93 Difference]: Finished difference Result 2257 states and 2924 transitions. [2022-12-13 13:54:05,917 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-13 13:54:05,917 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-12-13 13:54:05,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 13:54:05,918 INFO L225 Difference]: With dead ends: 2257 [2022-12-13 13:54:05,918 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 13:54:05,923 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-12-13 13:54:05,923 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 251 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 638 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 252 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 712 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 638 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-13 13:54:05,924 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [252 Valid, 166 Invalid, 712 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 638 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-13 13:54:05,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 13:54:05,924 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 13:54:05,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 13:54:05,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 13:54:05,924 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-12-13 13:54:05,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 13:54:05,925 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 13:54:05,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-12-13 13:54:05,925 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 13:54:05,925 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 13:54:05,927 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 13:54:05,928 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-12-13 13:54:05,929 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 13:54:09,148 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2022-12-13 13:54:09,148 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2022-12-13 13:54:09,148 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: (let ((.cse1 (not (<= 2 ~waterLevel~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse2 .cse3))) [2022-12-13 13:54:09,148 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-12-13 13:54:09,148 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L902 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L902 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L902 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2022-12-13 13:54:09,149 INFO L902 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 904 933) the Hoare annotation is: true [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-12-13 13:54:09,149 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2022-12-13 13:54:09,149 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-12-13 13:54:09,150 INFO L895 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse0 .cse6 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse4)))) (or (and .cse0 .cse1) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse1) .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|))))) (or (and .cse6 .cse7 (= ~waterLevel~0 1)) .cse8 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse9) .cse8 .cse2 .cse5 (<= |old(~waterLevel~0)| 1) (and .cse9 .cse7))))) [2022-12-13 13:54:09,150 INFO L899 garLoopResultBuilder]: For program point L841-1(line 841) no Hoare annotation was computed. [2022-12-13 13:54:09,150 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2022-12-13 13:54:09,150 INFO L895 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 13:54:09,150 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 857) no Hoare annotation was computed. [2022-12-13 13:54:09,150 INFO L899 garLoopResultBuilder]: For program point L1004(line 1004) no Hoare annotation was computed. [2022-12-13 13:54:09,150 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-12-13 13:54:09,150 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 13:54:09,150 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 1000 1007) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 13:54:09,150 INFO L895 garLoopResultBuilder]: At program point L843-1(lines 835 863) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse10)) (.cse2 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse3 .cse4) (or .cse5 .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse8 .cse9 .cse6 .cse7) .cse3) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse2 .cse3) (let ((.cse11 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse0 (and .cse6 .cse10 (<= 2 ~waterLevel~0) .cse11) (and .cse8 .cse9) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse9 .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse11 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3 .cse4))))) [2022-12-13 13:54:09,151 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 605 628) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) .cse0) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 13:54:09,151 INFO L895 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse0 .cse6 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse4)))) (or (and .cse0 .cse1) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse1) .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|))))) (or (and .cse6 .cse7 (= ~waterLevel~0 1)) .cse8 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse9) .cse8 .cse2 .cse5 (<= |old(~waterLevel~0)| 1) (and .cse9 .cse7))))) [2022-12-13 13:54:09,151 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2022-12-13 13:54:09,151 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2022-12-13 13:54:09,151 INFO L899 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2022-12-13 13:54:09,151 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 714 721) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-12-13 13:54:09,151 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 797 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-12-13 13:54:09,151 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 854) no Hoare annotation was computed. [2022-12-13 13:54:09,151 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2022-12-13 13:54:09,151 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 733 741) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2 .cse3) (or .cse0 .cse1 .cse3 (<= |old(~waterLevel~0)| 1) (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (or .cse1 .cse2 .cse3 .cse5) (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse7 (let ((.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse11 (not .cse3))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 .cse9 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse10 .cse11) (and .cse6 .cse8 .cse9 .cse10 .cse11))))) (or .cse1 (and .cse6 .cse7) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3 .cse5))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) (and .cse8 .cse9 .cse4 (= ~waterLevel~0 1)) .cse3))) [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1004) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 96 104) the Hoare annotation is: true [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 816 823) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3 .cse4))) [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point L560(lines 560 566) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 965 975) the Hoare annotation is: true [2022-12-13 13:54:09,152 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 879 885) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 13:54:09,152 INFO L895 garLoopResultBuilder]: At program point L585(lines 540 587) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-12-13 13:54:09,152 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 976 998) the Hoare annotation is: true [2022-12-13 13:54:09,152 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 13:54:09,152 INFO L899 garLoopResultBuilder]: For program point L986(lines 986 993) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L986-2(lines 986 993) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 582) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point L578-2(lines 570 583) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3 .cse4))) [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L541(lines 540 587) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 583) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-12-13 13:54:09,153 INFO L902 garLoopResultBuilder]: At program point L591(lines 530 595) the Hoare annotation is: true [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 886 892) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L550(lines 550 556) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 550 556) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 827 834) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-12-13 13:54:09,153 INFO L895 garLoopResultBuilder]: At program point L588(lines 539 589) the Hoare annotation is: false [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 893 901) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) .cse0) (= 0 ~systemActive~0) (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0)))) [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 637 661) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 137 150) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2 .cse3))) [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2022-12-13 13:54:09,154 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 778 796) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0)) (and .cse0 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-12-13 13:54:09,154 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2022-12-13 13:54:09,155 INFO L895 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 13:54:09,155 INFO L899 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2022-12-13 13:54:09,155 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 722 732) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 13:54:09,155 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 688 695) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 13:54:09,155 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-12-13 13:54:09,155 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-12-13 13:54:09,155 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1) .cse3) (or (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3 .cse4))) [2022-12-13 13:54:09,157 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 13:54:09,159 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 13:54:09,179 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 01:54:09 BoogieIcfgContainer [2022-12-13 13:54:09,179 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 13:54:09,180 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 13:54:09,180 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 13:54:09,180 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 13:54:09,180 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 01:53:57" (3/4) ... [2022-12-13 13:54:09,182 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 13:54:09,188 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 13:54:09,193 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-12-13 13:54:09,193 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 13:54:09,193 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 13:54:09,194 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 13:54:09,194 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 13:54:09,211 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-12-13 13:54:09,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-12-13 13:54:09,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-12-13 13:54:09,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) [2022-12-13 13:54:09,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-12-13 13:54:09,212 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) || (((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(\old(methAndRunningLastTime) == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((((methaneLevelCritical == 0 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((methAndRunningLastTime == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || (((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || (((1 <= tmp && 1 <= \result) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1)) || 0 == systemActive) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0) [2022-12-13 13:54:09,213 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-13 13:54:09,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-12-13 13:54:09,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-12-13 13:54:09,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 13:54:09,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-12-13 13:54:09,214 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-12-13 13:54:09,228 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 13:54:09,228 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 13:54:09,229 INFO L158 Benchmark]: Toolchain (without parser) took 12153.98ms. Allocated memory was 161.5MB in the beginning and 234.9MB in the end (delta: 73.4MB). Free memory was 128.9MB in the beginning and 171.1MB in the end (delta: -42.2MB). Peak memory consumption was 34.2MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,229 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 161.5MB. Free memory is still 135.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 13:54:09,229 INFO L158 Benchmark]: CACSL2BoogieTranslator took 290.05ms. Allocated memory is still 161.5MB. Free memory was 128.9MB in the beginning and 109.9MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,229 INFO L158 Benchmark]: Boogie Procedure Inliner took 31.89ms. Allocated memory is still 161.5MB. Free memory was 109.9MB in the beginning and 107.2MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,229 INFO L158 Benchmark]: Boogie Preprocessor took 20.45ms. Allocated memory is still 161.5MB. Free memory was 107.2MB in the beginning and 106.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 13:54:09,230 INFO L158 Benchmark]: RCFGBuilder took 327.58ms. Allocated memory is still 161.5MB. Free memory was 106.1MB in the beginning and 88.9MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,230 INFO L158 Benchmark]: TraceAbstraction took 11430.18ms. Allocated memory was 161.5MB in the beginning and 234.9MB in the end (delta: 73.4MB). Free memory was 88.3MB in the beginning and 176.4MB in the end (delta: -88.0MB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,230 INFO L158 Benchmark]: Witness Printer took 48.63ms. Allocated memory is still 234.9MB. Free memory was 176.4MB in the beginning and 171.1MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 13:54:09,231 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 161.5MB. Free memory is still 135.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 290.05ms. Allocated memory is still 161.5MB. Free memory was 128.9MB in the beginning and 109.9MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 31.89ms. Allocated memory is still 161.5MB. Free memory was 109.9MB in the beginning and 107.2MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 20.45ms. Allocated memory is still 161.5MB. Free memory was 107.2MB in the beginning and 106.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 327.58ms. Allocated memory is still 161.5MB. Free memory was 106.1MB in the beginning and 88.9MB in the end (delta: 17.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 11430.18ms. Allocated memory was 161.5MB in the beginning and 234.9MB in the end (delta: 73.4MB). Free memory was 88.3MB in the beginning and 176.4MB in the end (delta: -88.0MB). Peak memory consumption was 105.1MB. Max. memory is 16.1GB. * Witness Printer took 48.63ms. Allocated memory is still 234.9MB. Free memory was 176.4MB in the beginning and 171.1MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1004]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.4s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2507 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2476 mSDsluCounter, 3657 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2506 mSDsCounter, 894 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4035 IncrementalHoareTripleChecker+Invalid, 4929 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 894 mSolverCounterUnsat, 1151 mSDtfsCounter, 4035 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 996 GetRequests, 824 SyntacticMatches, 11 SemanticMatches, 161 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 907 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1802occurred in iteration=12, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 13 MinimizatonAttempts, 719 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2682 PreInvPairs, 2990 NumberOfFragments, 1801 HoareAnnotationTreeSize, 2682 FomulaSimplifications, 4027 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 44 FomulaSimplificationsInter, 22675 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 1288 NumberOfCodeBlocks, 1288 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1554 ConstructedInterpolants, 0 QuantifiedInterpolants, 3212 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1265 ConjunctsInSsa, 25 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 660/778 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) || (((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(\old(methAndRunningLastTime) == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((((methaneLevelCritical == 0 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || (((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || (((1 <= tmp && 1 <= \result) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-12-13 13:54:09,249 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1039caf-4a39-43b1-9685-c9752b4511af/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE