./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:54:28,324 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:54:28,326 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:54:28,354 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:54:28,354 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:54:28,355 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:54:28,357 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:54:28,359 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:54:28,360 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:54:28,361 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:54:28,363 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:54:28,364 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:54:28,364 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:54:28,365 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:54:28,367 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:54:28,368 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:54:28,369 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:54:28,370 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:54:28,372 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:54:28,374 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:54:28,376 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:54:28,378 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:54:28,379 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:54:28,380 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:54:28,384 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:54:28,385 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:54:28,385 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:54:28,386 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:54:28,387 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:54:28,388 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:54:28,389 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:54:28,390 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:54:28,390 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:54:28,391 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:54:28,392 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:54:28,393 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:54:28,394 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:54:28,394 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:54:28,395 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:54:28,396 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:54:28,397 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:54:28,398 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 20:54:28,421 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:54:28,421 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:54:28,422 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:54:28,422 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:54:28,423 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:54:28,423 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:54:28,424 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:54:28,424 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:54:28,425 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:54:28,425 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:54:28,425 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:54:28,426 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:54:28,426 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:54:28,426 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:54:28,427 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:54:28,427 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:54:28,427 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:54:28,428 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:54:28,428 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:54:28,428 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:54:28,428 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:54:28,429 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:54:28,429 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:54:28,429 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:54:28,430 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:54:28,430 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:54:28,430 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:54:28,431 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:54:28,431 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:54:28,431 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 20:54:28,432 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:54:28,432 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:54:28,432 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:54:28,433 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b [2022-11-02 20:54:28,790 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:54:28,826 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:54:28,829 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:54:28,830 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:54:28,831 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:54:28,832 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2022-11-02 20:54:28,906 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/data/f8a44d321/2cce4e4ea64049a6baa6d77cf0e35513/FLAG4b5c12027 [2022-11-02 20:54:29,452 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:54:29,453 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2022-11-02 20:54:29,469 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/data/f8a44d321/2cce4e4ea64049a6baa6d77cf0e35513/FLAG4b5c12027 [2022-11-02 20:54:29,759 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/data/f8a44d321/2cce4e4ea64049a6baa6d77cf0e35513 [2022-11-02 20:54:29,764 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:54:29,767 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:54:29,772 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:54:29,772 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:54:29,776 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:54:29,777 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:54:29" (1/1) ... [2022-11-02 20:54:29,779 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@e20203c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:29, skipping insertion in model container [2022-11-02 20:54:29,779 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:54:29" (1/1) ... [2022-11-02 20:54:29,787 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:54:29,840 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:54:30,120 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2022-11-02 20:54:30,208 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:54:30,218 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:54:30,271 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2022-11-02 20:54:30,314 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:54:30,333 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:54:30,333 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30 WrapperNode [2022-11-02 20:54:30,333 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:54:30,334 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:54:30,335 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:54:30,335 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:54:30,343 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,360 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,420 INFO L138 Inliner]: procedures = 61, calls = 166, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 302 [2022-11-02 20:54:30,420 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:54:30,421 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:54:30,421 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:54:30,421 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:54:30,441 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,441 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,444 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,448 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,454 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,471 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,473 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,474 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,488 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:54:30,489 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:54:30,489 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:54:30,489 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:54:30,490 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (1/1) ... [2022-11-02 20:54:30,509 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:54:30,523 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:54:30,535 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 20:54:30,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 20:54:30,591 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:54:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 20:54:30,592 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 20:54:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 20:54:30,592 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 20:54:30,592 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 20:54:30,593 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 20:54:30,593 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:54:30,594 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:54:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 20:54:30,594 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 20:54:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 20:54:30,594 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-02 20:54:30,594 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-02 20:54:30,595 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-02 20:54:30,595 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-02 20:54:30,596 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-02 20:54:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 20:54:30,596 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 20:54:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:54:30,596 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 20:54:30,596 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 20:54:30,597 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:54:30,597 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:54:30,732 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:54:30,735 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:54:31,287 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:54:31,295 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:54:31,295 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 20:54:31,298 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:31 BoogieIcfgContainer [2022-11-02 20:54:31,298 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:54:31,309 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 20:54:31,309 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 20:54:31,313 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 20:54:31,313 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:54:29" (1/3) ... [2022-11-02 20:54:31,314 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7edd2b3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:54:31, skipping insertion in model container [2022-11-02 20:54:31,315 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:54:30" (2/3) ... [2022-11-02 20:54:31,315 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7edd2b3f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:54:31, skipping insertion in model container [2022-11-02 20:54:31,315 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:31" (3/3) ... [2022-11-02 20:54:31,317 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product64.cil.c [2022-11-02 20:54:31,341 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 20:54:31,341 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 20:54:31,423 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 20:54:31,437 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@f55c698, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 20:54:31,437 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 20:54:31,443 INFO L276 IsEmpty]: Start isEmpty. Operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2022-11-02 20:54:31,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-02 20:54:31,458 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:31,460 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:31,460 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:31,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:31,467 INFO L85 PathProgramCache]: Analyzing trace with hash 1423497268, now seen corresponding path program 1 times [2022-11-02 20:54:31,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:31,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497194276] [2022-11-02 20:54:31,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:31,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:31,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:31,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-02 20:54:31,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:31,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:54:31,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:31,808 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:31,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:31,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497194276] [2022-11-02 20:54:31,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497194276] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:31,819 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:31,819 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:54:31,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233963123] [2022-11-02 20:54:31,822 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:31,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 20:54:31,829 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:31,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 20:54:31,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:54:31,879 INFO L87 Difference]: Start difference. First operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:31,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:31,956 INFO L93 Difference]: Finished difference Result 227 states and 306 transitions. [2022-11-02 20:54:31,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 20:54:31,960 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-02 20:54:31,961 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:31,974 INFO L225 Difference]: With dead ends: 227 [2022-11-02 20:54:31,975 INFO L226 Difference]: Without dead ends: 109 [2022-11-02 20:54:31,981 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:54:31,985 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:31,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:54:32,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2022-11-02 20:54:32,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2022-11-02 20:54:32,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 80 states have (on average 1.3) internal successors, (104), 90 states have internal predecessors, (104), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2022-11-02 20:54:32,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 141 transitions. [2022-11-02 20:54:32,067 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 141 transitions. Word has length 32 [2022-11-02 20:54:32,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:32,069 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 141 transitions. [2022-11-02 20:54:32,069 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:32,070 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 141 transitions. [2022-11-02 20:54:32,078 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-02 20:54:32,079 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:32,080 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:32,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 20:54:32,081 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:32,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:32,082 INFO L85 PathProgramCache]: Analyzing trace with hash -1062885571, now seen corresponding path program 1 times [2022-11-02 20:54:32,083 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:32,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1618416887] [2022-11-02 20:54:32,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:32,084 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:32,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:54:32,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:54:32,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,315 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:32,316 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:32,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1618416887] [2022-11-02 20:54:32,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1618416887] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:32,316 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:32,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:54:32,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1688670648] [2022-11-02 20:54:32,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:32,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:54:32,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:32,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:54:32,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:54:32,319 INFO L87 Difference]: Start difference. First operand 109 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:32,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:32,359 INFO L93 Difference]: Finished difference Result 178 states and 230 transitions. [2022-11-02 20:54:32,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:54:32,359 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-02 20:54:32,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:32,361 INFO L225 Difference]: With dead ends: 178 [2022-11-02 20:54:32,361 INFO L226 Difference]: Without dead ends: 100 [2022-11-02 20:54:32,362 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:54:32,363 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 17 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:32,364 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 234 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:54:32,365 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-11-02 20:54:32,374 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2022-11-02 20:54:32,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-02 20:54:32,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2022-11-02 20:54:32,376 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 33 [2022-11-02 20:54:32,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:32,377 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2022-11-02 20:54:32,377 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:32,377 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2022-11-02 20:54:32,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-02 20:54:32,385 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:32,386 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:32,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 20:54:32,386 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:32,387 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:32,387 INFO L85 PathProgramCache]: Analyzing trace with hash 214115468, now seen corresponding path program 1 times [2022-11-02 20:54:32,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:32,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1259242339] [2022-11-02 20:54:32,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:32,388 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:32,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:32,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-02 20:54:32,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:32,623 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:32,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:32,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1259242339] [2022-11-02 20:54:32,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1259242339] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:32,625 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:32,626 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:54:32,626 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1531071286] [2022-11-02 20:54:32,626 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:32,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:54:32,628 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:32,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:54:32,629 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:54:32,629 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 20:54:32,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:32,802 INFO L93 Difference]: Finished difference Result 239 states and 312 transitions. [2022-11-02 20:54:32,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 20:54:32,803 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-02 20:54:32,804 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:32,810 INFO L225 Difference]: With dead ends: 239 [2022-11-02 20:54:32,811 INFO L226 Difference]: Without dead ends: 147 [2022-11-02 20:54:32,813 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:54:32,814 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 190 mSDsluCounter, 289 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 431 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:32,815 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 431 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:54:32,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2022-11-02 20:54:32,854 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 144. [2022-11-02 20:54:32,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 107 states have (on average 1.3271028037383177) internal successors, (142), 120 states have internal predecessors, (142), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (23), 16 states have call predecessors, (23), 22 states have call successors, (23) [2022-11-02 20:54:32,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 187 transitions. [2022-11-02 20:54:32,859 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 187 transitions. Word has length 38 [2022-11-02 20:54:32,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:32,860 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 187 transitions. [2022-11-02 20:54:32,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-02 20:54:32,860 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 187 transitions. [2022-11-02 20:54:32,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-02 20:54:32,863 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:32,864 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:32,864 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 20:54:32,864 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:32,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:32,865 INFO L85 PathProgramCache]: Analyzing trace with hash 384205224, now seen corresponding path program 1 times [2022-11-02 20:54:32,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:32,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756146396] [2022-11-02 20:54:32,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:32,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:32,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:54:33,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-02 20:54:33,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,023 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 20:54:33,023 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:33,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756146396] [2022-11-02 20:54:33,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1756146396] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:33,024 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:33,024 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:54:33,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [582507098] [2022-11-02 20:54:33,025 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:33,025 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:54:33,025 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:33,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:54:33,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:54:33,026 INFO L87 Difference]: Start difference. First operand 144 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:33,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:33,238 INFO L93 Difference]: Finished difference Result 337 states and 449 transitions. [2022-11-02 20:54:33,238 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:54:33,238 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2022-11-02 20:54:33,239 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:33,240 INFO L225 Difference]: With dead ends: 337 [2022-11-02 20:54:33,241 INFO L226 Difference]: Without dead ends: 201 [2022-11-02 20:54:33,241 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:54:33,243 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 66 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 582 SdHoareTripleChecker+Invalid, 93 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:33,244 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 582 Invalid, 93 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:54:33,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2022-11-02 20:54:33,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 191. [2022-11-02 20:54:33,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 155 states have internal predecessors, (180), 26 states have call successors, (26), 21 states have call predecessors, (26), 21 states have return successors, (34), 24 states have call predecessors, (34), 26 states have call successors, (34) [2022-11-02 20:54:33,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 240 transitions. [2022-11-02 20:54:33,265 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 240 transitions. Word has length 41 [2022-11-02 20:54:33,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:33,266 INFO L495 AbstractCegarLoop]: Abstraction has 191 states and 240 transitions. [2022-11-02 20:54:33,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:54:33,266 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 240 transitions. [2022-11-02 20:54:33,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-11-02 20:54:33,267 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:33,268 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:33,268 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 20:54:33,268 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:33,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:33,269 INFO L85 PathProgramCache]: Analyzing trace with hash -602736799, now seen corresponding path program 1 times [2022-11-02 20:54:33,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:33,269 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [796543738] [2022-11-02 20:54:33,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:33,270 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:33,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:54:33,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-02 20:54:33,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:33,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:33,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,372 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-02 20:54:33,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,376 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:33,376 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:33,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [796543738] [2022-11-02 20:54:33,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [796543738] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:33,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:33,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-02 20:54:33,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1343532625] [2022-11-02 20:54:33,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:33,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-02 20:54:33,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:33,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-02 20:54:33,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-02 20:54:33,379 INFO L87 Difference]: Start difference. First operand 191 states and 240 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 20:54:33,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:33,542 INFO L93 Difference]: Finished difference Result 405 states and 508 transitions. [2022-11-02 20:54:33,542 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:54:33,543 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 68 [2022-11-02 20:54:33,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:33,545 INFO L225 Difference]: With dead ends: 405 [2022-11-02 20:54:33,545 INFO L226 Difference]: Without dead ends: 222 [2022-11-02 20:54:33,546 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:54:33,548 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 107 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 301 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:33,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 301 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:54:33,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2022-11-02 20:54:33,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 218. [2022-11-02 20:54:33,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 163 states have (on average 1.2453987730061349) internal successors, (203), 175 states have internal predecessors, (203), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2022-11-02 20:54:33,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 270 transitions. [2022-11-02 20:54:33,577 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 270 transitions. Word has length 68 [2022-11-02 20:54:33,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:33,578 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 270 transitions. [2022-11-02 20:54:33,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 20:54:33,579 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 270 transitions. [2022-11-02 20:54:33,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-02 20:54:33,580 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:33,580 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:33,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 20:54:33,581 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:33,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:33,582 INFO L85 PathProgramCache]: Analyzing trace with hash -578050563, now seen corresponding path program 1 times [2022-11-02 20:54:33,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:33,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [500954370] [2022-11-02 20:54:33,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:33,583 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:33,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:33,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:54:33,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:33,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:33,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-02 20:54:33,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:33,753 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:33,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:33,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [500954370] [2022-11-02 20:54:33,754 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [500954370] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:33,754 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:33,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:54:33,755 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [989950627] [2022-11-02 20:54:33,755 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:33,755 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:54:33,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:33,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:54:33,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:54:33,757 INFO L87 Difference]: Start difference. First operand 218 states and 270 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:54:34,015 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:34,016 INFO L93 Difference]: Finished difference Result 438 states and 557 transitions. [2022-11-02 20:54:34,017 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:54:34,017 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2022-11-02 20:54:34,018 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:34,020 INFO L225 Difference]: With dead ends: 438 [2022-11-02 20:54:34,021 INFO L226 Difference]: Without dead ends: 228 [2022-11-02 20:54:34,022 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:54:34,030 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 82 mSDsluCounter, 341 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 455 SdHoareTripleChecker+Invalid, 177 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:34,034 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 455 Invalid, 177 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:54:34,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2022-11-02 20:54:34,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 221. [2022-11-02 20:54:34,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 166 states have (on average 1.2409638554216869) internal successors, (206), 178 states have internal predecessors, (206), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2022-11-02 20:54:34,069 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 273 transitions. [2022-11-02 20:54:34,069 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 273 transitions. Word has length 65 [2022-11-02 20:54:34,070 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:34,071 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 273 transitions. [2022-11-02 20:54:34,071 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:54:34,071 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2022-11-02 20:54:34,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-02 20:54:34,072 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:34,073 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:34,073 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 20:54:34,073 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:34,074 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:34,074 INFO L85 PathProgramCache]: Analyzing trace with hash 808152831, now seen corresponding path program 1 times [2022-11-02 20:54:34,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:34,075 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807264681] [2022-11-02 20:54:34,075 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:34,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:34,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:34,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:54:34,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:34,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:34,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-02 20:54:34,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,342 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:34,342 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:34,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807264681] [2022-11-02 20:54:34,343 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807264681] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:34,343 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:34,346 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:54:34,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44687308] [2022-11-02 20:54:34,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:34,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:54:34,348 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:34,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:54:34,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:54:34,349 INFO L87 Difference]: Start difference. First operand 221 states and 273 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:54:34,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:34,574 INFO L93 Difference]: Finished difference Result 444 states and 562 transitions. [2022-11-02 20:54:34,575 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:54:34,575 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2022-11-02 20:54:34,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:34,580 INFO L225 Difference]: With dead ends: 444 [2022-11-02 20:54:34,581 INFO L226 Difference]: Without dead ends: 231 [2022-11-02 20:54:34,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:54:34,585 INFO L413 NwaCegarLoop]: 116 mSDtfsCounter, 83 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 114 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 137 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 114 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:34,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 358 Invalid, 137 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:54:34,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2022-11-02 20:54:34,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 223. [2022-11-02 20:54:34,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 180 states have internal predecessors, (208), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2022-11-02 20:54:34,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 275 transitions. [2022-11-02 20:54:34,619 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 275 transitions. Word has length 65 [2022-11-02 20:54:34,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:34,620 INFO L495 AbstractCegarLoop]: Abstraction has 223 states and 275 transitions. [2022-11-02 20:54:34,622 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:54:34,622 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 275 transitions. [2022-11-02 20:54:34,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-11-02 20:54:34,624 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:34,625 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:34,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 20:54:34,625 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:34,626 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:34,626 INFO L85 PathProgramCache]: Analyzing trace with hash 1509752705, now seen corresponding path program 1 times [2022-11-02 20:54:34,626 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:34,626 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [772031170] [2022-11-02 20:54:34,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:34,627 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:34,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:34,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:54:34,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:34,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:34,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2022-11-02 20:54:34,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:34,795 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:34,795 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:34,795 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [772031170] [2022-11-02 20:54:34,795 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [772031170] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:34,796 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:34,796 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:54:34,796 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [602466744] [2022-11-02 20:54:34,796 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:34,797 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:54:34,797 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:34,797 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:54:34,798 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:54:34,798 INFO L87 Difference]: Start difference. First operand 223 states and 275 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 20:54:35,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:35,150 INFO L93 Difference]: Finished difference Result 661 states and 844 transitions. [2022-11-02 20:54:35,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:54:35,151 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2022-11-02 20:54:35,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:35,154 INFO L225 Difference]: With dead ends: 661 [2022-11-02 20:54:35,154 INFO L226 Difference]: Without dead ends: 446 [2022-11-02 20:54:35,155 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:54:35,156 INFO L413 NwaCegarLoop]: 173 mSDtfsCounter, 257 mSDsluCounter, 215 mSDsCounter, 0 mSdLazyCounter, 190 mSolverCounterSat, 82 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 82 IncrementalHoareTripleChecker+Valid, 190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:35,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [265 Valid, 388 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [82 Valid, 190 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:54:35,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2022-11-02 20:54:35,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 444. [2022-11-02 20:54:35,195 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 444 states, 334 states have (on average 1.2125748502994012) internal successors, (405), 354 states have internal predecessors, (405), 59 states have call successors, (59), 48 states have call predecessors, (59), 50 states have return successors, (86), 59 states have call predecessors, (86), 59 states have call successors, (86) [2022-11-02 20:54:35,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 444 states to 444 states and 550 transitions. [2022-11-02 20:54:35,199 INFO L78 Accepts]: Start accepts. Automaton has 444 states and 550 transitions. Word has length 65 [2022-11-02 20:54:35,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:35,199 INFO L495 AbstractCegarLoop]: Abstraction has 444 states and 550 transitions. [2022-11-02 20:54:35,199 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-02 20:54:35,200 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 550 transitions. [2022-11-02 20:54:35,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-11-02 20:54:35,201 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:35,201 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:35,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 20:54:35,202 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:35,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:35,202 INFO L85 PathProgramCache]: Analyzing trace with hash 920584039, now seen corresponding path program 1 times [2022-11-02 20:54:35,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:35,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [360608750] [2022-11-02 20:54:35,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:35,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:35,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:54:35,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-02 20:54:35,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-02 20:54:35,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:35,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:35,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-02 20:54:35,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:35,514 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:54:35,514 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:35,515 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [360608750] [2022-11-02 20:54:35,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [360608750] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:54:35,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:54:35,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-02 20:54:35,516 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823747921] [2022-11-02 20:54:35,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:54:35,517 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-02 20:54:35,517 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:35,517 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-02 20:54:35,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:54:35,518 INFO L87 Difference]: Start difference. First operand 444 states and 550 transitions. Second operand has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-02 20:54:37,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:37,044 INFO L93 Difference]: Finished difference Result 1346 states and 1729 transitions. [2022-11-02 20:54:37,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-02 20:54:37,045 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) Word has length 69 [2022-11-02 20:54:37,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:37,050 INFO L225 Difference]: With dead ends: 1346 [2022-11-02 20:54:37,051 INFO L226 Difference]: Without dead ends: 1003 [2022-11-02 20:54:37,053 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 15 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 296 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-02 20:54:37,054 INFO L413 NwaCegarLoop]: 193 mSDtfsCounter, 659 mSDsluCounter, 731 mSDsCounter, 0 mSdLazyCounter, 1091 mSolverCounterSat, 263 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 670 SdHoareTripleChecker+Valid, 924 SdHoareTripleChecker+Invalid, 1354 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 263 IncrementalHoareTripleChecker+Valid, 1091 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:37,054 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [670 Valid, 924 Invalid, 1354 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [263 Valid, 1091 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-02 20:54:37,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1003 states. [2022-11-02 20:54:37,154 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1003 to 822. [2022-11-02 20:54:37,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 822 states, 617 states have (on average 1.2106969205834683) internal successors, (747), 658 states have internal predecessors, (747), 109 states have call successors, (109), 83 states have call predecessors, (109), 95 states have return successors, (160), 110 states have call predecessors, (160), 109 states have call successors, (160) [2022-11-02 20:54:37,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 822 states to 822 states and 1016 transitions. [2022-11-02 20:54:37,161 INFO L78 Accepts]: Start accepts. Automaton has 822 states and 1016 transitions. Word has length 69 [2022-11-02 20:54:37,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:37,161 INFO L495 AbstractCegarLoop]: Abstraction has 822 states and 1016 transitions. [2022-11-02 20:54:37,161 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.4) internal successors, (54), 8 states have internal predecessors, (54), 5 states have call successors, (7), 4 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 5 states have call successors, (6) [2022-11-02 20:54:37,162 INFO L276 IsEmpty]: Start isEmpty. Operand 822 states and 1016 transitions. [2022-11-02 20:54:37,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2022-11-02 20:54:37,163 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:37,164 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:37,164 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-02 20:54:37,164 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:37,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:37,165 INFO L85 PathProgramCache]: Analyzing trace with hash 1227003405, now seen corresponding path program 1 times [2022-11-02 20:54:37,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:37,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537864027] [2022-11-02 20:54:37,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:37,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:37,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:54:37,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 20:54:37,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:54:37,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:54:37,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:37,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:37,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-02 20:54:37,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-02 20:54:37,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2022-11-02 20:54:37,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-02 20:54:37,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:37,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-11-02 20:54:37,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,490 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-02 20:54:37,490 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:37,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537864027] [2022-11-02 20:54:37,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537864027] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:54:37,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [472445085] [2022-11-02 20:54:37,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:37,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:54:37,491 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:54:37,494 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:54:37,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 20:54:37,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:37,681 INFO L263 TraceCheckSpWp]: Trace formula consists of 541 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-02 20:54:37,694 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:54:38,017 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:54:38,030 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:54:38,340 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-02 20:54:38,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [472445085] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:54:38,341 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:54:38,341 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-11-02 20:54:38,341 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1042009530] [2022-11-02 20:54:38,341 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:54:38,342 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-02 20:54:38,342 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:38,343 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-02 20:54:38,343 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-11-02 20:54:38,343 INFO L87 Difference]: Start difference. First operand 822 states and 1016 transitions. Second operand has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2022-11-02 20:54:40,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:40,176 INFO L93 Difference]: Finished difference Result 1882 states and 2408 transitions. [2022-11-02 20:54:40,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-02 20:54:40,177 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) Word has length 123 [2022-11-02 20:54:40,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:40,184 INFO L225 Difference]: With dead ends: 1882 [2022-11-02 20:54:40,184 INFO L226 Difference]: Without dead ends: 1157 [2022-11-02 20:54:40,188 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 332 GetRequests, 279 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 682 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2022-11-02 20:54:40,189 INFO L413 NwaCegarLoop]: 263 mSDtfsCounter, 473 mSDsluCounter, 1465 mSDsCounter, 0 mSdLazyCounter, 1563 mSolverCounterSat, 226 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 474 SdHoareTripleChecker+Valid, 1728 SdHoareTripleChecker+Invalid, 1789 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 226 IncrementalHoareTripleChecker+Valid, 1563 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:40,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [474 Valid, 1728 Invalid, 1789 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [226 Valid, 1563 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-02 20:54:40,192 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1157 states. [2022-11-02 20:54:40,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1157 to 919. [2022-11-02 20:54:40,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 919 states, 682 states have (on average 1.187683284457478) internal successors, (810), 735 states have internal predecessors, (810), 126 states have call successors, (126), 104 states have call predecessors, (126), 110 states have return successors, (159), 116 states have call predecessors, (159), 126 states have call successors, (159) [2022-11-02 20:54:40,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1095 transitions. [2022-11-02 20:54:40,308 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1095 transitions. Word has length 123 [2022-11-02 20:54:40,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:40,310 INFO L495 AbstractCegarLoop]: Abstraction has 919 states and 1095 transitions. [2022-11-02 20:54:40,310 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2022-11-02 20:54:40,310 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1095 transitions. [2022-11-02 20:54:40,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 216 [2022-11-02 20:54:40,322 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:54:40,322 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:40,366 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:54:40,542 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-02 20:54:40,543 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:54:40,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:54:40,543 INFO L85 PathProgramCache]: Analyzing trace with hash 238833209, now seen corresponding path program 1 times [2022-11-02 20:54:40,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:54:40,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854304737] [2022-11-02 20:54:40,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:40,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:54:40,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:54:40,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 20:54:40,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:54:40,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:54:40,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:40,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:40,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 20:54:40,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:54:40,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:54:40,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:40,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-02 20:54:40,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:40,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 127 [2022-11-02 20:54:40,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-02 20:54:40,953 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:54:40,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-02 20:54:40,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 169 [2022-11-02 20:54:40,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2022-11-02 20:54:40,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:54:40,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:54:40,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2022-11-02 20:54:40,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:40,991 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 69 proven. 5 refuted. 0 times theorem prover too weak. 157 trivial. 0 not checked. [2022-11-02 20:54:40,991 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:54:40,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854304737] [2022-11-02 20:54:40,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854304737] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:54:40,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [199151556] [2022-11-02 20:54:40,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:54:40,992 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:54:40,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:54:40,993 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:54:41,022 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 20:54:41,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:54:41,205 INFO L263 TraceCheckSpWp]: Trace formula consists of 781 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-02 20:54:41,213 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:54:41,496 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 167 proven. 4 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2022-11-02 20:54:41,496 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:54:42,135 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-02 20:54:42,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [199151556] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:54:42,135 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:54:42,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2022-11-02 20:54:42,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [474340038] [2022-11-02 20:54:42,136 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:54:42,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-02 20:54:42,137 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:54:42,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-02 20:54:42,138 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=481, Unknown=0, NotChecked=0, Total=600 [2022-11-02 20:54:42,138 INFO L87 Difference]: Start difference. First operand 919 states and 1095 transitions. Second operand has 25 states, 25 states have (on average 9.12) internal successors, (228), 21 states have internal predecessors, (228), 9 states have call successors, (41), 9 states have call predecessors, (41), 9 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) [2022-11-02 20:54:44,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:54:44,050 INFO L93 Difference]: Finished difference Result 2013 states and 2471 transitions. [2022-11-02 20:54:44,051 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-02 20:54:44,051 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 9.12) internal successors, (228), 21 states have internal predecessors, (228), 9 states have call successors, (41), 9 states have call predecessors, (41), 9 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) Word has length 215 [2022-11-02 20:54:44,052 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:54:44,053 INFO L225 Difference]: With dead ends: 2013 [2022-11-02 20:54:44,053 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 20:54:44,060 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 518 GetRequests, 463 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 561 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=575, Invalid=2077, Unknown=0, NotChecked=0, Total=2652 [2022-11-02 20:54:44,061 INFO L413 NwaCegarLoop]: 170 mSDtfsCounter, 1029 mSDsluCounter, 875 mSDsCounter, 0 mSdLazyCounter, 1514 mSolverCounterSat, 450 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1035 SdHoareTripleChecker+Valid, 1045 SdHoareTripleChecker+Invalid, 1964 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 450 IncrementalHoareTripleChecker+Valid, 1514 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:54:44,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1035 Valid, 1045 Invalid, 1964 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [450 Valid, 1514 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-11-02 20:54:44,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 20:54:44,062 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 20:54:44,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:54:44,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 20:54:44,063 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 215 [2022-11-02 20:54:44,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:54:44,063 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:54:44,063 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 9.12) internal successors, (228), 21 states have internal predecessors, (228), 9 states have call successors, (41), 9 states have call predecessors, (41), 9 states have return successors, (40), 8 states have call predecessors, (40), 9 states have call successors, (40) [2022-11-02 20:54:44,063 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 20:54:44,064 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 20:54:44,066 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 20:54:44,109 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:54:44,282 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-02 20:54:44,284 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 20:54:55,259 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 325 332) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 (not (<= ~waterLevel~0 2)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 20:54:55,260 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2022-11-02 20:54:55,260 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 325 332) no Hoare annotation was computed. [2022-11-02 20:54:55,260 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 215 221) no Hoare annotation was computed. [2022-11-02 20:54:55,260 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 215 221) the Hoare annotation is: true [2022-11-02 20:54:55,260 INFO L899 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2022-11-02 20:54:55,261 INFO L899 garLoopResultBuilder]: For program point L417-2(lines 417 421) no Hoare annotation was computed. [2022-11-02 20:54:55,261 INFO L895 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,261 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,261 INFO L899 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2022-11-02 20:54:55,261 INFO L899 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2022-11-02 20:54:55,262 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 249 273) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,262 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,262 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2022-11-02 20:54:55,262 INFO L899 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2022-11-02 20:54:55,262 INFO L895 garLoopResultBuilder]: At program point L423(lines 408 426) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,263 INFO L895 garLoopResultBuilder]: At program point L549(lines 544 552) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,263 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2022-11-02 20:54:55,263 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 344 352) the Hoare annotation is: true [2022-11-02 20:54:55,263 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 344 352) no Hoare annotation was computed. [2022-11-02 20:54:55,263 INFO L899 garLoopResultBuilder]: For program point L481-1(lines 477 488) no Hoare annotation was computed. [2022-11-02 20:54:55,263 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 477 488) the Hoare annotation is: true [2022-11-02 20:54:55,264 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 477 488) no Hoare annotation was computed. [2022-11-02 20:54:55,264 INFO L899 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2022-11-02 20:54:55,264 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2022-11-02 20:54:55,264 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 555 584) the Hoare annotation is: true [2022-11-02 20:54:55,264 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2022-11-02 20:54:55,264 INFO L902 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2022-11-02 20:54:55,264 INFO L899 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2022-11-02 20:54:55,265 INFO L902 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2022-11-02 20:54:55,265 INFO L902 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2022-11-02 20:54:55,265 INFO L899 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2022-11-02 20:54:55,265 INFO L902 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2022-11-02 20:54:55,265 INFO L899 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2022-11-02 20:54:55,265 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2022-11-02 20:54:55,266 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-02 20:54:55,266 INFO L895 garLoopResultBuilder]: At program point L659(lines 654 661) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2 .cse0) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-02 20:54:55,266 INFO L899 garLoopResultBuilder]: For program point L457(lines 457 461) no Hoare annotation was computed. [2022-11-02 20:54:55,266 INFO L895 garLoopResultBuilder]: At program point L457-2(lines 453 464) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-11-02 20:54:55,266 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 188 214) no Hoare annotation was computed. [2022-11-02 20:54:55,267 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse3) (not (<= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2)))) [2022-11-02 20:54:55,267 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse15 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (and (<= 1 ~pumpRunning~0) .cse10 .cse13 .cse2 .cse14 .cse15 .cse11)) (.cse1 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse8 (and .cse13 .cse0 .cse2 .cse14 .cse15 .cse11)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= 0 ~systemActive~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (< |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2) .cse1 .cse2 .cse3) .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 2)) .cse6 .cse7 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse5 .cse6 .cse7 .cse9 .cse8) (let ((.cse12 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|)))) (or .cse5 (and .cse10 .cse1 .cse3 .cse11 .cse12) .cse6 .cse4 .cse7 (and .cse0 .cse1 .cse3 .cse11 .cse12) .cse9 .cse8)) (or .cse5 (not (< 1 |old(~waterLevel~0)|)) .cse6 (= ~waterLevel~0 1) .cse4)))) [2022-11-02 20:54:55,267 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-11-02 20:54:55,267 INFO L899 garLoopResultBuilder]: For program point L202-1(lines 202 208) no Hoare annotation was computed. [2022-11-02 20:54:55,268 INFO L895 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-11-02 20:54:55,268 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-11-02 20:54:55,268 INFO L895 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse1 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse2)) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) .cse3 .cse4 .cse5 .cse6) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 (= ~waterLevel~0 1) .cse2) .cse5 .cse0) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse5 .cse6)))) [2022-11-02 20:54:55,268 INFO L899 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2022-11-02 20:54:55,269 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse2 .cse1) (or .cse0 .cse1 (and .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-02 20:54:55,269 INFO L895 garLoopResultBuilder]: At program point L294-1(lines 275 299) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= ~waterLevel~0 1)) (.cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse0 .cse13 .cse14 .cse2)) (.cse12 (not (= |old(~waterLevel~0)| 2))) (.cse6 (= 0 ~systemActive~0)) (.cse8 (and .cse5 .cse13 .cse14 .cse2)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (and .cse5 .cse1))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 (and .cse5 .cse1 .cse2) .cse6 .cse7 .cse8 .cse9) (or .cse10 .cse7 (not .cse6)) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse6 .cse8 .cse9) (or .cse10 .cse11 (and (<= 1 ~pumpRunning~0) .cse1) .cse12) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse6 (= ~waterLevel~0 1) .cse7) (or .cse3 .cse4 .cse12 .cse6 .cse8) (or (not (<= |old(~waterLevel~0)| 1)) .cse10 .cse11)))) [2022-11-02 20:54:55,269 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse6 .cse2 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse8 (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse5 (and .cse1 .cse2 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-02 20:54:55,269 INFO L899 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L899 garLoopResultBuilder]: For program point L195-2(lines 191 213) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L899 garLoopResultBuilder]: For program point L658(line 658) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-11-02 20:54:55,270 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 188 214) the Hoare annotation is: (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~pumpRunning~0 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse1 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse6 .cse2 .cse7) (not (<= |old(~waterLevel~0)| 1)) .cse8) (or .cse8 (and .cse6 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse4 .cse5 (and .cse1 .cse2 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-02 20:54:55,271 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse11 (= ~pumpRunning~0 0)) (.cse12 (not .cse2)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse17 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse20 (<= ~waterLevel~0 1)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse18 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (and .cse6 .cse17 .cse20 .cse21 .cse18 .cse9)) (.cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (and .cse17 .cse11 .cse20 .cse21 .cse18 .cse9 .cse12)) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse10 (not (<= 2 |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse15 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse13 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (not (= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 (and .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse7 .cse8 .cse9 .cse12 .cse10) .cse2 .cse3 .cse4) (or .cse5 .cse13 (and .cse6 .cse7 .cse8 .cse10)) (or .cse13 (and .cse11 .cse14 .cse8 .cse12 .cse15) (and (<= 1 ~pumpRunning~0) .cse14 .cse8 .cse15) .cse16 .cse2) (let ((.cse19 (= ~waterLevel~0 1))) (or (and .cse6 .cse17 .cse18 .cse19 .cse9) .cse0 (not (< 1 |old(~waterLevel~0)|)) (and .cse17 .cse11 .cse18 .cse19 .cse9 .cse12) .cse2 (not (<= |old(~waterLevel~0)| 2)))) (or (and .cse11 .cse14 .cse8 .cse15) .cse13 .cse16 .cse12))))) [2022-11-02 20:54:55,271 INFO L895 garLoopResultBuilder]: At program point L526(lines 521 529) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse10 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse12 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and .cse8 .cse12 .cse11)) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (< |timeShift_getWaterLevel_#res#1| 2)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (and .cse4 .cse5 .cse10 .cse17 .cse7)) (.cse2 (= 0 ~systemActive~0)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse16 (and .cse5 .cse8 .cse10 .cse17 .cse7))) (and (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) (not .cse2)) (let ((.cse6 (= ~waterLevel~0 1))) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) (and .cse4 .cse5 .cse6 .cse7) (and .cse5 .cse8 .cse6 .cse7) .cse2 .cse9)) (or .cse0 .cse1 (and .cse10 .cse11) (and (<= 1 ~pumpRunning~0) .cse12 .cse11) .cse9) (or (and .cse8 .cse13 .cse11 .cse7) .cse3 .cse14 (and .cse4 .cse13 .cse11 .cse7) .cse2 .cse9 .cse15 .cse16) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 (and .cse8 .cse13)) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse14 .cse2 .cse15 .cse16)))) [2022-11-02 20:54:55,271 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 188 214) no Hoare annotation was computed. [2022-11-02 20:54:55,272 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 658) no Hoare annotation was computed. [2022-11-02 20:54:55,272 INFO L895 garLoopResultBuilder]: At program point L168(lines 117 169) the Hoare annotation is: false [2022-11-02 20:54:55,272 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 20:54:55,272 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 20:54:55,272 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 20:54:55,272 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 162) no Hoare annotation was computed. [2022-11-02 20:54:55,273 INFO L895 garLoopResultBuilder]: At program point L156-2(lines 148 163) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse4 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:54:55,273 INFO L899 garLoopResultBuilder]: For program point L119(lines 118 167) no Hoare annotation was computed. [2022-11-02 20:54:55,273 INFO L895 garLoopResultBuilder]: At program point L693(lines 688 696) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:54:55,273 INFO L899 garLoopResultBuilder]: For program point L148(lines 148 163) no Hoare annotation was computed. [2022-11-02 20:54:55,273 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 (<= ~waterLevel~0 2) .cse4))) [2022-11-02 20:54:55,273 INFO L895 garLoopResultBuilder]: At program point L685(lines 681 687) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:54:55,274 INFO L895 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse4 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 (<= ~waterLevel~0 1) .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse4 .cse0 (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:54:55,274 INFO L895 garLoopResultBuilder]: At program point L165(lines 118 167) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse7 .cse2 .cse6 .cse3 .cse4) (and .cse7 .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:54:55,274 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 20:54:55,274 INFO L899 garLoopResultBuilder]: For program point L640(lines 640 647) no Hoare annotation was computed. [2022-11-02 20:54:55,274 INFO L899 garLoopResultBuilder]: For program point L128(lines 128 134) no Hoare annotation was computed. [2022-11-02 20:54:55,274 INFO L899 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2022-11-02 20:54:55,275 INFO L899 garLoopResultBuilder]: For program point L640-2(lines 640 647) no Hoare annotation was computed. [2022-11-02 20:54:55,275 INFO L899 garLoopResultBuilder]: For program point L120(lines 120 124) no Hoare annotation was computed. [2022-11-02 20:54:55,275 INFO L902 garLoopResultBuilder]: At program point L624(lines 616 626) the Hoare annotation is: true [2022-11-02 20:54:55,275 INFO L902 garLoopResultBuilder]: At program point L649(lines 630 652) the Hoare annotation is: true [2022-11-02 20:54:55,275 INFO L895 garLoopResultBuilder]: At program point L678(lines 674 680) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:54:55,275 INFO L895 garLoopResultBuilder]: At program point L447(lines 442 449) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (<= ~waterLevel~0 2)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse5 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse5 .cse4))) [2022-11-02 20:54:55,276 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:54:55,276 INFO L895 garLoopResultBuilder]: At program point L439(lines 427 441) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2022-11-02 20:54:55,276 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-11-02 20:54:55,276 INFO L899 garLoopResultBuilder]: For program point L431-1(lines 431 437) no Hoare annotation was computed. [2022-11-02 20:54:55,276 INFO L902 garLoopResultBuilder]: At program point L171(lines 108 175) the Hoare annotation is: true [2022-11-02 20:54:55,276 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 144) no Hoare annotation was computed. [2022-11-02 20:54:55,276 INFO L899 garLoopResultBuilder]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2022-11-02 20:54:55,277 INFO L895 garLoopResultBuilder]: At program point L613(lines 609 615) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:54:55,277 INFO L895 garLoopResultBuilder]: At program point L130(line 130) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse7 .cse2 .cse6 .cse3 .cse4) (and .cse7 .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:54:55,277 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 223 247) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,277 INFO L895 garLoopResultBuilder]: At program point L539(lines 530 543) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse2))) [2022-11-02 20:54:55,277 INFO L895 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-02 20:54:55,278 INFO L899 garLoopResultBuilder]: For program point L242-1(lines 223 247) no Hoare annotation was computed. [2022-11-02 20:54:55,278 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 223 247) no Hoare annotation was computed. [2022-11-02 20:54:55,278 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2022-11-02 20:54:55,278 INFO L895 garLoopResultBuilder]: At program point L313(line 313) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse2))) [2022-11-02 20:54:55,288 INFO L895 garLoopResultBuilder]: At program point L315-2(lines 308 324) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= ~waterLevel~0 1))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (<= 1 ~pumpRunning~0) .cse0 (= ~pumpRunning~0 0) (not (= 2 ~waterLevel~0)) .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 20:54:55,288 INFO L899 garLoopResultBuilder]: For program point L313-1(line 313) no Hoare annotation was computed. [2022-11-02 20:54:55,288 INFO L899 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2022-11-02 20:54:55,289 INFO L895 garLoopResultBuilder]: At program point L404(lines 389 407) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse1)) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 20:54:55,289 INFO L895 garLoopResultBuilder]: At program point L305(lines 300 307) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-02 20:54:55,289 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 402) no Hoare annotation was computed. [2022-11-02 20:54:55,289 INFO L895 garLoopResultBuilder]: At program point L237(line 237) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0))))) [2022-11-02 20:54:55,290 INFO L899 garLoopResultBuilder]: For program point L398-2(lines 398 402) no Hoare annotation was computed. [2022-11-02 20:54:55,290 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 239) no Hoare annotation was computed. [2022-11-02 20:54:55,290 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 244) no Hoare annotation was computed. [2022-11-02 20:54:55,291 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 465 476) no Hoare annotation was computed. [2022-11-02 20:54:55,291 INFO L899 garLoopResultBuilder]: For program point L469-1(lines 465 476) no Hoare annotation was computed. [2022-11-02 20:54:55,291 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 465 476) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1 .cse2) (or (not (= ~pumpRunning~0 0)) .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-11-02 20:54:55,291 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 333 343) the Hoare annotation is: true [2022-11-02 20:54:55,292 INFO L902 garLoopResultBuilder]: At program point L494(lines 489 497) the Hoare annotation is: true [2022-11-02 20:54:55,292 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2022-11-02 20:54:55,292 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 333 343) no Hoare annotation was computed. [2022-11-02 20:54:55,296 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:54:55,303 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 20:54:55,370 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:54:55 BoogieIcfgContainer [2022-11-02 20:54:55,379 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 20:54:55,380 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:54:55,380 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:54:55,380 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:54:55,381 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:54:31" (3/4) ... [2022-11-02 20:54:55,384 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 20:54:55,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 20:54:55,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 20:54:55,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 20:54:55,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 20:54:55,391 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 20:54:55,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:54:55,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 20:54:55,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-02 20:54:55,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-02 20:54:55,392 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-02 20:54:55,411 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-11-02 20:54:55,412 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 20:54:55,413 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 20:54:55,413 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 20:54:55,414 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 20:54:55,414 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:54:55,414 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:54:55,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 20:54:55,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 20:54:55,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 20:54:55,447 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) [2022-11-02 20:54:55,450 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-02 20:54:55,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-02 20:54:55,451 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-11-02 20:54:55,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || (((((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && !(2 <= tmp))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && !(2 <= tmp)))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((\result <= waterLevel && pumpRunning == 0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) [2022-11-02 20:54:55,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(1 <= \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) [2022-11-02 20:54:55,452 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-02 20:54:55,453 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive [2022-11-02 20:54:55,453 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || (((\result <= waterLevel && pumpRunning == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result < 2))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) [2022-11-02 20:54:55,454 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-02 20:54:55,454 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(2 == waterLevel)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 20:54:55,454 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-02 20:54:55,454 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 20:54:55,455 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-02 20:54:55,455 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-02 20:54:55,483 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 20:54:55,484 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:54:55,484 INFO L158 Benchmark]: Toolchain (without parser) took 25717.77ms. Allocated memory was 119.5MB in the beginning and 281.0MB in the end (delta: 161.5MB). Free memory was 81.3MB in the beginning and 244.2MB in the end (delta: -162.9MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:54:55,484 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 119.5MB. Free memory was 98.6MB in the beginning and 98.5MB in the end (delta: 72.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:54:55,485 INFO L158 Benchmark]: CACSL2BoogieTranslator took 561.71ms. Allocated memory is still 119.5MB. Free memory was 81.1MB in the beginning and 86.3MB in the end (delta: -5.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,485 INFO L158 Benchmark]: Boogie Procedure Inliner took 85.98ms. Allocated memory is still 119.5MB. Free memory was 86.3MB in the beginning and 83.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,485 INFO L158 Benchmark]: Boogie Preprocessor took 67.22ms. Allocated memory is still 119.5MB. Free memory was 83.4MB in the beginning and 81.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,486 INFO L158 Benchmark]: RCFGBuilder took 815.92ms. Allocated memory is still 119.5MB. Free memory was 81.7MB in the beginning and 61.2MB in the end (delta: 20.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,486 INFO L158 Benchmark]: TraceAbstraction took 24070.50ms. Allocated memory was 119.5MB in the beginning and 281.0MB in the end (delta: 161.5MB). Free memory was 60.4MB in the beginning and 250.5MB in the end (delta: -190.1MB). Peak memory consumption was 137.3MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,486 INFO L158 Benchmark]: Witness Printer took 103.90ms. Allocated memory is still 281.0MB. Free memory was 250.5MB in the beginning and 244.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 20:54:55,488 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 119.5MB. Free memory was 98.6MB in the beginning and 98.5MB in the end (delta: 72.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 561.71ms. Allocated memory is still 119.5MB. Free memory was 81.1MB in the beginning and 86.3MB in the end (delta: -5.2MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 85.98ms. Allocated memory is still 119.5MB. Free memory was 86.3MB in the beginning and 83.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 67.22ms. Allocated memory is still 119.5MB. Free memory was 83.4MB in the beginning and 81.7MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 815.92ms. Allocated memory is still 119.5MB. Free memory was 81.7MB in the beginning and 61.2MB in the end (delta: 20.6MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 24070.50ms. Allocated memory was 119.5MB in the beginning and 281.0MB in the end (delta: 161.5MB). Free memory was 60.4MB in the beginning and 250.5MB in the end (delta: -190.1MB). Peak memory consumption was 137.3MB. Max. memory is 16.1GB. * Witness Printer took 103.90ms. Allocated memory is still 281.0MB. Free memory was 250.5MB in the beginning and 244.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 658]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 118 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 23.9s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 7.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3014 SdHoareTripleChecker+Valid, 4.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2963 mSDsluCounter, 6596 SdHoareTripleChecker+Invalid, 3.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4863 mSDsCounter, 1133 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4793 IncrementalHoareTripleChecker+Invalid, 5926 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1133 mSolverCounterUnsat, 1733 mSDtfsCounter, 4793 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1013 GetRequests, 835 SyntacticMatches, 11 SemanticMatches, 167 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1548 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=919occurred in iteration=10, InterpolantAutomatonStates: 149, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 453 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 2234 PreInvPairs, 2607 NumberOfFragments, 2959 HoareAnnotationTreeSize, 2234 FomulaSimplifications, 5054 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 55 FomulaSimplificationsInter, 32876 FormulaSimplificationTreeSizeReductionInter, 9.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.9s InterpolantComputationTime, 1152 NumberOfCodeBlocks, 1152 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1475 ConstructedInterpolants, 0 QuantifiedInterpolants, 2849 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1322 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 766/846 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: ((((((((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && ((((!(1 <= \old(pumpRunning)) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || ((((pumpRunning == 0 && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0)) || ((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) && ((((1 <= pumpRunning || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(2 == waterLevel)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || (((\result <= waterLevel && pumpRunning == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || (waterLevel <= 1 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || ((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result < 2))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(2 <= tmp))) || (((((pumpRunning == 0 && \result < 2) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) && !(2 <= tmp))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || ((((((\result <= waterLevel && pumpRunning == 0) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp <= waterLevel) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((pumpRunning == \old(pumpRunning) && \result < 2) && \old(waterLevel) == waterLevel) && !(2 <= tmp)))) && ((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && !(0 == systemActive)) && tmp == 2)) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) == 2)) || 0 == systemActive)) && (((((((((pumpRunning == \old(pumpRunning) && \result <= waterLevel) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((\result <= waterLevel && pumpRunning == 0) && tmp <= waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && !(0 == systemActive))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && waterLevel <= 1) && tmp == 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(waterLevel <= 2)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-02 20:54:55,558 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e97b9872-b787-46fc-834e-80f2c8731e42/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE