./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 6e630fd4f7f92b97a7712eadcda02cdabe0d357899fc48fb3e7885213e7a8b80 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 21:05:57,592 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 21:05:57,594 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 21:05:57,637 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 21:05:57,638 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 21:05:57,642 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 21:05:57,645 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 21:05:57,649 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 21:05:57,652 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 21:05:57,655 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 21:05:57,656 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 21:05:57,660 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 21:05:57,661 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 21:05:57,666 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 21:05:57,668 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 21:05:57,670 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 21:05:57,672 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 21:05:57,674 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 21:05:57,676 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 21:05:57,681 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 21:05:57,685 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 21:05:57,687 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 21:05:57,690 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 21:05:57,691 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 21:05:57,701 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 21:05:57,704 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 21:05:57,704 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 21:05:57,706 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 21:05:57,707 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 21:05:57,708 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 21:05:57,710 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 21:05:57,712 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 21:05:57,714 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 21:05:57,715 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 21:05:57,716 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 21:05:57,717 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 21:05:57,718 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 21:05:57,718 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 21:05:57,718 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 21:05:57,719 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 21:05:57,720 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 21:05:57,721 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 21:05:57,763 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 21:05:57,763 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 21:05:57,764 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 21:05:57,764 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 21:05:57,765 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 21:05:57,765 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 21:05:57,766 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 21:05:57,766 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 21:05:57,767 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 21:05:57,767 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 21:05:57,768 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 21:05:57,768 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 21:05:57,769 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 21:05:57,769 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 21:05:57,769 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 21:05:57,769 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 21:05:57,769 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 21:05:57,770 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 21:05:57,770 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 21:05:57,770 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 21:05:57,770 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 21:05:57,771 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 21:05:57,771 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 21:05:57,771 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 21:05:57,771 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:05:57,772 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 21:05:57,772 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 21:05:57,772 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 21:05:57,772 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 21:05:57,773 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 21:05:57,774 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 21:05:57,774 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 21:05:57,775 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 21:05:57,775 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 6e630fd4f7f92b97a7712eadcda02cdabe0d357899fc48fb3e7885213e7a8b80 [2022-11-18 21:05:58,086 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 21:05:58,108 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 21:05:58,111 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 21:05:58,113 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 21:05:58,114 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 21:05:58,115 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c [2022-11-18 21:05:58,187 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/data/44c83faae/23ebd38f2bf24d188448c05403dd08a6/FLAG4427a88ee [2022-11-18 21:05:58,743 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 21:05:58,743 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c [2022-11-18 21:05:58,754 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/data/44c83faae/23ebd38f2bf24d188448c05403dd08a6/FLAG4427a88ee [2022-11-18 21:05:59,072 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/data/44c83faae/23ebd38f2bf24d188448c05403dd08a6 [2022-11-18 21:05:59,075 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 21:05:59,076 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 21:05:59,079 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 21:05:59,079 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 21:05:59,084 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 21:05:59,085 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,086 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@578f7ff4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59, skipping insertion in model container [2022-11-18 21:05:59,087 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,095 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 21:05:59,155 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 21:05:59,527 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c[18234,18247] [2022-11-18 21:05:59,537 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:05:59,553 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 21:05:59,617 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/sv-benchmarks/c/product-lines/minepump_spec5_product41.cil.c[18234,18247] [2022-11-18 21:05:59,618 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 21:05:59,636 INFO L208 MainTranslator]: Completed translation [2022-11-18 21:05:59,637 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59 WrapperNode [2022-11-18 21:05:59,637 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 21:05:59,638 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 21:05:59,638 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 21:05:59,639 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 21:05:59,646 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,659 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,684 INFO L138 Inliner]: procedures = 55, calls = 98, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 195 [2022-11-18 21:05:59,684 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 21:05:59,685 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 21:05:59,685 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 21:05:59,685 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 21:05:59,695 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,695 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,697 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,698 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,703 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,708 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,710 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,712 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,714 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 21:05:59,715 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 21:05:59,715 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 21:05:59,715 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 21:05:59,716 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (1/1) ... [2022-11-18 21:05:59,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 21:05:59,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:05:59,760 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 21:05:59,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 21:05:59,827 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 21:05:59,827 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 21:05:59,827 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 21:05:59,828 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 21:05:59,828 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 21:05:59,828 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 21:05:59,828 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 21:05:59,830 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 21:05:59,831 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 21:05:59,831 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-18 21:05:59,832 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-18 21:05:59,832 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 21:05:59,832 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 21:05:59,832 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 21:05:59,832 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 21:05:59,832 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 21:05:59,922 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 21:05:59,924 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 21:06:00,324 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 21:06:00,332 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 21:06:00,333 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 21:06:00,335 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:06:00 BoogieIcfgContainer [2022-11-18 21:06:00,336 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 21:06:00,338 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 21:06:00,339 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 21:06:00,353 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 21:06:00,354 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 09:05:59" (1/3) ... [2022-11-18 21:06:00,354 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44c7d3ac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:06:00, skipping insertion in model container [2022-11-18 21:06:00,355 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 09:05:59" (2/3) ... [2022-11-18 21:06:00,355 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@44c7d3ac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 09:06:00, skipping insertion in model container [2022-11-18 21:06:00,356 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:06:00" (3/3) ... [2022-11-18 21:06:00,358 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product41.cil.c [2022-11-18 21:06:00,379 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 21:06:00,379 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 21:06:00,439 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 21:06:00,446 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@47299384, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 21:06:00,446 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 21:06:00,451 INFO L276 IsEmpty]: Start isEmpty. Operand has 84 states, 66 states have (on average 1.378787878787879) internal successors, (91), 72 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-18 21:06:00,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-18 21:06:00,462 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:00,463 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:00,464 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:00,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:00,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1799110499, now seen corresponding path program 1 times [2022-11-18 21:06:00,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:00,479 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237489421] [2022-11-18 21:06:00,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:00,480 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:00,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:00,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-18 21:06:00,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:00,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 21:06:00,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:00,681 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:00,681 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:00,682 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237489421] [2022-11-18 21:06:00,682 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237489421] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:00,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:00,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 21:06:00,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976684515] [2022-11-18 21:06:00,685 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:00,690 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 21:06:00,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:00,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 21:06:00,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:06:00,724 INFO L87 Difference]: Start difference. First operand has 84 states, 66 states have (on average 1.378787878787879) internal successors, (91), 72 states have internal predecessors, (91), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 21:06:00,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:00,761 INFO L93 Difference]: Finished difference Result 159 states and 216 transitions. [2022-11-18 21:06:00,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 21:06:00,763 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-18 21:06:00,764 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:00,773 INFO L225 Difference]: With dead ends: 159 [2022-11-18 21:06:00,773 INFO L226 Difference]: Without dead ends: 75 [2022-11-18 21:06:00,778 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 21:06:00,781 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:00,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:00,801 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-18 21:06:00,844 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-18 21:06:00,846 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.305084745762712) internal successors, (77), 64 states have internal predecessors, (77), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 21:06:00,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 96 transitions. [2022-11-18 21:06:00,858 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 96 transitions. Word has length 32 [2022-11-18 21:06:00,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:00,859 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 96 transitions. [2022-11-18 21:06:00,860 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-18 21:06:00,861 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 96 transitions. [2022-11-18 21:06:00,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-18 21:06:00,865 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:00,865 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:00,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 21:06:00,866 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:00,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:00,868 INFO L85 PathProgramCache]: Analyzing trace with hash -843212119, now seen corresponding path program 1 times [2022-11-18 21:06:00,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:00,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376024205] [2022-11-18 21:06:00,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:00,869 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:00,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:01,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-18 21:06:01,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,132 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:01,132 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:01,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376024205] [2022-11-18 21:06:01,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376024205] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:01,133 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:01,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:06:01,134 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1116873081] [2022-11-18 21:06:01,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:01,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:06:01,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:01,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:06:01,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,137 INFO L87 Difference]: Start difference. First operand 75 states and 96 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:01,161 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:01,162 INFO L93 Difference]: Finished difference Result 142 states and 187 transitions. [2022-11-18 21:06:01,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:06:01,163 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-18 21:06:01,163 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:01,165 INFO L225 Difference]: With dead ends: 142 [2022-11-18 21:06:01,165 INFO L226 Difference]: Without dead ends: 75 [2022-11-18 21:06:01,166 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,167 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 73 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:01,168 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 94 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:01,186 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-11-18 21:06:01,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-11-18 21:06:01,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 59 states have (on average 1.2881355932203389) internal successors, (76), 64 states have internal predecessors, (76), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 21:06:01,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 95 transitions. [2022-11-18 21:06:01,203 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 95 transitions. Word has length 37 [2022-11-18 21:06:01,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:01,204 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 95 transitions. [2022-11-18 21:06:01,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:01,210 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 95 transitions. [2022-11-18 21:06:01,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-18 21:06:01,211 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:01,212 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:01,212 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 21:06:01,212 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:01,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:01,213 INFO L85 PathProgramCache]: Analyzing trace with hash 404070432, now seen corresponding path program 1 times [2022-11-18 21:06:01,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:01,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [243404688] [2022-11-18 21:06:01,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:01,215 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:01,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 21:06:01,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-18 21:06:01,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-18 21:06:01,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,376 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:01,378 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:01,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [243404688] [2022-11-18 21:06:01,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [243404688] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:01,383 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:01,383 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:06:01,383 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [37177640] [2022-11-18 21:06:01,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:01,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:06:01,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:01,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:06:01,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,385 INFO L87 Difference]: Start difference. First operand 75 states and 95 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 21:06:01,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:01,417 INFO L93 Difference]: Finished difference Result 115 states and 145 transitions. [2022-11-18 21:06:01,418 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:06:01,419 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 38 [2022-11-18 21:06:01,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:01,421 INFO L225 Difference]: With dead ends: 115 [2022-11-18 21:06:01,421 INFO L226 Difference]: Without dead ends: 66 [2022-11-18 21:06:01,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,423 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 12 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:01,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 148 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:01,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-11-18 21:06:01,431 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 66. [2022-11-18 21:06:01,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 53 states have (on average 1.3018867924528301) internal successors, (69), 58 states have internal predecessors, (69), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2022-11-18 21:06:01,433 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 83 transitions. [2022-11-18 21:06:01,433 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 83 transitions. Word has length 38 [2022-11-18 21:06:01,433 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:01,433 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 83 transitions. [2022-11-18 21:06:01,433 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 1 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 21:06:01,434 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 83 transitions. [2022-11-18 21:06:01,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-11-18 21:06:01,443 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:01,444 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:01,444 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 21:06:01,444 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:01,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:01,447 INFO L85 PathProgramCache]: Analyzing trace with hash -611781306, now seen corresponding path program 1 times [2022-11-18 21:06:01,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:01,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [207817515] [2022-11-18 21:06:01,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:01,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:01,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:01,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-18 21:06:01,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-18 21:06:01,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,644 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:01,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:01,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [207817515] [2022-11-18 21:06:01,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [207817515] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:01,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:01,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:06:01,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [368746140] [2022-11-18 21:06:01,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:01,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:06:01,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:01,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:06:01,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,648 INFO L87 Difference]: Start difference. First operand 66 states and 83 transitions. Second operand has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:06:01,726 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:01,726 INFO L93 Difference]: Finished difference Result 168 states and 216 transitions. [2022-11-18 21:06:01,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:06:01,727 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 42 [2022-11-18 21:06:01,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:01,729 INFO L225 Difference]: With dead ends: 168 [2022-11-18 21:06:01,729 INFO L226 Difference]: Without dead ends: 110 [2022-11-18 21:06:01,730 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:01,731 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 52 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 148 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:01,738 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 148 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:01,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2022-11-18 21:06:01,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 108. [2022-11-18 21:06:01,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 85 states have (on average 1.2941176470588236) internal successors, (110), 92 states have internal predecessors, (110), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-18 21:06:01,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 136 transitions. [2022-11-18 21:06:01,765 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 136 transitions. Word has length 42 [2022-11-18 21:06:01,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:01,766 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 136 transitions. [2022-11-18 21:06:01,767 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.0) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 21:06:01,767 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 136 transitions. [2022-11-18 21:06:01,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-18 21:06:01,773 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:01,773 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:01,774 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 21:06:01,774 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:01,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:01,775 INFO L85 PathProgramCache]: Analyzing trace with hash -1086611922, now seen corresponding path program 1 times [2022-11-18 21:06:01,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:01,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1401342580] [2022-11-18 21:06:01,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:01,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:01,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:01,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-18 21:06:01,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:01,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-18 21:06:01,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,020 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 21:06:02,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:02,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1401342580] [2022-11-18 21:06:02,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1401342580] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:02,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:02,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 21:06:02,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [490774083] [2022-11-18 21:06:02,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:02,031 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 21:06:02,032 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:02,032 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 21:06:02,033 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 21:06:02,034 INFO L87 Difference]: Start difference. First operand 108 states and 136 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 21:06:02,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:02,210 INFO L93 Difference]: Finished difference Result 213 states and 272 transitions. [2022-11-18 21:06:02,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-18 21:06:02,211 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 48 [2022-11-18 21:06:02,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:02,219 INFO L225 Difference]: With dead ends: 213 [2022-11-18 21:06:02,219 INFO L226 Difference]: Without dead ends: 113 [2022-11-18 21:06:02,223 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-18 21:06:02,228 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 37 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 400 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:02,229 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 400 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 21:06:02,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2022-11-18 21:06:02,255 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 107. [2022-11-18 21:06:02,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 107 states, 84 states have (on average 1.2738095238095237) internal successors, (107), 91 states have internal predecessors, (107), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-18 21:06:02,257 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 107 states to 107 states and 133 transitions. [2022-11-18 21:06:02,257 INFO L78 Accepts]: Start accepts. Automaton has 107 states and 133 transitions. Word has length 48 [2022-11-18 21:06:02,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:02,258 INFO L495 AbstractCegarLoop]: Abstraction has 107 states and 133 transitions. [2022-11-18 21:06:02,258 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-18 21:06:02,258 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 133 transitions. [2022-11-18 21:06:02,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:06:02,259 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:02,259 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:02,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 21:06:02,260 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:02,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:02,260 INFO L85 PathProgramCache]: Analyzing trace with hash -1241687140, now seen corresponding path program 1 times [2022-11-18 21:06:02,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:02,261 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167187692] [2022-11-18 21:06:02,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:02,261 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:02,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:02,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-11-18 21:06:02,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,438 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:02,438 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:02,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167187692] [2022-11-18 21:06:02,439 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167187692] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:02,439 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:02,439 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:06:02,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [470831903] [2022-11-18 21:06:02,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:02,440 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:06:02,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:02,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:06:02,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:06:02,441 INFO L87 Difference]: Start difference. First operand 107 states and 133 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:02,513 INFO L93 Difference]: Finished difference Result 230 states and 294 transitions. [2022-11-18 21:06:02,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:06:02,514 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2022-11-18 21:06:02,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:02,517 INFO L225 Difference]: With dead ends: 230 [2022-11-18 21:06:02,518 INFO L226 Difference]: Without dead ends: 131 [2022-11-18 21:06:02,520 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-18 21:06:02,522 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 33 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 344 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:02,527 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 344 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:02,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2022-11-18 21:06:02,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 110. [2022-11-18 21:06:02,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 87 states have (on average 1.264367816091954) internal successors, (110), 94 states have internal predecessors, (110), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-18 21:06:02,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 136 transitions. [2022-11-18 21:06:02,562 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 136 transitions. Word has length 50 [2022-11-18 21:06:02,563 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:02,563 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 136 transitions. [2022-11-18 21:06:02,564 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,564 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 136 transitions. [2022-11-18 21:06:02,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:06:02,570 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:02,571 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:02,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 21:06:02,571 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:02,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:02,572 INFO L85 PathProgramCache]: Analyzing trace with hash -818985314, now seen corresponding path program 1 times [2022-11-18 21:06:02,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:02,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128620528] [2022-11-18 21:06:02,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:02,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:02,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:02,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-11-18 21:06:02,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,662 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:02,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:02,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128620528] [2022-11-18 21:06:02,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128620528] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:02,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:02,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 21:06:02,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1213481065] [2022-11-18 21:06:02,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:02,663 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 21:06:02,663 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:02,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 21:06:02,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 21:06:02,664 INFO L87 Difference]: Start difference. First operand 110 states and 136 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:02,732 INFO L93 Difference]: Finished difference Result 239 states and 304 transitions. [2022-11-18 21:06:02,733 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-18 21:06:02,733 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2022-11-18 21:06:02,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:02,734 INFO L225 Difference]: With dead ends: 239 [2022-11-18 21:06:02,735 INFO L226 Difference]: Without dead ends: 137 [2022-11-18 21:06:02,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:06:02,736 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 124 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:02,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 242 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:02,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2022-11-18 21:06:02,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 112. [2022-11-18 21:06:02,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 89 states have (on average 1.2584269662921348) internal successors, (112), 96 states have internal predecessors, (112), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2022-11-18 21:06:02,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 138 transitions. [2022-11-18 21:06:02,752 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 138 transitions. Word has length 50 [2022-11-18 21:06:02,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:02,753 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 138 transitions. [2022-11-18 21:06:02,753 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,753 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 138 transitions. [2022-11-18 21:06:02,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-18 21:06:02,754 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:02,755 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:02,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 21:06:02,755 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:02,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:02,755 INFO L85 PathProgramCache]: Analyzing trace with hash 1670543648, now seen corresponding path program 1 times [2022-11-18 21:06:02,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:02,756 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536499913] [2022-11-18 21:06:02,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:02,756 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:02,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-18 21:06:02,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-11-18 21:06:02,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:02,839 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:02,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:02,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536499913] [2022-11-18 21:06:02,840 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1536499913] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:02,840 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:02,840 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 21:06:02,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1549001931] [2022-11-18 21:06:02,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:02,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 21:06:02,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:02,841 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 21:06:02,842 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:02,842 INFO L87 Difference]: Start difference. First operand 112 states and 138 transitions. Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:02,891 INFO L93 Difference]: Finished difference Result 261 states and 326 transitions. [2022-11-18 21:06:02,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 21:06:02,892 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 50 [2022-11-18 21:06:02,892 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:02,894 INFO L225 Difference]: With dead ends: 261 [2022-11-18 21:06:02,894 INFO L226 Difference]: Without dead ends: 157 [2022-11-18 21:06:02,894 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 21:06:02,895 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 35 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 157 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:02,896 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 157 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 21:06:02,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-18 21:06:02,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 157. [2022-11-18 21:06:02,919 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 124 states have (on average 1.2338709677419355) internal successors, (153), 132 states have internal predecessors, (153), 18 states have call successors, (18), 15 states have call predecessors, (18), 14 states have return successors, (20), 17 states have call predecessors, (20), 18 states have call successors, (20) [2022-11-18 21:06:02,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 191 transitions. [2022-11-18 21:06:02,921 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 191 transitions. Word has length 50 [2022-11-18 21:06:02,921 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:02,921 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 191 transitions. [2022-11-18 21:06:02,921 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-18 21:06:02,922 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 191 transitions. [2022-11-18 21:06:02,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-18 21:06:02,923 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:02,923 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:02,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 21:06:02,923 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:02,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:02,924 INFO L85 PathProgramCache]: Analyzing trace with hash 1976434234, now seen corresponding path program 1 times [2022-11-18 21:06:02,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:02,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [842136936] [2022-11-18 21:06:02,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:02,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:02,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:06:03,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-18 21:06:03,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-18 21:06:03,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,174 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 21:06:03,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:03,174 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [842136936] [2022-11-18 21:06:03,175 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [842136936] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 21:06:03,175 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 21:06:03,175 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-18 21:06:03,175 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [940755161] [2022-11-18 21:06:03,175 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 21:06:03,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-18 21:06:03,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:03,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-18 21:06:03,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-18 21:06:03,177 INFO L87 Difference]: Start difference. First operand 157 states and 191 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 21:06:03,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:03,642 INFO L93 Difference]: Finished difference Result 531 states and 670 transitions. [2022-11-18 21:06:03,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-18 21:06:03,643 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 54 [2022-11-18 21:06:03,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:03,646 INFO L225 Difference]: With dead ends: 531 [2022-11-18 21:06:03,647 INFO L226 Difference]: Without dead ends: 427 [2022-11-18 21:06:03,648 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=184, Unknown=0, NotChecked=0, Total=240 [2022-11-18 21:06:03,649 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 222 mSDsluCounter, 499 mSDsCounter, 0 mSdLazyCounter, 299 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 231 SdHoareTripleChecker+Valid, 613 SdHoareTripleChecker+Invalid, 349 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 299 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:03,649 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [231 Valid, 613 Invalid, 349 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 299 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 21:06:03,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 427 states. [2022-11-18 21:06:03,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 427 to 393. [2022-11-18 21:06:03,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 393 states, 312 states have (on average 1.2211538461538463) internal successors, (381), 334 states have internal predecessors, (381), 44 states have call successors, (44), 33 states have call predecessors, (44), 36 states have return successors, (54), 42 states have call predecessors, (54), 44 states have call successors, (54) [2022-11-18 21:06:03,722 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 393 states to 393 states and 479 transitions. [2022-11-18 21:06:03,722 INFO L78 Accepts]: Start accepts. Automaton has 393 states and 479 transitions. Word has length 54 [2022-11-18 21:06:03,722 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:03,723 INFO L495 AbstractCegarLoop]: Abstraction has 393 states and 479 transitions. [2022-11-18 21:06:03,723 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 21:06:03,723 INFO L276 IsEmpty]: Start isEmpty. Operand 393 states and 479 transitions. [2022-11-18 21:06:03,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-11-18 21:06:03,724 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 21:06:03,725 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:03,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-18 21:06:03,725 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 21:06:03,726 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 21:06:03,726 INFO L85 PathProgramCache]: Analyzing trace with hash -128825948, now seen corresponding path program 1 times [2022-11-18 21:06:03,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 21:06:03,726 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464818329] [2022-11-18 21:06:03,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:03,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 21:06:03,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-18 21:06:03,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,881 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 21:06:03,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-18 21:06:03,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-11-18 21:06:03,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-18 21:06:03,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,965 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-18 21:06:03,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:03,971 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 8 proven. 16 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 21:06:03,971 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 21:06:03,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1464818329] [2022-11-18 21:06:03,971 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1464818329] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 21:06:03,971 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [888001814] [2022-11-18 21:06:03,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 21:06:03,972 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:06:03,974 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 21:06:03,979 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 21:06:03,999 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 21:06:04,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 21:06:04,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-18 21:06:04,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 21:06:04,309 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 21:06:04,309 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 21:06:04,558 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 18 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-18 21:06:04,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [888001814] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 21:06:04,559 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 21:06:04,559 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 6] total 14 [2022-11-18 21:06:04,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [575224047] [2022-11-18 21:06:04,559 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 21:06:04,562 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-11-18 21:06:04,562 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 21:06:04,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-11-18 21:06:04,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-18 21:06:04,563 INFO L87 Difference]: Start difference. First operand 393 states and 479 transitions. Second operand has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-18 21:06:05,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 21:06:05,311 INFO L93 Difference]: Finished difference Result 627 states and 790 transitions. [2022-11-18 21:06:05,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-18 21:06:05,311 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) Word has length 85 [2022-11-18 21:06:05,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 21:06:05,313 INFO L225 Difference]: With dead ends: 627 [2022-11-18 21:06:05,313 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 21:06:05,315 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 211 GetRequests, 180 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 138 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=201, Invalid=611, Unknown=0, NotChecked=0, Total=812 [2022-11-18 21:06:05,316 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 281 mSDsluCounter, 688 mSDsCounter, 0 mSdLazyCounter, 485 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 284 SdHoareTripleChecker+Valid, 819 SdHoareTripleChecker+Invalid, 581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 485 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 21:06:05,317 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [284 Valid, 819 Invalid, 581 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 485 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 21:06:05,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 21:06:05,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 21:06:05,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 21:06:05,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 21:06:05,318 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 85 [2022-11-18 21:06:05,318 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 21:06:05,319 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 21:06:05,319 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 8.428571428571429) internal successors, (118), 10 states have internal predecessors, (118), 6 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (14), 8 states have call predecessors, (14), 6 states have call successors, (14) [2022-11-18 21:06:05,319 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 21:06:05,319 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 21:06:05,322 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 21:06:05,337 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 21:06:05,528 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 21:06:05,532 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 21:06:08,910 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 337 343) no Hoare annotation was computed. [2022-11-18 21:06:08,910 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 337 343) the Hoare annotation is: true [2022-11-18 21:06:08,910 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 134 145) the Hoare annotation is: true [2022-11-18 21:06:08,910 INFO L899 garLoopResultBuilder]: For program point L138-1(lines 134 145) no Hoare annotation was computed. [2022-11-18 21:06:08,910 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 134 145) no Hoare annotation was computed. [2022-11-18 21:06:08,911 INFO L899 garLoopResultBuilder]: For program point L353(lines 353 361) no Hoare annotation was computed. [2022-11-18 21:06:08,911 INFO L895 garLoopResultBuilder]: At program point L386-2(lines 379 395) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse4 (and (= ~pumpRunning~0 0) .cse5) .cse0 .cse2 (and (<= 1 ~pumpRunning~0) .cse5) .cse3)))) [2022-11-18 21:06:08,911 INFO L899 garLoopResultBuilder]: For program point L349(lines 349 366) no Hoare annotation was computed. [2022-11-18 21:06:08,911 INFO L895 garLoopResultBuilder]: At program point L411(lines 404 414) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2022-11-18 21:06:08,912 INFO L895 garLoopResultBuilder]: At program point L151(lines 146 154) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2022-11-18 21:06:08,912 INFO L899 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2022-11-18 21:06:08,912 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2022-11-18 21:06:08,912 INFO L899 garLoopResultBuilder]: For program point L469-2(lines 469 473) no Hoare annotation was computed. [2022-11-18 21:06:08,912 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 118) no Hoare annotation was computed. [2022-11-18 21:06:08,913 INFO L895 garLoopResultBuilder]: At program point L114-2(lines 110 121) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 (and .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 .cse4 .cse2 .cse3 (and .cse5 (= ~waterLevel~0 1) .cse6)))) [2022-11-18 21:06:08,913 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 310 336) no Hoare annotation was computed. [2022-11-18 21:06:08,913 INFO L895 garLoopResultBuilder]: At program point L69(lines 62 71) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and (<= 1 ~pumpRunning~0) .cse7 (<= 1 ~switchedOnBeforeTS~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 (= ~waterLevel~0 1))) (or .cse1 .cse3 .cse4 .cse5 .cse6) (or .cse0 (and .cse2 .cse7) .cse1 .cse4 .cse6) (or .cse1 .cse3 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-18 21:06:08,913 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 323) no Hoare annotation was computed. [2022-11-18 21:06:08,913 INFO L899 garLoopResultBuilder]: For program point L317-2(lines 313 335) no Hoare annotation was computed. [2022-11-18 21:06:08,913 INFO L895 garLoopResultBuilder]: At program point L375(lines 370 377) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse0 .cse3 (and (<= 1 ~pumpRunning~0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse4) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2022-11-18 21:06:08,914 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (<= 1 ~pumpRunning~0)) (.cse4 (= ~waterLevel~0 1)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and (= ~pumpRunning~0 0) .cse4)) (or .cse1 .cse5 (and .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse1 .cse5 .cse2 .cse3 (and .cse6 .cse4 .cse7)))) [2022-11-18 21:06:08,914 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2022-11-18 21:06:08,914 INFO L895 garLoopResultBuilder]: At program point L359(line 359) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift_processEnvironment_~tmp~2#1| 0)) (.cse1 (not .cse6)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse1 .cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse4 .cse5 .cse6 (= ~waterLevel~0 1))) (or .cse1 .cse7 .cse2 .cse3)))) [2022-11-18 21:06:08,914 INFO L895 garLoopResultBuilder]: At program point L475(lines 460 478) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse4 .cse5) (or .cse0 .cse1 .cse4 .cse5) (or .cse2 (and .cse3 (= |timeShift_isHighWaterLevel_#res#1| 0) (= |timeShift_isHighWaterLevel_~tmp___0~1#1| 0) (= ~waterLevel~0 1) (not (= |timeShift_isHighWaterLevel_~tmp~4#1| 0))) (not (= |old(~waterLevel~0)| 1)) .cse0))) [2022-11-18 21:06:08,915 INFO L899 garLoopResultBuilder]: For program point L950(line 950) no Hoare annotation was computed. [2022-11-18 21:06:08,915 INFO L895 garLoopResultBuilder]: At program point L364(line 364) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 (and .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 .cse4 .cse2 .cse3 (and .cse5 (= ~waterLevel~0 1) .cse6)))) [2022-11-18 21:06:08,915 INFO L895 garLoopResultBuilder]: At program point L364-1(lines 345 369) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse9 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse3 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3)) (or .cse1 .cse4 (and .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse2 .cse7) .cse1 .cse8 (and .cse5 .cse7) .cse9)) (or .cse1 .cse4 .cse8 .cse9 (and .cse5 .cse3 .cse6)))) [2022-11-18 21:06:08,915 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (and .cse0 .cse1 .cse4) .cse2 .cse3 .cse5 .cse6) (or .cse3 .cse7 .cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse7 .cse5 .cse6 .cse8)))) [2022-11-18 21:06:08,916 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-18 21:06:08,916 INFO L899 garLoopResultBuilder]: For program point L191(lines 191 197) no Hoare annotation was computed. [2022-11-18 21:06:08,916 INFO L895 garLoopResultBuilder]: At program point L183(lines 178 186) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (not (= 1 ~systemActive~0))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (<= 1 ~pumpRunning~0)) (.cse8 (= ~waterLevel~0 1)) (.cse10 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse1 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 (and .cse6 .cse1 .cse2) .cse7)) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse4 (and .cse0 .cse8)) (or .cse4 .cse9 (and .cse6 .cse10) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse9 .cse5 .cse7 (and .cse6 .cse8 .cse10)))) [2022-11-18 21:06:08,916 INFO L895 garLoopResultBuilder]: At program point L951(lines 946 953) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse2 .cse0 .cse3 .cse4) (or .cse0 .cse1 .cse3 .cse4) (or .cse2 (not (= |old(~waterLevel~0)| 1)) .cse0))) [2022-11-18 21:06:08,916 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2022-11-18 21:06:08,917 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2022-11-18 21:06:08,917 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 310 336) the Hoare annotation is: (let ((.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (< 1 |old(~waterLevel~0)|))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse4))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (and .cse0 .cse1 .cse4) .cse2 .cse3 .cse5 .cse6) (or .cse3 .cse7 .cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse3 .cse7 .cse5 .cse6 .cse8)))) [2022-11-18 21:06:08,917 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~waterLevel~0 1)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse7 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 .cse3)) (or .cse1 .cse4 (and .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse1 .cse4 .cse7 .cse8 (and .cse5 .cse3 .cse6)) (let ((.cse9 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or (and .cse2 .cse9 .cse10 .cse11) .cse0 .cse1 .cse7 (and .cse5 .cse9 .cse10 .cse11) .cse8)))) [2022-11-18 21:06:08,917 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 310 336) no Hoare annotation was computed. [2022-11-18 21:06:08,917 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 950) no Hoare annotation was computed. [2022-11-18 21:06:08,918 INFO L895 garLoopResultBuilder]: At program point L196(lines 187 200) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (and .cse2 (not (= |timeShift_isHighWaterSensorDry_#res#1| 0)) (= ~waterLevel~0 1))) (or .cse1 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse4 .cse5) (or .cse1 .cse3 .cse4 .cse5))) [2022-11-18 21:06:08,918 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2022-11-18 21:06:08,918 INFO L899 garLoopResultBuilder]: For program point L386(lines 386 392) no Hoare annotation was computed. [2022-11-18 21:06:08,918 INFO L899 garLoopResultBuilder]: For program point L225(line 225) no Hoare annotation was computed. [2022-11-18 21:06:08,918 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 204 233) no Hoare annotation was computed. [2022-11-18 21:06:08,918 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 204 233) the Hoare annotation is: true [2022-11-18 21:06:08,919 INFO L899 garLoopResultBuilder]: For program point L218(lines 218 222) no Hoare annotation was computed. [2022-11-18 21:06:08,919 INFO L902 garLoopResultBuilder]: At program point L218-1(lines 218 222) the Hoare annotation is: true [2022-11-18 21:06:08,919 INFO L899 garLoopResultBuilder]: For program point L215(line 215) no Hoare annotation was computed. [2022-11-18 21:06:08,919 INFO L902 garLoopResultBuilder]: At program point L214-2(lines 214 228) the Hoare annotation is: true [2022-11-18 21:06:08,919 INFO L902 garLoopResultBuilder]: At program point L210(line 210) the Hoare annotation is: true [2022-11-18 21:06:08,919 INFO L899 garLoopResultBuilder]: For program point L210-1(line 210) no Hoare annotation was computed. [2022-11-18 21:06:08,919 INFO L902 garLoopResultBuilder]: At program point L229(lines 204 233) the Hoare annotation is: true [2022-11-18 21:06:08,919 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 298) no Hoare annotation was computed. [2022-11-18 21:06:08,920 INFO L899 garLoopResultBuilder]: For program point L510(lines 510 516) no Hoare annotation was computed. [2022-11-18 21:06:08,920 INFO L899 garLoopResultBuilder]: For program point L510-1(lines 510 516) no Hoare annotation was computed. [2022-11-18 21:06:08,920 INFO L902 garLoopResultBuilder]: At program point L539(lines 480 543) the Hoare annotation is: true [2022-11-18 21:06:08,920 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse3 .cse1 .cse2 .cse4) (and .cse5 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse5 .cse3 .cse1 .cse2 .cse4))) [2022-11-18 21:06:08,920 INFO L902 garLoopResultBuilder]: At program point L275(lines 267 277) the Hoare annotation is: true [2022-11-18 21:06:08,920 INFO L902 garLoopResultBuilder]: At program point L300(lines 281 303) the Hoare annotation is: true [2022-11-18 21:06:08,920 INFO L895 garLoopResultBuilder]: At program point L263(lines 259 265) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 21:06:08,921 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 21:06:08,921 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 21:06:08,921 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 21:06:08,921 INFO L895 garLoopResultBuilder]: At program point L536(lines 489 537) the Hoare annotation is: false [2022-11-18 21:06:08,921 INFO L895 garLoopResultBuilder]: At program point L941(lines 936 944) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 21:06:08,921 INFO L899 garLoopResultBuilder]: For program point L491(lines 490 535) no Hoare annotation was computed. [2022-11-18 21:06:08,921 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 531) no Hoare annotation was computed. [2022-11-18 21:06:08,922 INFO L895 garLoopResultBuilder]: At program point L933(lines 929 935) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 21:06:08,922 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 21:06:08,922 INFO L895 garLoopResultBuilder]: At program point L512(line 512) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse3 .cse1 .cse2 .cse4) (and .cse5 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse5 .cse3 .cse1 .cse2 .cse4))) [2022-11-18 21:06:08,922 INFO L895 garLoopResultBuilder]: At program point L533(lines 490 535) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse3 .cse1 .cse2 .cse4) (and .cse5 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse5 .cse3 .cse1 .cse2 .cse4))) [2022-11-18 21:06:08,922 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2022-11-18 21:06:08,922 INFO L899 garLoopResultBuilder]: For program point L500-1(lines 500 506) no Hoare annotation was computed. [2022-11-18 21:06:08,922 INFO L899 garLoopResultBuilder]: For program point L492(lines 492 496) no Hoare annotation was computed. [2022-11-18 21:06:08,927 INFO L895 garLoopResultBuilder]: At program point L926(lines 922 928) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 21:06:08,927 INFO L895 garLoopResultBuilder]: At program point L59(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-18 21:06:08,927 INFO L899 garLoopResultBuilder]: For program point L526(lines 526 530) no Hoare annotation was computed. [2022-11-18 21:06:08,927 INFO L895 garLoopResultBuilder]: At program point L526-2(lines 520 531) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse3 .cse1 .cse2 .cse4) (and .cse5 .cse1 .cse2 (= ~waterLevel~0 1)) (and .cse5 .cse3 .cse1 .cse2 .cse4))) [2022-11-18 21:06:08,927 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 298) no Hoare annotation was computed. [2022-11-18 21:06:08,927 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 122 133) no Hoare annotation was computed. [2022-11-18 21:06:08,928 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-11-18 21:06:08,929 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 122 133) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (< 1 |old(~waterLevel~0)|))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)) (or .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse1 .cse4 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse4 .cse3 .cse5))) [2022-11-18 21:06:08,929 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 415 423) no Hoare annotation was computed. [2022-11-18 21:06:08,930 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 415 423) the Hoare annotation is: true [2022-11-18 21:06:08,930 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 415 423) no Hoare annotation was computed. [2022-11-18 21:06:08,933 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 21:06:08,936 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 21:06:08,975 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 09:06:08 BoogieIcfgContainer [2022-11-18 21:06:08,980 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 21:06:08,981 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 21:06:08,981 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 21:06:08,981 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 21:06:08,982 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 09:06:00" (3/4) ... [2022-11-18 21:06:08,985 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 21:06:08,991 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 21:06:08,992 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 21:06:08,992 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 21:06:08,992 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 21:06:08,992 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 21:06:08,993 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-18 21:06:09,006 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2022-11-18 21:06:09,006 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 21:06:09,007 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 21:06:09,007 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:06:09,008 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 21:06:09,048 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-18 21:06:09,048 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-18 21:06:09,048 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:06:09,049 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-18 21:06:09,049 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-11-18 21:06:09,049 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-18 21:06:09,050 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && !(\result == 0)) && waterLevel == 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2022-11-18 21:06:09,050 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && waterLevel == 1) && !(tmp == 0))) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-11-18 21:06:09,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-11-18 21:06:09,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-11-18 21:06:09,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-11-18 21:06:09,051 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) [2022-11-18 21:06:09,089 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 21:06:09,089 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 21:06:09,090 INFO L158 Benchmark]: Toolchain (without parser) took 10013.88ms. Allocated memory was 136.3MB in the beginning and 197.1MB in the end (delta: 60.8MB). Free memory was 97.1MB in the beginning and 88.3MB in the end (delta: 8.8MB). Peak memory consumption was 68.7MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,090 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 136.3MB. Free memory was 115.4MB in the beginning and 115.3MB in the end (delta: 71.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 21:06:09,091 INFO L158 Benchmark]: CACSL2BoogieTranslator took 558.34ms. Allocated memory is still 136.3MB. Free memory was 96.9MB in the beginning and 104.9MB in the end (delta: -8.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,091 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.41ms. Allocated memory is still 136.3MB. Free memory was 104.9MB in the beginning and 102.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,091 INFO L158 Benchmark]: Boogie Preprocessor took 29.13ms. Allocated memory is still 136.3MB. Free memory was 102.9MB in the beginning and 101.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,092 INFO L158 Benchmark]: RCFGBuilder took 620.90ms. Allocated memory is still 136.3MB. Free memory was 101.2MB in the beginning and 85.2MB in the end (delta: 16.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,093 INFO L158 Benchmark]: TraceAbstraction took 8642.22ms. Allocated memory was 136.3MB in the beginning and 197.1MB in the end (delta: 60.8MB). Free memory was 84.5MB in the beginning and 94.6MB in the end (delta: -10.1MB). Peak memory consumption was 66.9MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,093 INFO L158 Benchmark]: Witness Printer took 108.29ms. Allocated memory is still 197.1MB. Free memory was 94.6MB in the beginning and 88.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 21:06:09,095 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 136.3MB. Free memory was 115.4MB in the beginning and 115.3MB in the end (delta: 71.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 558.34ms. Allocated memory is still 136.3MB. Free memory was 96.9MB in the beginning and 104.9MB in the end (delta: -8.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.41ms. Allocated memory is still 136.3MB. Free memory was 104.9MB in the beginning and 102.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.13ms. Allocated memory is still 136.3MB. Free memory was 102.9MB in the beginning and 101.2MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 620.90ms. Allocated memory is still 136.3MB. Free memory was 101.2MB in the beginning and 85.2MB in the end (delta: 16.1MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * TraceAbstraction took 8642.22ms. Allocated memory was 136.3MB in the beginning and 197.1MB in the end (delta: 60.8MB). Free memory was 84.5MB in the beginning and 94.6MB in the end (delta: -10.1MB). Peak memory consumption was 66.9MB. Max. memory is 16.1GB. * Witness Printer took 108.29ms. Allocated memory is still 197.1MB. Free memory was 94.6MB in the beginning and 88.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 950]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 84 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.5s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 889 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 869 mSDsluCounter, 3070 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2090 mSDsCounter, 171 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 883 IncrementalHoareTripleChecker+Invalid, 1054 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 171 mSolverCounterUnsat, 980 mSDtfsCounter, 883 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 308 GetRequests, 240 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 167 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=393occurred in iteration=9, InterpolantAutomatonStates: 67, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 88 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 723 PreInvPairs, 831 NumberOfFragments, 1815 HoareAnnotationTreeSize, 723 FomulaSimplifications, 424 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 39 FomulaSimplificationsInter, 4146 FormulaSimplificationTreeSizeReductionInter, 3.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 571 NumberOfCodeBlocks, 571 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 644 ConstructedInterpolants, 0 QuantifiedInterpolants, 1446 SizeOfPredicates, 3 NumberOfNonLiveVariables, 310 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 85/114 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 480]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && waterLevel == 1) && !(tmp == 0))) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((1 <= pumpRunning && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 204]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 214]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 345]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 490]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) || ((((1 <= pumpRunning && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1)) || ((((pumpRunning == 0 && 1 < waterLevel) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && ((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel) && tmp == 2)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 267]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 259]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 178]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (pumpRunning == 0 && waterLevel == 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (1 <= pumpRunning && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 922]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 187]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && !(\result == 0)) && waterLevel == 1)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) - InvariantResult [Line: 379]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 404]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) - InvariantResult [Line: 146]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 < \old(waterLevel))) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-11-18 21:06:09,127 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_076b462d-03a5-4bc0-be97-912e59298b57/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE