./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:06:03,210 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:06:03,213 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:06:03,237 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:06:03,238 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:06:03,240 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:06:03,241 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:06:03,244 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:06:03,246 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:06:03,247 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:06:03,248 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:06:03,250 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:06:03,250 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:06:03,252 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:06:03,253 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:06:03,255 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:06:03,256 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:06:03,257 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:06:03,260 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:06:03,262 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:06:03,264 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:06:03,266 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:06:03,268 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:06:03,269 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:06:03,274 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:06:03,274 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:06:03,275 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:06:03,276 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:06:03,276 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:06:03,278 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:06:03,278 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:06:03,279 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:06:03,280 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:06:03,282 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:06:03,283 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:06:03,284 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:06:03,284 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:06:03,285 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:06:03,285 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:06:03,286 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:06:03,287 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:06:03,288 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 20:06:03,316 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:06:03,317 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:06:03,317 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:06:03,318 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:06:03,318 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:06:03,319 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:06:03,320 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:06:03,320 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:06:03,320 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:06:03,321 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:06:03,321 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 20:06:03,321 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:06:03,321 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 20:06:03,322 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:06:03,322 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:06:03,322 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:06:03,323 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:06:03,323 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 20:06:03,323 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:06:03,323 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:06:03,324 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:06:03,324 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:06:03,324 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:06:03,325 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:06:03,325 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:06:03,325 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:06:03,325 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:06:03,326 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:06:03,326 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:06:03,326 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:06:03,327 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:06:03,327 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:06:03,327 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:06:03,327 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d [2022-11-18 20:06:03,673 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:06:03,708 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:06:03,711 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:06:03,712 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:06:03,715 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:06:03,716 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-11-18 20:06:03,811 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/data/69ddc9cc2/fe4378ecdc654fafad21903435049820/FLAGe04fd037f [2022-11-18 20:06:04,505 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:06:04,506 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-11-18 20:06:04,519 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/data/69ddc9cc2/fe4378ecdc654fafad21903435049820/FLAGe04fd037f [2022-11-18 20:06:04,797 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/data/69ddc9cc2/fe4378ecdc654fafad21903435049820 [2022-11-18 20:06:04,800 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:06:04,803 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:06:04,807 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:06:04,808 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:06:04,813 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:06:04,814 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:06:04" (1/1) ... [2022-11-18 20:06:04,816 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ff33d8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:04, skipping insertion in model container [2022-11-18 20:06:04,816 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:06:04" (1/1) ... [2022-11-18 20:06:04,826 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:06:04,892 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:06:05,275 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-11-18 20:06:05,357 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:06:05,368 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:06:05,469 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-11-18 20:06:05,491 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:06:05,511 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:06:05,511 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05 WrapperNode [2022-11-18 20:06:05,511 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:06:05,513 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:06:05,514 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:06:05,514 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:06:05,524 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,555 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,611 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 227 [2022-11-18 20:06:05,612 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:06:05,613 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:06:05,613 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:06:05,614 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:06:05,624 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,625 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,639 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,646 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,652 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,672 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,673 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,675 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,678 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:06:05,679 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:06:05,680 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:06:05,680 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:06:05,681 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (1/1) ... [2022-11-18 20:06:05,695 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:06:05,710 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:06:05,727 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:06:05,732 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:06:05,786 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:06:05,787 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 20:06:05,787 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 20:06:05,787 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 20:06:05,788 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 20:06:05,788 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 20:06:05,788 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 20:06:05,788 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:06:05,789 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:06:05,789 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 20:06:05,789 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 20:06:05,789 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:06:05,789 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 20:06:05,790 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 20:06:05,790 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:06:05,790 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:06:05,923 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:06:05,926 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:06:06,297 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:06:06,306 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:06:06,306 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 20:06:06,308 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:06:06 BoogieIcfgContainer [2022-11-18 20:06:06,309 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:06:06,311 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:06:06,312 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:06:06,316 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:06:06,317 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:06:04" (1/3) ... [2022-11-18 20:06:06,318 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6727456d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:06:06, skipping insertion in model container [2022-11-18 20:06:06,318 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:06:05" (2/3) ... [2022-11-18 20:06:06,318 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6727456d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:06:06, skipping insertion in model container [2022-11-18 20:06:06,319 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:06:06" (3/3) ... [2022-11-18 20:06:06,321 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product58.cil.c [2022-11-18 20:06:06,345 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:06:06,345 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:06:06,457 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:06:06,468 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3a2672be, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:06:06,468 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:06:06,474 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-18 20:06:06,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-18 20:06:06,501 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:06,502 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:06,503 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:06,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:06,513 INFO L85 PathProgramCache]: Analyzing trace with hash -644164364, now seen corresponding path program 1 times [2022-11-18 20:06:06,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:06,526 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154380318] [2022-11-18 20:06:06,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:06,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:06,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:06,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:06,828 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:06,829 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154380318] [2022-11-18 20:06:06,830 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154380318] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:06,830 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:06,831 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:06:06,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466217109] [2022-11-18 20:06:06,835 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:06,844 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 20:06:06,847 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:06,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 20:06:06,894 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:06:06,899 INFO L87 Difference]: Start difference. First operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:06,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:06,952 INFO L93 Difference]: Finished difference Result 166 states and 227 transitions. [2022-11-18 20:06:06,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 20:06:06,955 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-18 20:06:06,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:06,971 INFO L225 Difference]: With dead ends: 166 [2022-11-18 20:06:06,971 INFO L226 Difference]: Without dead ends: 78 [2022-11-18 20:06:06,975 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:06:06,980 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:06,983 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:06:07,003 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-11-18 20:06:07,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-11-18 20:06:07,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 20:06:07,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2022-11-18 20:06:07,040 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 19 [2022-11-18 20:06:07,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:07,041 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2022-11-18 20:06:07,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:07,042 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2022-11-18 20:06:07,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-18 20:06:07,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:07,045 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:07,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:06:07,045 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:07,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:07,047 INFO L85 PathProgramCache]: Analyzing trace with hash -1321297108, now seen corresponding path program 1 times [2022-11-18 20:06:07,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:07,048 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [883753992] [2022-11-18 20:06:07,048 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:07,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:07,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:07,219 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:07,219 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:07,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [883753992] [2022-11-18 20:06:07,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [883753992] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:07,220 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:07,220 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:06:07,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1276766032] [2022-11-18 20:06:07,221 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:07,222 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:06:07,231 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:07,232 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:06:07,232 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:06:07,232 INFO L87 Difference]: Start difference. First operand 78 states and 101 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:07,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:07,258 INFO L93 Difference]: Finished difference Result 121 states and 157 transitions. [2022-11-18 20:06:07,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:06:07,260 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-18 20:06:07,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:07,266 INFO L225 Difference]: With dead ends: 121 [2022-11-18 20:06:07,266 INFO L226 Difference]: Without dead ends: 69 [2022-11-18 20:06:07,270 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:06:07,273 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 13 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:07,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 159 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:06:07,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-18 20:06:07,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-18 20:06:07,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-18 20:06:07,299 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions. [2022-11-18 20:06:07,305 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 20 [2022-11-18 20:06:07,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:07,307 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 89 transitions. [2022-11-18 20:06:07,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:07,307 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions. [2022-11-18 20:06:07,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 20:06:07,311 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:07,312 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:07,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:06:07,312 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:07,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:07,320 INFO L85 PathProgramCache]: Analyzing trace with hash 2055869510, now seen corresponding path program 1 times [2022-11-18 20:06:07,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:07,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1982506901] [2022-11-18 20:06:07,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:07,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:07,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:07,478 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:07,478 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:07,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1982506901] [2022-11-18 20:06:07,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1982506901] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:07,480 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:07,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:06:07,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948965922] [2022-11-18 20:06:07,481 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:07,482 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:06:07,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:07,483 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:06:07,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:06:07,484 INFO L87 Difference]: Start difference. First operand 69 states and 89 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:07,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:07,533 INFO L93 Difference]: Finished difference Result 131 states and 172 transitions. [2022-11-18 20:06:07,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:06:07,534 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-18 20:06:07,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:07,538 INFO L225 Difference]: With dead ends: 131 [2022-11-18 20:06:07,538 INFO L226 Difference]: Without dead ends: 69 [2022-11-18 20:06:07,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:06:07,540 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 69 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:07,543 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 87 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:06:07,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-11-18 20:06:07,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-11-18 20:06:07,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-18 20:06:07,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2022-11-18 20:06:07,569 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 25 [2022-11-18 20:06:07,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:07,570 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2022-11-18 20:06:07,570 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:07,571 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2022-11-18 20:06:07,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-11-18 20:06:07,573 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:07,574 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:07,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:06:07,575 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:07,575 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:07,580 INFO L85 PathProgramCache]: Analyzing trace with hash 86695610, now seen corresponding path program 1 times [2022-11-18 20:06:07,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:07,581 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [518739406] [2022-11-18 20:06:07,581 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:07,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:07,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:07,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:07,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:07,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:07,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:07,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:07,726 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:07,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [518739406] [2022-11-18 20:06:07,727 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [518739406] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:07,727 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:07,727 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:06:07,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495426555] [2022-11-18 20:06:07,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:07,728 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:06:07,728 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:07,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:06:07,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:06:07,730 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:07,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:07,901 INFO L93 Difference]: Finished difference Result 195 states and 249 transitions. [2022-11-18 20:06:07,901 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:06:07,902 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2022-11-18 20:06:07,902 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:07,903 INFO L225 Difference]: With dead ends: 195 [2022-11-18 20:06:07,903 INFO L226 Difference]: Without dead ends: 133 [2022-11-18 20:06:07,904 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:06:07,905 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 159 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:07,906 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 245 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:06:07,907 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2022-11-18 20:06:07,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 127. [2022-11-18 20:06:07,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 103 states have (on average 1.2718446601941749) internal successors, (131), 111 states have internal predecessors, (131), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-11-18 20:06:07,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 156 transitions. [2022-11-18 20:06:07,941 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 156 transitions. Word has length 35 [2022-11-18 20:06:07,942 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:07,942 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 156 transitions. [2022-11-18 20:06:07,942 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:07,942 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 156 transitions. [2022-11-18 20:06:07,943 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-18 20:06:07,944 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:07,944 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:07,944 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:06:07,945 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:07,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:07,946 INFO L85 PathProgramCache]: Analyzing trace with hash 585874736, now seen corresponding path program 1 times [2022-11-18 20:06:07,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:07,947 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [550806671] [2022-11-18 20:06:07,947 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:07,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:07,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:08,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:06:08,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:08,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:08,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [550806671] [2022-11-18 20:06:08,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [550806671] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:08,186 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:08,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:06:08,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915374118] [2022-11-18 20:06:08,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:08,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:06:08,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:08,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:06:08,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:06:08,189 INFO L87 Difference]: Start difference. First operand 127 states and 156 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:08,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:08,509 INFO L93 Difference]: Finished difference Result 376 states and 485 transitions. [2022-11-18 20:06:08,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-18 20:06:08,510 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-18 20:06:08,512 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:08,520 INFO L225 Difference]: With dead ends: 376 [2022-11-18 20:06:08,521 INFO L226 Difference]: Without dead ends: 256 [2022-11-18 20:06:08,527 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-11-18 20:06:08,530 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 205 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:08,531 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 332 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:06:08,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-11-18 20:06:08,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 208. [2022-11-18 20:06:08,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 169 states have (on average 1.272189349112426) internal successors, (215), 180 states have internal predecessors, (215), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-11-18 20:06:08,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 261 transitions. [2022-11-18 20:06:08,600 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 261 transitions. Word has length 41 [2022-11-18 20:06:08,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:08,600 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 261 transitions. [2022-11-18 20:06:08,600 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:08,601 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 261 transitions. [2022-11-18 20:06:08,608 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-18 20:06:08,611 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:08,611 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:08,612 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:06:08,612 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:08,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:08,614 INFO L85 PathProgramCache]: Analyzing trace with hash -1714947854, now seen corresponding path program 1 times [2022-11-18 20:06:08,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:08,615 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1166981102] [2022-11-18 20:06:08,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:08,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:08,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:08,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:06:08,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:08,847 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:08,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:08,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1166981102] [2022-11-18 20:06:08,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1166981102] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:08,848 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:08,848 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:06:08,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907021369] [2022-11-18 20:06:08,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:08,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:06:08,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:08,850 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:06:08,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:06:08,851 INFO L87 Difference]: Start difference. First operand 208 states and 261 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:09,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:09,090 INFO L93 Difference]: Finished difference Result 407 states and 514 transitions. [2022-11-18 20:06:09,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:06:09,091 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-18 20:06:09,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:09,093 INFO L225 Difference]: With dead ends: 407 [2022-11-18 20:06:09,094 INFO L226 Difference]: Without dead ends: 206 [2022-11-18 20:06:09,095 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:06:09,096 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 135 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:09,097 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 286 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:06:09,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2022-11-18 20:06:09,123 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 204. [2022-11-18 20:06:09,124 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 165 states have (on average 1.2545454545454546) internal successors, (207), 176 states have internal predecessors, (207), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-11-18 20:06:09,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 253 transitions. [2022-11-18 20:06:09,126 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 253 transitions. Word has length 41 [2022-11-18 20:06:09,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:09,127 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 253 transitions. [2022-11-18 20:06:09,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 20:06:09,127 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 253 transitions. [2022-11-18 20:06:09,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 20:06:09,129 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:09,129 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:09,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:06:09,130 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:09,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:09,130 INFO L85 PathProgramCache]: Analyzing trace with hash -318970168, now seen corresponding path program 1 times [2022-11-18 20:06:09,131 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:09,131 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2052911455] [2022-11-18 20:06:09,131 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:09,131 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:09,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:09,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:06:09,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:06:09,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:09,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:09,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2052911455] [2022-11-18 20:06:09,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2052911455] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:09,268 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:09,268 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 20:06:09,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740864193] [2022-11-18 20:06:09,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:09,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 20:06:09,270 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:09,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 20:06:09,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:06:09,271 INFO L87 Difference]: Start difference. First operand 204 states and 253 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:06:09,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:09,628 INFO L93 Difference]: Finished difference Result 469 states and 581 transitions. [2022-11-18 20:06:09,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-18 20:06:09,629 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 45 [2022-11-18 20:06:09,629 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:09,631 INFO L225 Difference]: With dead ends: 469 [2022-11-18 20:06:09,631 INFO L226 Difference]: Without dead ends: 272 [2022-11-18 20:06:09,632 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2022-11-18 20:06:09,633 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 241 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:09,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 302 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:06:09,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-11-18 20:06:09,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-11-18 20:06:09,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2424242424242424) internal successors, (246), 213 states have internal predecessors, (246), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2022-11-18 20:06:09,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 298 transitions. [2022-11-18 20:06:09,688 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 298 transitions. Word has length 45 [2022-11-18 20:06:09,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:09,689 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 298 transitions. [2022-11-18 20:06:09,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:06:09,690 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 298 transitions. [2022-11-18 20:06:09,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-18 20:06:09,691 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:09,691 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:09,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:06:09,692 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:09,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:09,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1598724404, now seen corresponding path program 1 times [2022-11-18 20:06:09,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:09,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [715742731] [2022-11-18 20:06:09,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:09,694 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:09,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:09,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:06:09,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:06:09,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:09,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:09,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:09,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [715742731] [2022-11-18 20:06:09,820 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [715742731] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:09,820 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:09,821 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:06:09,821 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394710957] [2022-11-18 20:06:09,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:09,822 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:06:09,822 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:09,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:06:09,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:06:09,823 INFO L87 Difference]: Start difference. First operand 242 states and 298 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:06:10,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:10,245 INFO L93 Difference]: Finished difference Result 266 states and 323 transitions. [2022-11-18 20:06:10,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-18 20:06:10,246 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 45 [2022-11-18 20:06:10,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:10,248 INFO L225 Difference]: With dead ends: 266 [2022-11-18 20:06:10,248 INFO L226 Difference]: Without dead ends: 264 [2022-11-18 20:06:10,249 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=274, Unknown=0, NotChecked=0, Total=380 [2022-11-18 20:06:10,250 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 194 mSDsluCounter, 309 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:10,250 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 381 Invalid, 298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:06:10,251 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2022-11-18 20:06:10,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 242. [2022-11-18 20:06:10,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2272727272727273) internal successors, (243), 213 states have internal predecessors, (243), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2022-11-18 20:06:10,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 295 transitions. [2022-11-18 20:06:10,294 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 295 transitions. Word has length 45 [2022-11-18 20:06:10,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:10,294 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 295 transitions. [2022-11-18 20:06:10,294 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 20:06:10,295 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 295 transitions. [2022-11-18 20:06:10,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:06:10,296 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:10,296 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:10,296 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:06:10,296 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:10,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:10,297 INFO L85 PathProgramCache]: Analyzing trace with hash -1519506341, now seen corresponding path program 1 times [2022-11-18 20:06:10,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:10,297 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711238444] [2022-11-18 20:06:10,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:10,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:10,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:10,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:10,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:10,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:06:10,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:10,409 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:10,409 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:10,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711238444] [2022-11-18 20:06:10,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711238444] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:10,410 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:10,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:06:10,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043075932] [2022-11-18 20:06:10,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:10,410 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:06:10,411 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:10,411 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:06:10,411 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:06:10,412 INFO L87 Difference]: Start difference. First operand 242 states and 295 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:10,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:10,828 INFO L93 Difference]: Finished difference Result 473 states and 601 transitions. [2022-11-18 20:06:10,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-18 20:06:10,830 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-11-18 20:06:10,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:10,834 INFO L225 Difference]: With dead ends: 473 [2022-11-18 20:06:10,834 INFO L226 Difference]: Without dead ends: 316 [2022-11-18 20:06:10,835 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:06:10,838 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 173 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 319 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 319 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:10,838 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 421 Invalid, 355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 319 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 20:06:10,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-11-18 20:06:10,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 311. [2022-11-18 20:06:10,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2244094488188977) internal successors, (311), 271 states have internal predecessors, (311), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2022-11-18 20:06:10,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 388 transitions. [2022-11-18 20:06:10,888 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 388 transitions. Word has length 47 [2022-11-18 20:06:10,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:10,888 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 388 transitions. [2022-11-18 20:06:10,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:10,889 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 388 transitions. [2022-11-18 20:06:10,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:06:10,891 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:10,891 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:10,891 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 20:06:10,892 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:10,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:10,892 INFO L85 PathProgramCache]: Analyzing trace with hash 1292286815, now seen corresponding path program 1 times [2022-11-18 20:06:10,893 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:10,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845283368] [2022-11-18 20:06:10,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:10,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:10,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:10,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:10,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:10,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:06:10,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,048 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:11,048 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:11,048 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845283368] [2022-11-18 20:06:11,048 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845283368] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:11,049 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:11,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:06:11,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509722002] [2022-11-18 20:06:11,049 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:11,050 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:06:11,050 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:11,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:06:11,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:06:11,051 INFO L87 Difference]: Start difference. First operand 311 states and 388 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:11,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:11,310 INFO L93 Difference]: Finished difference Result 623 states and 787 transitions. [2022-11-18 20:06:11,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 20:06:11,311 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-11-18 20:06:11,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:11,313 INFO L225 Difference]: With dead ends: 623 [2022-11-18 20:06:11,314 INFO L226 Difference]: Without dead ends: 319 [2022-11-18 20:06:11,315 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:06:11,316 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 136 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:11,316 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 321 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:06:11,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2022-11-18 20:06:11,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 311. [2022-11-18 20:06:11,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 271 states have internal predecessors, (309), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2022-11-18 20:06:11,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 386 transitions. [2022-11-18 20:06:11,355 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 386 transitions. Word has length 47 [2022-11-18 20:06:11,356 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:11,356 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 386 transitions. [2022-11-18 20:06:11,356 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:11,356 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 386 transitions. [2022-11-18 20:06:11,357 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:06:11,357 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:11,357 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:11,358 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 20:06:11,358 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:11,358 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:11,358 INFO L85 PathProgramCache]: Analyzing trace with hash -701857891, now seen corresponding path program 1 times [2022-11-18 20:06:11,358 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:11,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509333545] [2022-11-18 20:06:11,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:11,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:11,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:11,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:06:11,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,446 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:11,446 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:11,446 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509333545] [2022-11-18 20:06:11,447 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509333545] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:11,447 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:11,447 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:06:11,447 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024443830] [2022-11-18 20:06:11,447 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:11,448 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:06:11,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:11,448 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:06:11,448 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:06:11,449 INFO L87 Difference]: Start difference. First operand 311 states and 386 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:11,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:11,656 INFO L93 Difference]: Finished difference Result 561 states and 704 transitions. [2022-11-18 20:06:11,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:06:11,658 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-11-18 20:06:11,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:11,660 INFO L225 Difference]: With dead ends: 561 [2022-11-18 20:06:11,660 INFO L226 Difference]: Without dead ends: 257 [2022-11-18 20:06:11,662 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:06:11,662 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 140 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:11,663 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 255 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:06:11,664 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2022-11-18 20:06:11,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 255. [2022-11-18 20:06:11,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 206 states have (on average 1.2087378640776698) internal successors, (249), 219 states have internal predecessors, (249), 23 states have call successors, (23), 22 states have call predecessors, (23), 25 states have return successors, (40), 23 states have call predecessors, (40), 23 states have call successors, (40) [2022-11-18 20:06:11,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 312 transitions. [2022-11-18 20:06:11,708 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 312 transitions. Word has length 47 [2022-11-18 20:06:11,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:11,709 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 312 transitions. [2022-11-18 20:06:11,709 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 20:06:11,709 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 312 transitions. [2022-11-18 20:06:11,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-11-18 20:06:11,710 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:11,711 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:11,711 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-18 20:06:11,711 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:11,711 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:11,711 INFO L85 PathProgramCache]: Analyzing trace with hash 2145897221, now seen corresponding path program 1 times [2022-11-18 20:06:11,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:11,712 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1488058745] [2022-11-18 20:06:11,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:11,712 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:11,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:11,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:11,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:06:11,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-18 20:06:11,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:11,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:11,902 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-18 20:06:11,902 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:11,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1488058745] [2022-11-18 20:06:11,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1488058745] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:06:11,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [648628876] [2022-11-18 20:06:11,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:11,903 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:06:11,904 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:06:11,907 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:06:11,916 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:06:12,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:12,034 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-18 20:06:12,042 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:06:12,222 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:06:12,222 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:06:12,414 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-18 20:06:12,415 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [648628876] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:06:12,415 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:06:12,415 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-11-18 20:06:12,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1546651159] [2022-11-18 20:06:12,416 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:06:12,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-18 20:06:12,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:12,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-18 20:06:12,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-18 20:06:12,418 INFO L87 Difference]: Start difference. First operand 255 states and 312 transitions. Second operand has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-18 20:06:13,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:13,119 INFO L93 Difference]: Finished difference Result 590 states and 758 transitions. [2022-11-18 20:06:13,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-11-18 20:06:13,120 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 82 [2022-11-18 20:06:13,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:13,123 INFO L225 Difference]: With dead ends: 590 [2022-11-18 20:06:13,123 INFO L226 Difference]: Without dead ends: 383 [2022-11-18 20:06:13,124 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 170 SyntacticMatches, 8 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 114 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-11-18 20:06:13,125 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 247 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 404 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 464 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:13,125 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 519 Invalid, 464 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 404 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 20:06:13,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383 states. [2022-11-18 20:06:13,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383 to 350. [2022-11-18 20:06:13,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 280 states have (on average 1.2107142857142856) internal successors, (339), 298 states have internal predecessors, (339), 33 states have call successors, (33), 32 states have call predecessors, (33), 36 states have return successors, (60), 31 states have call predecessors, (60), 33 states have call successors, (60) [2022-11-18 20:06:13,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 432 transitions. [2022-11-18 20:06:13,162 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 432 transitions. Word has length 82 [2022-11-18 20:06:13,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:13,162 INFO L495 AbstractCegarLoop]: Abstraction has 350 states and 432 transitions. [2022-11-18 20:06:13,163 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-18 20:06:13,163 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 432 transitions. [2022-11-18 20:06:13,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-11-18 20:06:13,171 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:13,172 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:13,184 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:06:13,378 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-18 20:06:13,378 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:13,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:13,379 INFO L85 PathProgramCache]: Analyzing trace with hash 1100274715, now seen corresponding path program 2 times [2022-11-18 20:06:13,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:13,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351498070] [2022-11-18 20:06:13,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:13,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:13,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:13,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:13,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:06:13,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,691 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:06:13,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:06:13,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:13,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-11-18 20:06:13,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:13,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:13,835 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-18 20:06:13,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:13,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351498070] [2022-11-18 20:06:13,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351498070] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:06:13,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1375515156] [2022-11-18 20:06:13,836 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-18 20:06:13,836 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:06:13,837 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:06:13,842 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:06:13,861 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:06:13,979 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-18 20:06:13,979 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-18 20:06:13,982 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-18 20:06:13,991 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:06:14,192 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-18 20:06:14,192 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:06:14,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1375515156] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:14,193 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:06:14,193 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-11-18 20:06:14,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1864124566] [2022-11-18 20:06:14,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:14,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:06:14,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:14,196 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:06:14,196 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:06:14,197 INFO L87 Difference]: Start difference. First operand 350 states and 432 transitions. Second operand has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-18 20:06:14,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:14,580 INFO L93 Difference]: Finished difference Result 931 states and 1192 transitions. [2022-11-18 20:06:14,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 20:06:14,581 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 117 [2022-11-18 20:06:14,581 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:14,585 INFO L225 Difference]: With dead ends: 931 [2022-11-18 20:06:14,586 INFO L226 Difference]: Without dead ends: 628 [2022-11-18 20:06:14,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 130 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2022-11-18 20:06:14,589 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 210 mSDsluCounter, 417 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 557 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:14,589 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 557 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:06:14,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 628 states. [2022-11-18 20:06:14,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 628 to 567. [2022-11-18 20:06:14,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 454 states have (on average 1.2048458149779735) internal successors, (547), 479 states have internal predecessors, (547), 54 states have call successors, (54), 53 states have call predecessors, (54), 58 states have return successors, (95), 50 states have call predecessors, (95), 54 states have call successors, (95) [2022-11-18 20:06:14,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 696 transitions. [2022-11-18 20:06:14,690 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 696 transitions. Word has length 117 [2022-11-18 20:06:14,691 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:14,691 INFO L495 AbstractCegarLoop]: Abstraction has 567 states and 696 transitions. [2022-11-18 20:06:14,692 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-18 20:06:14,692 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 696 transitions. [2022-11-18 20:06:14,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-11-18 20:06:14,695 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:06:14,695 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:14,712 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:06:14,901 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:06:14,902 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:06:14,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:06:14,903 INFO L85 PathProgramCache]: Analyzing trace with hash 1976293721, now seen corresponding path program 1 times [2022-11-18 20:06:14,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:06:14,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770016417] [2022-11-18 20:06:14,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:06:14,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:06:14,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:14,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:06:14,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:14,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:06:14,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:06:15,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-18 20:06:15,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-18 20:06:15,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:15,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-11-18 20:06:15,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:06:15,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:06:15,059 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-11-18 20:06:15,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:06:15,060 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770016417] [2022-11-18 20:06:15,060 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770016417] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:06:15,060 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:06:15,060 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 20:06:15,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1500343594] [2022-11-18 20:06:15,061 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:06:15,061 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 20:06:15,062 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:06:15,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 20:06:15,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:06:15,063 INFO L87 Difference]: Start difference. First operand 567 states and 696 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-18 20:06:15,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:06:15,290 INFO L93 Difference]: Finished difference Result 777 states and 943 transitions. [2022-11-18 20:06:15,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:06:15,291 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 117 [2022-11-18 20:06:15,291 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:06:15,292 INFO L225 Difference]: With dead ends: 777 [2022-11-18 20:06:15,292 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 20:06:15,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:06:15,294 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 153 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 206 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 206 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:06:15,295 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 254 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 206 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:06:15,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 20:06:15,296 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 20:06:15,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:06:15,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 20:06:15,296 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2022-11-18 20:06:15,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:06:15,297 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 20:06:15,297 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-18 20:06:15,297 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 20:06:15,297 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 20:06:15,300 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 20:06:15,301 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-11-18 20:06:15,303 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 20:06:18,094 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-11-18 20:06:18,095 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-11-18 20:06:18,095 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 487 498) the Hoare annotation is: true [2022-11-18 20:06:18,095 INFO L899 garLoopResultBuilder]: For program point L491-1(lines 487 498) no Hoare annotation was computed. [2022-11-18 20:06:18,095 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2022-11-18 20:06:18,096 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,096 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2022-11-18 20:06:18,096 INFO L899 garLoopResultBuilder]: For program point L449(line 449) no Hoare annotation was computed. [2022-11-18 20:06:18,096 INFO L895 garLoopResultBuilder]: At program point L536(lines 531 539) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse2 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-11-18 20:06:18,097 INFO L895 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,097 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,098 INFO L895 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not .cse4)) (.cse3 (and (<= 2 ~waterLevel~0) .cse4 .cse1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1) .cse2 .cse3 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-11-18 20:06:18,098 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2022-11-18 20:06:18,098 INFO L899 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2022-11-18 20:06:18,098 INFO L899 garLoopResultBuilder]: For program point L908-2(lines 908 912) no Hoare annotation was computed. [2022-11-18 20:06:18,098 INFO L895 garLoopResultBuilder]: At program point L450(lines 445 452) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,099 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-11-18 20:06:18,099 INFO L895 garLoopResultBuilder]: At program point L467-2(lines 463 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,099 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-11-18 20:06:18,099 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2022-11-18 20:06:18,099 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2022-11-18 20:06:18,100 INFO L895 garLoopResultBuilder]: At program point L914(lines 899 917) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,100 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 707 730) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))))) [2022-11-18 20:06:18,100 INFO L895 garLoopResultBuilder]: At program point L559(lines 554 562) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,100 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-11-18 20:06:18,101 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 440) no Hoare annotation was computed. [2022-11-18 20:06:18,101 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-11-18 20:06:18,101 INFO L895 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse6)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (and (<= 2 ~waterLevel~0) .cse6 .cse2 (<= 2 |timeShift_getWaterLevel_#res#1|) (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse3 .cse4 .cse5) (or .cse3 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4 .cse5)))) [2022-11-18 20:06:18,101 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 449) no Hoare annotation was computed. [2022-11-18 20:06:18,102 INFO L895 garLoopResultBuilder]: At program point L840(lines 835 843) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,102 INFO L899 garLoopResultBuilder]: For program point L577(line 577) no Hoare annotation was computed. [2022-11-18 20:06:18,102 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 566 595) no Hoare annotation was computed. [2022-11-18 20:06:18,102 INFO L902 garLoopResultBuilder]: At program point L576-2(lines 576 590) the Hoare annotation is: true [2022-11-18 20:06:18,102 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 566 595) the Hoare annotation is: true [2022-11-18 20:06:18,103 INFO L902 garLoopResultBuilder]: At program point L572(line 572) the Hoare annotation is: true [2022-11-18 20:06:18,103 INFO L899 garLoopResultBuilder]: For program point L572-1(line 572) no Hoare annotation was computed. [2022-11-18 20:06:18,103 INFO L902 garLoopResultBuilder]: At program point L591(lines 566 595) the Hoare annotation is: true [2022-11-18 20:06:18,103 INFO L899 garLoopResultBuilder]: For program point L587(line 587) no Hoare annotation was computed. [2022-11-18 20:06:18,103 INFO L899 garLoopResultBuilder]: For program point L580(lines 580 584) no Hoare annotation was computed. [2022-11-18 20:06:18,104 INFO L902 garLoopResultBuilder]: At program point L580-1(lines 580 584) the Hoare annotation is: true [2022-11-18 20:06:18,104 INFO L895 garLoopResultBuilder]: At program point L923(lines 918 925) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-18 20:06:18,104 INFO L895 garLoopResultBuilder]: At program point L985(lines 936 986) the Hoare annotation is: false [2022-11-18 20:06:18,104 INFO L895 garLoopResultBuilder]: At program point L696(lines 691 699) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:06:18,104 INFO L895 garLoopResultBuilder]: At program point L688(lines 684 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:06:18,105 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 20:06:18,105 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 20:06:18,105 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-11-18 20:06:18,105 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 20:06:18,105 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2022-11-18 20:06:18,106 INFO L895 garLoopResultBuilder]: At program point L982(lines 937 984) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-18 20:06:18,106 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-18 20:06:18,106 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 659) no Hoare annotation was computed. [2022-11-18 20:06:18,106 INFO L899 garLoopResultBuilder]: For program point L652-2(lines 652 659) no Hoare annotation was computed. [2022-11-18 20:06:18,106 INFO L895 garLoopResultBuilder]: At program point L681(lines 677 683) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:06:18,107 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 20:06:18,107 INFO L902 garLoopResultBuilder]: At program point L636(lines 629 638) the Hoare annotation is: true [2022-11-18 20:06:18,107 INFO L902 garLoopResultBuilder]: At program point L661(lines 642 664) the Hoare annotation is: true [2022-11-18 20:06:18,107 INFO L899 garLoopResultBuilder]: For program point L975(lines 975 979) no Hoare annotation was computed. [2022-11-18 20:06:18,107 INFO L895 garLoopResultBuilder]: At program point L975-2(lines 967 980) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-18 20:06:18,108 INFO L899 garLoopResultBuilder]: For program point L938(lines 937 984) no Hoare annotation was computed. [2022-11-18 20:06:18,108 INFO L899 garLoopResultBuilder]: For program point L967(lines 967 980) no Hoare annotation was computed. [2022-11-18 20:06:18,108 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-18 20:06:18,108 INFO L902 garLoopResultBuilder]: At program point L988(lines 927 992) the Hoare annotation is: true [2022-11-18 20:06:18,108 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2022-11-18 20:06:18,109 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2022-11-18 20:06:18,109 INFO L895 garLoopResultBuilder]: At program point L625(lines 621 627) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 20:06:18,109 INFO L899 garLoopResultBuilder]: For program point L939(lines 939 943) no Hoare annotation was computed. [2022-11-18 20:06:18,109 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2022-11-18 20:06:18,109 INFO L895 garLoopResultBuilder]: At program point L795(lines 790 797) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-11-18 20:06:18,110 INFO L895 garLoopResultBuilder]: At program point L504(lines 499 507) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (not (<= 2 ~waterLevel~0))))) [2022-11-18 20:06:18,110 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-18 20:06:18,110 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-11-18 20:06:18,110 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 812) no Hoare annotation was computed. [2022-11-18 20:06:18,111 INFO L895 garLoopResultBuilder]: At program point L806-2(lines 799 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-11-18 20:06:18,111 INFO L899 garLoopResultBuilder]: For program point L544(lines 544 550) no Hoare annotation was computed. [2022-11-18 20:06:18,111 INFO L895 garLoopResultBuilder]: At program point L895(lines 880 898) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse5 (and .cse2 .cse3 (not .cse4) .cse6 .cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1) .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (<= 1 ~waterLevel~0)) .cse5) (or .cse0 .cse1 (not .cse6) .cse5)))) [2022-11-18 20:06:18,111 INFO L895 garLoopResultBuilder]: At program point L831(lines 824 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (not (<= 2 ~waterLevel~0))))) [2022-11-18 20:06:18,112 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-11-18 20:06:18,112 INFO L899 garLoopResultBuilder]: For program point L889(lines 889 893) no Hoare annotation was computed. [2022-11-18 20:06:18,112 INFO L899 garLoopResultBuilder]: For program point L889-2(lines 889 893) no Hoare annotation was computed. [2022-11-18 20:06:18,112 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-11-18 20:06:18,112 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2022-11-18 20:06:18,113 INFO L899 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2022-11-18 20:06:18,113 INFO L895 garLoopResultBuilder]: At program point L549(lines 540 553) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-11-18 20:06:18,113 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2022-11-18 20:06:18,113 INFO L899 garLoopResultBuilder]: For program point L479-1(lines 475 486) no Hoare annotation was computed. [2022-11-18 20:06:18,114 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 475 486) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-18 20:06:18,117 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:06:18,120 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:06:18,148 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:06:18 BoogieIcfgContainer [2022-11-18 20:06:18,148 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:06:18,149 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:06:18,149 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:06:18,149 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:06:18,150 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:06:06" (3/4) ... [2022-11-18 20:06:18,153 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 20:06:18,159 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 20:06:18,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 20:06:18,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 20:06:18,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 20:06:18,160 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:06:18,161 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 20:06:18,167 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-11-18 20:06:18,168 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 20:06:18,169 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 20:06:18,169 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:06:18,170 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:06:18,199 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,201 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) [2022-11-18 20:06:18,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,203 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) [2022-11-18 20:06:18,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,204 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,205 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) [2022-11-18 20:06:18,205 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,206 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-11-18 20:06:18,206 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) [2022-11-18 20:06:18,206 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) [2022-11-18 20:06:18,207 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) [2022-11-18 20:06:18,210 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) [2022-11-18 20:06:18,273 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:06:18,273 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:06:18,274 INFO L158 Benchmark]: Toolchain (without parser) took 13470.82ms. Allocated memory was 94.4MB in the beginning and 207.6MB in the end (delta: 113.2MB). Free memory was 59.1MB in the beginning and 132.7MB in the end (delta: -73.6MB). Peak memory consumption was 40.2MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,274 INFO L158 Benchmark]: CDTParser took 0.35ms. Allocated memory is still 94.4MB. Free memory was 67.3MB in the beginning and 67.2MB in the end (delta: 25.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:06:18,275 INFO L158 Benchmark]: CACSL2BoogieTranslator took 704.84ms. Allocated memory is still 94.4MB. Free memory was 59.0MB in the beginning and 62.6MB in the end (delta: -3.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,275 INFO L158 Benchmark]: Boogie Procedure Inliner took 99.06ms. Allocated memory is still 94.4MB. Free memory was 62.6MB in the beginning and 60.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,276 INFO L158 Benchmark]: Boogie Preprocessor took 65.48ms. Allocated memory is still 94.4MB. Free memory was 60.5MB in the beginning and 58.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,276 INFO L158 Benchmark]: RCFGBuilder took 629.73ms. Allocated memory is still 94.4MB. Free memory was 58.8MB in the beginning and 42.0MB in the end (delta: 16.8MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,276 INFO L158 Benchmark]: TraceAbstraction took 11836.84ms. Allocated memory was 94.4MB in the beginning and 207.6MB in the end (delta: 113.2MB). Free memory was 41.6MB in the beginning and 138.0MB in the end (delta: -96.4MB). Peak memory consumption was 78.0MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,277 INFO L158 Benchmark]: Witness Printer took 124.57ms. Allocated memory is still 207.6MB. Free memory was 138.0MB in the beginning and 132.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 20:06:18,279 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.35ms. Allocated memory is still 94.4MB. Free memory was 67.3MB in the beginning and 67.2MB in the end (delta: 25.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 704.84ms. Allocated memory is still 94.4MB. Free memory was 59.0MB in the beginning and 62.6MB in the end (delta: -3.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 99.06ms. Allocated memory is still 94.4MB. Free memory was 62.6MB in the beginning and 60.5MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 65.48ms. Allocated memory is still 94.4MB. Free memory was 60.5MB in the beginning and 58.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 629.73ms. Allocated memory is still 94.4MB. Free memory was 58.8MB in the beginning and 42.0MB in the end (delta: 16.8MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 11836.84ms. Allocated memory was 94.4MB in the beginning and 207.6MB in the end (delta: 113.2MB). Free memory was 41.6MB in the beginning and 138.0MB in the end (delta: -96.4MB). Peak memory consumption was 78.0MB. Max. memory is 16.1GB. * Witness Printer took 124.57ms. Allocated memory is still 207.6MB. Free memory was 138.0MB in the beginning and 132.7MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 449]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 11.7s, OverallIterations: 14, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.1s, AutomataDifference: 4.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2097 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2075 mSDsluCounter, 4229 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3064 mSDsCounter, 352 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2256 IncrementalHoareTripleChecker+Invalid, 2608 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 352 mSolverCounterUnsat, 1165 mSDtfsCounter, 2256 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 529 GetRequests, 380 SyntacticMatches, 11 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 318 ImplicationChecksByTransitivity, 1.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=567occurred in iteration=13, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 217 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1337 PreInvPairs, 1426 NumberOfFragments, 1136 HoareAnnotationTreeSize, 1337 FomulaSimplifications, 1277 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 42 FomulaSimplificationsInter, 3537 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 927 NumberOfCodeBlocks, 927 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 992 ConstructedInterpolants, 0 QuantifiedInterpolants, 1903 SizeOfPredicates, 8 NumberOfNonLiveVariables, 709 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 264/294 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 554]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 629]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) - InvariantResult [Line: 684]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-18 20:06:18,314 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a3439446-d0ea-4882-a23a-f5f282710684/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE