./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 10:55:36,173 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 10:55:36,176 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 10:55:36,204 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 10:55:36,204 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 10:55:36,205 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 10:55:36,207 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 10:55:36,208 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 10:55:36,210 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 10:55:36,211 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 10:55:36,212 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 10:55:36,213 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 10:55:36,214 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 10:55:36,215 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 10:55:36,216 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 10:55:36,218 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 10:55:36,219 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 10:55:36,220 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 10:55:36,221 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 10:55:36,223 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 10:55:36,225 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 10:55:36,227 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 10:55:36,228 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 10:55:36,229 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 10:55:36,232 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 10:55:36,233 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 10:55:36,233 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 10:55:36,234 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 10:55:36,235 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 10:55:36,236 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 10:55:36,236 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 10:55:36,237 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 10:55:36,238 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 10:55:36,239 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 10:55:36,240 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 10:55:36,240 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 10:55:36,241 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 10:55:36,242 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 10:55:36,242 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 10:55:36,243 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 10:55:36,244 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 10:55:36,245 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 10:55:36,266 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 10:55:36,267 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 10:55:36,267 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 10:55:36,267 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 10:55:36,268 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 10:55:36,269 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 10:55:36,269 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 10:55:36,270 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 10:55:36,270 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 10:55:36,270 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 10:55:36,271 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 10:55:36,271 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 10:55:36,271 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 10:55:36,271 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 10:55:36,272 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 10:55:36,272 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 10:55:36,272 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 10:55:36,272 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 10:55:36,272 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 10:55:36,273 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 10:55:36,273 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 10:55:36,273 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 10:55:36,273 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 10:55:36,274 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 10:55:36,274 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:55:36,274 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 10:55:36,274 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 10:55:36,275 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 10:55:36,275 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 10:55:36,275 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 10:55:36,275 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 10:55:36,276 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 10:55:36,276 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 10:55:36,276 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 [2022-11-20 10:55:36,575 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 10:55:36,596 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 10:55:36,599 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 10:55:36,600 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 10:55:36,601 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 10:55:36,602 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-11-20 10:55:39,635 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 10:55:39,900 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 10:55:39,901 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-11-20 10:55:39,928 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/data/98dfd2531/f6413b58517d4bd39e352f0cb77b8bd8/FLAGa3be175c0 [2022-11-20 10:55:39,955 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/data/98dfd2531/f6413b58517d4bd39e352f0cb77b8bd8 [2022-11-20 10:55:39,957 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 10:55:39,959 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 10:55:39,960 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 10:55:39,961 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 10:55:39,969 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 10:55:39,970 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:55:39" (1/1) ... [2022-11-20 10:55:39,971 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b2b2d49 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:39, skipping insertion in model container [2022-11-20 10:55:39,971 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:55:39" (1/1) ... [2022-11-20 10:55:39,979 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 10:55:40,049 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 10:55:40,426 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-11-20 10:55:40,441 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:55:40,456 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 10:55:40,526 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-11-20 10:55:40,527 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:55:40,544 INFO L208 MainTranslator]: Completed translation [2022-11-20 10:55:40,544 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40 WrapperNode [2022-11-20 10:55:40,545 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 10:55:40,546 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 10:55:40,546 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 10:55:40,546 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 10:55:40,554 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,577 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,615 INFO L138 Inliner]: procedures = 55, calls = 99, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 207 [2022-11-20 10:55:40,615 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 10:55:40,616 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 10:55:40,616 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 10:55:40,616 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 10:55:40,626 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,627 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,637 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,637 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,642 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,646 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,648 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,649 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,652 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 10:55:40,653 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 10:55:40,653 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 10:55:40,653 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 10:55:40,654 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (1/1) ... [2022-11-20 10:55:40,660 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:55:40,673 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:55:40,685 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 10:55:40,713 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 10:55:40,743 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 10:55:40,744 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 10:55:40,744 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 10:55:40,744 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 10:55:40,744 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 10:55:40,745 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 10:55:40,745 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 10:55:40,747 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 10:55:40,747 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 10:55:40,748 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:55:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:55:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 10:55:40,749 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 10:55:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 10:55:40,749 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 10:55:40,750 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 10:55:40,750 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 10:55:40,750 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 10:55:40,858 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 10:55:40,861 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 10:55:41,228 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 10:55:41,235 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 10:55:41,235 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 10:55:41,241 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:55:41 BoogieIcfgContainer [2022-11-20 10:55:41,242 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 10:55:41,244 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 10:55:41,245 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 10:55:41,249 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 10:55:41,249 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 10:55:39" (1/3) ... [2022-11-20 10:55:41,250 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@39dc85f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:55:41, skipping insertion in model container [2022-11-20 10:55:41,250 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:55:40" (2/3) ... [2022-11-20 10:55:41,253 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@39dc85f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:55:41, skipping insertion in model container [2022-11-20 10:55:41,253 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:55:41" (3/3) ... [2022-11-20 10:55:41,258 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product49.cil.c [2022-11-20 10:55:41,288 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 10:55:41,289 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 10:55:41,342 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 10:55:41,349 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@56b839b1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 10:55:41,350 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 10:55:41,354 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-20 10:55:41,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-20 10:55:41,365 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:41,367 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:41,367 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:41,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:41,376 INFO L85 PathProgramCache]: Analyzing trace with hash 644770988, now seen corresponding path program 1 times [2022-11-20 10:55:41,386 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:41,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989595132] [2022-11-20 10:55:41,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:41,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:41,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:41,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 10:55:41,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:41,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:41,592 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:41,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989595132] [2022-11-20 10:55:41,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989595132] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:41,594 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:41,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 10:55:41,600 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1286173373] [2022-11-20 10:55:41,601 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:41,606 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 10:55:41,607 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:41,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 10:55:41,633 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:55:41,636 INFO L87 Difference]: Start difference. First operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:41,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:41,673 INFO L93 Difference]: Finished difference Result 168 states and 229 transitions. [2022-11-20 10:55:41,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 10:55:41,676 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-20 10:55:41,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:41,685 INFO L225 Difference]: With dead ends: 168 [2022-11-20 10:55:41,685 INFO L226 Difference]: Without dead ends: 79 [2022-11-20 10:55:41,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:55:41,692 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:41,694 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:55:41,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-11-20 10:55:41,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-11-20 10:55:41,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-11-20 10:55:41,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-11-20 10:55:41,736 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-11-20 10:55:41,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:41,737 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-11-20 10:55:41,737 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:41,737 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-11-20 10:55:41,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-20 10:55:41,740 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:41,740 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:41,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 10:55:41,741 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:41,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:41,742 INFO L85 PathProgramCache]: Analyzing trace with hash 1977303075, now seen corresponding path program 1 times [2022-11-20 10:55:41,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:41,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345158071] [2022-11-20 10:55:41,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:41,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:41,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:41,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:55:41,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:41,882 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:41,882 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:41,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345158071] [2022-11-20 10:55:41,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345158071] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:41,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:41,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 10:55:41,884 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [268350907] [2022-11-20 10:55:41,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:41,885 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 10:55:41,885 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:41,886 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 10:55:41,886 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:55:41,887 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:41,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:41,910 INFO L93 Difference]: Finished difference Result 124 states and 160 transitions. [2022-11-20 10:55:41,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 10:55:41,916 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-20 10:55:41,919 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:41,921 INFO L225 Difference]: With dead ends: 124 [2022-11-20 10:55:41,923 INFO L226 Difference]: Without dead ends: 70 [2022-11-20 10:55:41,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:55:41,927 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 12 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:41,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 162 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:55:41,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-20 10:55:41,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-11-20 10:55:41,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-20 10:55:41,943 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-11-20 10:55:41,943 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-11-20 10:55:41,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:41,943 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-11-20 10:55:41,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:41,944 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-11-20 10:55:41,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-20 10:55:41,945 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:41,945 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:41,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 10:55:41,946 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:41,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:41,947 INFO L85 PathProgramCache]: Analyzing trace with hash 378859764, now seen corresponding path program 1 times [2022-11-20 10:55:41,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:41,947 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1869090054] [2022-11-20 10:55:41,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:41,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:41,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:42,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,102 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:42,102 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:42,103 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1869090054] [2022-11-20 10:55:42,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1869090054] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:42,103 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:42,103 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:55:42,104 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675182518] [2022-11-20 10:55:42,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:42,104 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:55:42,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:42,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:55:42,105 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:55:42,106 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:42,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:42,225 INFO L93 Difference]: Finished difference Result 133 states and 174 transitions. [2022-11-20 10:55:42,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 10:55:42,226 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-20 10:55:42,226 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:42,227 INFO L225 Difference]: With dead ends: 133 [2022-11-20 10:55:42,227 INFO L226 Difference]: Without dead ends: 70 [2022-11-20 10:55:42,228 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-20 10:55:42,229 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 175 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 175 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:42,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [175 Valid, 191 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:55:42,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-11-20 10:55:42,241 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-11-20 10:55:42,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-11-20 10:55:42,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-11-20 10:55:42,243 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 30 [2022-11-20 10:55:42,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:42,244 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-11-20 10:55:42,244 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:42,244 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-11-20 10:55:42,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-20 10:55:42,246 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:42,246 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:42,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 10:55:42,246 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:42,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:42,247 INFO L85 PathProgramCache]: Analyzing trace with hash 533499176, now seen corresponding path program 1 times [2022-11-20 10:55:42,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:42,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1116205872] [2022-11-20 10:55:42,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:42,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:42,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 10:55:42,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:42,335 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:42,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1116205872] [2022-11-20 10:55:42,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1116205872] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:42,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:42,336 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 10:55:42,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [851774699] [2022-11-20 10:55:42,337 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:42,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 10:55:42,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:42,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 10:55:42,340 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:55:42,340 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:42,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:42,414 INFO L93 Difference]: Finished difference Result 177 states and 231 transitions. [2022-11-20 10:55:42,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 10:55:42,415 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2022-11-20 10:55:42,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:42,416 INFO L225 Difference]: With dead ends: 177 [2022-11-20 10:55:42,417 INFO L226 Difference]: Without dead ends: 114 [2022-11-20 10:55:42,418 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:55:42,419 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 69 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:42,420 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 172 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:55:42,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-11-20 10:55:42,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 112. [2022-11-20 10:55:42,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 87 states have (on average 1.3103448275862069) internal successors, (114), 94 states have internal predecessors, (114), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-11-20 10:55:42,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 142 transitions. [2022-11-20 10:55:42,443 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 142 transitions. Word has length 38 [2022-11-20 10:55:42,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:42,443 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 142 transitions. [2022-11-20 10:55:42,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 10:55:42,444 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 142 transitions. [2022-11-20 10:55:42,445 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 10:55:42,445 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:42,445 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:42,446 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 10:55:42,446 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:42,446 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:42,447 INFO L85 PathProgramCache]: Analyzing trace with hash -504847281, now seen corresponding path program 1 times [2022-11-20 10:55:42,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:42,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1713607560] [2022-11-20 10:55:42,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:42,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:42,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,609 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:42,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 10:55:42,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:42,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:42,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:42,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1713607560] [2022-11-20 10:55:42,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1713607560] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:42,663 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:42,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:55:42,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1088348281] [2022-11-20 10:55:42,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:42,664 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:55:42,664 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:42,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:55:42,665 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:55:42,665 INFO L87 Difference]: Start difference. First operand 112 states and 142 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:42,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:42,899 INFO L93 Difference]: Finished difference Result 251 states and 325 transitions. [2022-11-20 10:55:42,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:55:42,900 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-20 10:55:42,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:42,905 INFO L225 Difference]: With dead ends: 251 [2022-11-20 10:55:42,906 INFO L226 Difference]: Without dead ends: 146 [2022-11-20 10:55:42,910 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 10:55:42,913 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 62 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:42,918 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 363 Invalid, 139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:55:42,919 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-11-20 10:55:42,956 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 141. [2022-11-20 10:55:42,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 111 states have (on average 1.2972972972972974) internal successors, (144), 118 states have internal predecessors, (144), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2022-11-20 10:55:42,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 179 transitions. [2022-11-20 10:55:42,966 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 179 transitions. Word has length 44 [2022-11-20 10:55:42,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:42,967 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 179 transitions. [2022-11-20 10:55:42,968 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:42,968 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 179 transitions. [2022-11-20 10:55:42,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 10:55:42,972 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:42,973 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:42,973 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 10:55:42,973 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:42,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:42,975 INFO L85 PathProgramCache]: Analyzing trace with hash -1322495731, now seen corresponding path program 1 times [2022-11-20 10:55:42,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:42,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1981519301] [2022-11-20 10:55:42,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:42,976 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:42,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:43,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 10:55:43,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:43,123 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:43,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1981519301] [2022-11-20 10:55:43,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1981519301] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:43,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:43,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 10:55:43,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [596108657] [2022-11-20 10:55:43,125 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:43,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 10:55:43,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:43,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 10:55:43,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:55:43,127 INFO L87 Difference]: Start difference. First operand 141 states and 179 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:43,269 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:43,269 INFO L93 Difference]: Finished difference Result 285 states and 371 transitions. [2022-11-20 10:55:43,270 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 10:55:43,270 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-20 10:55:43,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:43,274 INFO L225 Difference]: With dead ends: 285 [2022-11-20 10:55:43,274 INFO L226 Difference]: Without dead ends: 151 [2022-11-20 10:55:43,276 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:55:43,284 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 65 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:43,288 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 284 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:55:43,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-20 10:55:43,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 143. [2022-11-20 10:55:43,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 113 states have (on average 1.2920353982300885) internal successors, (146), 120 states have internal predecessors, (146), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2022-11-20 10:55:43,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 181 transitions. [2022-11-20 10:55:43,313 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 181 transitions. Word has length 44 [2022-11-20 10:55:43,314 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:43,314 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 181 transitions. [2022-11-20 10:55:43,314 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:43,314 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 181 transitions. [2022-11-20 10:55:43,315 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 10:55:43,315 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:43,315 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:43,316 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 10:55:43,316 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:43,316 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:43,316 INFO L85 PathProgramCache]: Analyzing trace with hash -1103641013, now seen corresponding path program 1 times [2022-11-20 10:55:43,317 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:43,317 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [516534222] [2022-11-20 10:55:43,317 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:43,317 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:43,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:43,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-20 10:55:43,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:43,411 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:43,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [516534222] [2022-11-20 10:55:43,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [516534222] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:43,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:43,412 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 10:55:43,412 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1003008835] [2022-11-20 10:55:43,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:43,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 10:55:43,413 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:43,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 10:55:43,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:55:43,414 INFO L87 Difference]: Start difference. First operand 143 states and 181 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:43,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:43,664 INFO L93 Difference]: Finished difference Result 406 states and 532 transitions. [2022-11-20 10:55:43,665 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:55:43,665 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-20 10:55:43,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:43,670 INFO L225 Difference]: With dead ends: 406 [2022-11-20 10:55:43,670 INFO L226 Difference]: Without dead ends: 270 [2022-11-20 10:55:43,671 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:55:43,673 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 206 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:43,673 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 292 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:55:43,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-11-20 10:55:43,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 262. [2022-11-20 10:55:43,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 203 states have (on average 1.270935960591133) internal successors, (258), 214 states have internal predecessors, (258), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2022-11-20 10:55:43,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 335 transitions. [2022-11-20 10:55:43,726 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 335 transitions. Word has length 44 [2022-11-20 10:55:43,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:43,727 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 335 transitions. [2022-11-20 10:55:43,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:55:43,727 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 335 transitions. [2022-11-20 10:55:43,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-20 10:55:43,734 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:43,734 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:43,737 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 10:55:43,740 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:43,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:43,741 INFO L85 PathProgramCache]: Analyzing trace with hash 636133877, now seen corresponding path program 1 times [2022-11-20 10:55:43,741 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:43,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [673657174] [2022-11-20 10:55:43,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:43,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:43,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:43,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:55:43,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-20 10:55:43,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:43,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:43,878 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:43,879 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [673657174] [2022-11-20 10:55:43,879 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [673657174] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:43,879 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:43,879 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:55:43,879 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [625659584] [2022-11-20 10:55:43,880 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:43,880 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:55:43,880 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:43,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:55:43,881 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:55:43,881 INFO L87 Difference]: Start difference. First operand 262 states and 335 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:55:44,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:44,101 INFO L93 Difference]: Finished difference Result 520 states and 665 transitions. [2022-11-20 10:55:44,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:55:44,101 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-20 10:55:44,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:44,104 INFO L225 Difference]: With dead ends: 520 [2022-11-20 10:55:44,104 INFO L226 Difference]: Without dead ends: 265 [2022-11-20 10:55:44,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-20 10:55:44,106 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 112 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:44,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 327 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:55:44,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-11-20 10:55:44,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 260. [2022-11-20 10:55:44,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 201 states have (on average 1.263681592039801) internal successors, (254), 212 states have internal predecessors, (254), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2022-11-20 10:55:44,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 331 transitions. [2022-11-20 10:55:44,142 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 331 transitions. Word has length 46 [2022-11-20 10:55:44,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:44,143 INFO L495 AbstractCegarLoop]: Abstraction has 260 states and 331 transitions. [2022-11-20 10:55:44,143 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:55:44,143 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 331 transitions. [2022-11-20 10:55:44,144 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-11-20 10:55:44,145 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:44,145 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:44,145 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 10:55:44,145 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:44,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:44,146 INFO L85 PathProgramCache]: Analyzing trace with hash 1068859185, now seen corresponding path program 1 times [2022-11-20 10:55:44,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:44,147 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1254125298] [2022-11-20 10:55:44,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:44,147 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:44,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:55:44,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:55:44,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-20 10:55:44,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:44,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:44,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1254125298] [2022-11-20 10:55:44,317 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1254125298] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:44,317 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:44,317 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 10:55:44,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049433512] [2022-11-20 10:55:44,317 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:44,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 10:55:44,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:44,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 10:55:44,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:55:44,321 INFO L87 Difference]: Start difference. First operand 260 states and 331 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:55:44,755 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:44,756 INFO L93 Difference]: Finished difference Result 516 states and 665 transitions. [2022-11-20 10:55:44,756 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-20 10:55:44,756 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-11-20 10:55:44,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:44,759 INFO L225 Difference]: With dead ends: 516 [2022-11-20 10:55:44,759 INFO L226 Difference]: Without dead ends: 309 [2022-11-20 10:55:44,760 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=87, Invalid=185, Unknown=0, NotChecked=0, Total=272 [2022-11-20 10:55:44,764 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 211 mSDsluCounter, 365 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 484 SdHoareTripleChecker+Invalid, 360 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:44,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 484 Invalid, 360 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 10:55:44,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2022-11-20 10:55:44,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 296. [2022-11-20 10:55:44,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 231 states have (on average 1.2337662337662338) internal successors, (285), 245 states have internal predecessors, (285), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-11-20 10:55:44,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 361 transitions. [2022-11-20 10:55:44,804 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 361 transitions. Word has length 48 [2022-11-20 10:55:44,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:44,805 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 361 transitions. [2022-11-20 10:55:44,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:55:44,805 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 361 transitions. [2022-11-20 10:55:44,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 10:55:44,807 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:44,807 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:44,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 10:55:44,808 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:44,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:44,808 INFO L85 PathProgramCache]: Analyzing trace with hash 920704793, now seen corresponding path program 1 times [2022-11-20 10:55:44,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:44,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [117885929] [2022-11-20 10:55:44,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:44,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:44,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:55:44,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:55:44,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:55:44,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 10:55:44,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:44,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:44,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:44,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [117885929] [2022-11-20 10:55:44,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [117885929] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:44,917 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:44,917 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:55:44,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1718320419] [2022-11-20 10:55:44,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:44,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:55:44,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:44,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:55:44,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:55:44,920 INFO L87 Difference]: Start difference. First operand 296 states and 361 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:55:45,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:45,154 INFO L93 Difference]: Finished difference Result 538 states and 664 transitions. [2022-11-20 10:55:45,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 10:55:45,155 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-20 10:55:45,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:45,157 INFO L225 Difference]: With dead ends: 538 [2022-11-20 10:55:45,157 INFO L226 Difference]: Without dead ends: 297 [2022-11-20 10:55:45,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-11-20 10:55:45,159 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 140 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:45,159 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 277 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:55:45,160 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-11-20 10:55:45,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 293. [2022-11-20 10:55:45,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 228 states have (on average 1.2324561403508771) internal successors, (281), 242 states have internal predecessors, (281), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-11-20 10:55:45,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 357 transitions. [2022-11-20 10:55:45,199 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 357 transitions. Word has length 50 [2022-11-20 10:55:45,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:45,199 INFO L495 AbstractCegarLoop]: Abstraction has 293 states and 357 transitions. [2022-11-20 10:55:45,200 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:55:45,200 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 357 transitions. [2022-11-20 10:55:45,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 10:55:45,201 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:45,201 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:45,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-20 10:55:45,201 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:45,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:45,202 INFO L85 PathProgramCache]: Analyzing trace with hash 1139559511, now seen corresponding path program 1 times [2022-11-20 10:55:45,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:45,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1386718529] [2022-11-20 10:55:45,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:45,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:45,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:55:45,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:55:45,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:55:45,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-20 10:55:45,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,315 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:55:45,315 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:45,315 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1386718529] [2022-11-20 10:55:45,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1386718529] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:55:45,315 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:55:45,315 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 10:55:45,316 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [828729167] [2022-11-20 10:55:45,316 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:55:45,316 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 10:55:45,316 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:45,317 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 10:55:45,317 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:55:45,317 INFO L87 Difference]: Start difference. First operand 293 states and 357 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:55:45,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:45,568 INFO L93 Difference]: Finished difference Result 509 states and 626 transitions. [2022-11-20 10:55:45,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 10:55:45,568 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-20 10:55:45,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:45,570 INFO L225 Difference]: With dead ends: 509 [2022-11-20 10:55:45,570 INFO L226 Difference]: Without dead ends: 271 [2022-11-20 10:55:45,571 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-20 10:55:45,571 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 132 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:45,572 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 363 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:55:45,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-11-20 10:55:45,594 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 267. [2022-11-20 10:55:45,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 209 states have (on average 1.229665071770335) internal successors, (257), 222 states have internal predecessors, (257), 29 states have call successors, (29), 25 states have call predecessors, (29), 28 states have return successors, (37), 28 states have call predecessors, (37), 29 states have call successors, (37) [2022-11-20 10:55:45,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 323 transitions. [2022-11-20 10:55:45,596 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 323 transitions. Word has length 50 [2022-11-20 10:55:45,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:45,597 INFO L495 AbstractCegarLoop]: Abstraction has 267 states and 323 transitions. [2022-11-20 10:55:45,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:55:45,597 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 323 transitions. [2022-11-20 10:55:45,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-11-20 10:55:45,598 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:55:45,598 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:45,598 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-20 10:55:45,598 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:55:45,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:55:45,599 INFO L85 PathProgramCache]: Analyzing trace with hash 1869867840, now seen corresponding path program 1 times [2022-11-20 10:55:45,599 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:55:45,599 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2076464314] [2022-11-20 10:55:45,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:45,599 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:55:45,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 10:55:45,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 10:55:45,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 10:55:45,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-20 10:55:45,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-11-20 10:55:45,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,740 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-20 10:55:45,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:55:45,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2076464314] [2022-11-20 10:55:45,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2076464314] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:55:45,740 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1273032375] [2022-11-20 10:55:45,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:55:45,741 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:55:45,741 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:55:45,747 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:55:45,763 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 10:55:45,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:55:45,905 INFO L263 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 10:55:45,911 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:55:46,150 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 3 proven. 12 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-20 10:55:46,150 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:55:46,569 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-20 10:55:46,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1273032375] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:55:46,569 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:55:46,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2022-11-20 10:55:46,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946735807] [2022-11-20 10:55:46,570 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:55:46,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-20 10:55:46,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:55:46,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-20 10:55:46,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2022-11-20 10:55:46,571 INFO L87 Difference]: Start difference. First operand 267 states and 323 transitions. Second operand has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2022-11-20 10:55:47,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:55:47,523 INFO L93 Difference]: Finished difference Result 546 states and 704 transitions. [2022-11-20 10:55:47,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 10:55:47,524 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) Word has length 79 [2022-11-20 10:55:47,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:55:47,525 INFO L225 Difference]: With dead ends: 546 [2022-11-20 10:55:47,525 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 10:55:47,527 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 166 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 390 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=628, Invalid=1442, Unknown=0, NotChecked=0, Total=2070 [2022-11-20 10:55:47,528 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 620 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 626 mSolverCounterSat, 210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 622 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 836 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 210 IncrementalHoareTripleChecker+Valid, 626 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-20 10:55:47,528 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [622 Valid, 572 Invalid, 836 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [210 Valid, 626 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-20 10:55:47,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 10:55:47,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 10:55:47,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 10:55:47,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 10:55:47,530 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2022-11-20 10:55:47,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:55:47,530 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 10:55:47,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2022-11-20 10:55:47,531 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 10:55:47,531 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 10:55:47,534 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 10:55:47,548 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 10:55:47,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:55:47,742 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 10:55:50,793 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 88 94) no Hoare annotation was computed. [2022-11-20 10:55:50,794 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 88 94) the Hoare annotation is: true [2022-11-20 10:55:50,794 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 388 399) the Hoare annotation is: true [2022-11-20 10:55:50,794 INFO L899 garLoopResultBuilder]: For program point L392-1(lines 388 399) no Hoare annotation was computed. [2022-11-20 10:55:50,794 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 388 399) no Hoare annotation was computed. [2022-11-20 10:55:50,794 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 870 899) no Hoare annotation was computed. [2022-11-20 10:55:50,794 INFO L902 garLoopResultBuilder]: At program point L895(lines 870 899) the Hoare annotation is: true [2022-11-20 10:55:50,794 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 870 899) the Hoare annotation is: true [2022-11-20 10:55:50,794 INFO L899 garLoopResultBuilder]: For program point L891(line 891) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 888) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L902 garLoopResultBuilder]: At program point L884-1(lines 884 888) the Hoare annotation is: true [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point L881(line 881) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L902 garLoopResultBuilder]: At program point L880-2(lines 880 894) the Hoare annotation is: true [2022-11-20 10:55:50,795 INFO L902 garLoopResultBuilder]: At program point L876(line 876) the Hoare annotation is: true [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point L876-1(line 876) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 400 408) the Hoare annotation is: true [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 400 408) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 400 408) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point L126(lines 126 143) no Hoare annotation was computed. [2022-11-20 10:55:50,795 INFO L899 garLoopResultBuilder]: For program point L337(lines 337 357) no Hoare annotation was computed. [2022-11-20 10:55:50,796 INFO L899 garLoopResultBuilder]: For program point L969(line 969) no Hoare annotation was computed. [2022-11-20 10:55:50,796 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 64 87) no Hoare annotation was computed. [2022-11-20 10:55:50,796 INFO L895 garLoopResultBuilder]: At program point L160(lines 155 162) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,796 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 251) no Hoare annotation was computed. [2022-11-20 10:55:50,796 INFO L899 garLoopResultBuilder]: For program point L247-2(lines 247 251) no Hoare annotation was computed. [2022-11-20 10:55:50,796 INFO L895 garLoopResultBuilder]: At program point L437(lines 432 440) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (and (<= 2 ~waterLevel~0) .cse2 .cse6) .cse7)) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse5 (and .cse1 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse8 .cse3 .cse6) (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1 .cse8 .cse3) .cse7)))) [2022-11-20 10:55:50,797 INFO L895 garLoopResultBuilder]: At program point L970(lines 965 972) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,797 INFO L895 garLoopResultBuilder]: At program point L136(line 136) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (= |timeShift_processEnvironment_~tmp~1#1| 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,797 INFO L899 garLoopResultBuilder]: For program point L347(lines 347 353) no Hoare annotation was computed. [2022-11-20 10:55:50,797 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 356) no Hoare annotation was computed. [2022-11-20 10:55:50,797 INFO L895 garLoopResultBuilder]: At program point L343-1(lines 328 360) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1)) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 1)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse4 .cse0 .cse6) (not (= |old(~pumpRunning~0)| 0)) .cse3 (and (<= 2 ~waterLevel~0) .cse6 .cse2) .cse5)))) [2022-11-20 10:55:50,797 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 372) no Hoare annotation was computed. [2022-11-20 10:55:50,797 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-11-20 10:55:50,798 INFO L895 garLoopResultBuilder]: At program point L368-2(lines 364 375) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,798 INFO L899 garLoopResultBuilder]: For program point L335-1(line 335) no Hoare annotation was computed. [2022-11-20 10:55:50,798 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2022-11-20 10:55:50,798 INFO L895 garLoopResultBuilder]: At program point L141-1(lines 122 146) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-11-20 10:55:50,798 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-11-20 10:55:50,798 INFO L895 garLoopResultBuilder]: At program point L253(lines 238 256) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,799 INFO L895 garLoopResultBuilder]: At program point L179(lines 174 182) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= |timeShift_isPumpRunning_#res#1| 1) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse1))) [2022-11-20 10:55:50,799 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 64 87) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and .cse0 (= ~pumpRunning~0 1))))) [2022-11-20 10:55:50,799 INFO L895 garLoopResultBuilder]: At program point L460(lines 455 463) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 10:55:50,799 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 64 87) no Hoare annotation was computed. [2022-11-20 10:55:50,799 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 969) no Hoare annotation was computed. [2022-11-20 10:55:50,799 INFO L899 garLoopResultBuilder]: For program point L68-1(lines 67 86) no Hoare annotation was computed. [2022-11-20 10:55:50,799 INFO L899 garLoopResultBuilder]: For program point L130(lines 130 138) no Hoare annotation was computed. [2022-11-20 10:55:50,799 INFO L902 garLoopResultBuilder]: At program point L320(lines 261 324) the Hoare annotation is: true [2022-11-20 10:55:50,800 INFO L902 garLoopResultBuilder]: At program point L960(lines 941 963) the Hoare annotation is: true [2022-11-20 10:55:50,800 INFO L895 garLoopResultBuilder]: At program point L283(line 283) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-11-20 10:55:50,800 INFO L895 garLoopResultBuilder]: At program point L498(lines 493 501) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:55:50,800 INFO L895 garLoopResultBuilder]: At program point L490(lines 486 492) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:55:50,800 INFO L895 garLoopResultBuilder]: At program point L928(lines 924 930) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) [2022-11-20 10:55:50,800 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 10:55:50,800 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 10:55:50,800 INFO L895 garLoopResultBuilder]: At program point L317(lines 270 318) the Hoare annotation is: false [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point L272(lines 271 316) no Hoare annotation was computed. [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point L301(lines 301 312) no Hoare annotation was computed. [2022-11-20 10:55:50,801 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-20 10:55:50,801 INFO L895 garLoopResultBuilder]: At program point L483(lines 479 485) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 10:55:50,801 INFO L895 garLoopResultBuilder]: At program point L314(lines 271 316) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point L281(lines 281 287) no Hoare annotation was computed. [2022-11-20 10:55:50,801 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 277) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L902 garLoopResultBuilder]: At program point L938(lines 931 940) the Hoare annotation is: true [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L951(lines 951 958) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L951-2(lines 951 958) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L307(lines 307 311) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L895 garLoopResultBuilder]: At program point L307-2(lines 301 312) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-11-20 10:55:50,802 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 96 120) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:55:50,807 INFO L895 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))))) [2022-11-20 10:55:50,807 INFO L895 garLoopResultBuilder]: At program point L234(lines 219 237) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= ~waterLevel~0 1))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) .cse1 (and .cse0 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (not (<= ~waterLevel~0 2)))) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) (not .cse2)))) [2022-11-20 10:55:50,807 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 112) no Hoare annotation was computed. [2022-11-20 10:55:50,807 INFO L899 garLoopResultBuilder]: For program point L100(lines 100 117) no Hoare annotation was computed. [2022-11-20 10:55:50,809 INFO L899 garLoopResultBuilder]: For program point L228(lines 228 232) no Hoare annotation was computed. [2022-11-20 10:55:50,809 INFO L899 garLoopResultBuilder]: For program point L228-2(lines 228 232) no Hoare annotation was computed. [2022-11-20 10:55:50,809 INFO L899 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2022-11-20 10:55:50,809 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 96 120) no Hoare annotation was computed. [2022-11-20 10:55:50,810 INFO L895 garLoopResultBuilder]: At program point L152(lines 147 154) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~0#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= ~pumpRunning~0 1)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1))))) [2022-11-20 10:55:50,810 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:55:50,810 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 96 120) no Hoare annotation was computed. [2022-11-20 10:55:50,810 INFO L895 garLoopResultBuilder]: At program point L450(lines 441 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and .cse2 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)))))) [2022-11-20 10:55:50,810 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 376 387) no Hoare annotation was computed. [2022-11-20 10:55:50,810 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 376 387) no Hoare annotation was computed. [2022-11-20 10:55:50,811 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 376 387) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or .cse0 (not (= ~pumpRunning~0 1)) .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-11-20 10:55:50,814 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:55:50,818 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 10:55:50,841 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 10:55:50 BoogieIcfgContainer [2022-11-20 10:55:50,841 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 10:55:50,842 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 10:55:50,842 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 10:55:50,842 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 10:55:50,843 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:55:41" (3/4) ... [2022-11-20 10:55:50,846 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 10:55:50,852 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 10:55:50,852 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 10:55:50,852 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 10:55:50,853 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 10:55:50,853 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 10:55:50,853 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:55:50,853 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 10:55:50,859 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-20 10:55:50,860 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 10:55:50,861 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 10:55:50,861 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:55:50,861 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:55:50,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-20 10:55:50,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-11-20 10:55:50,887 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-11-20 10:55:50,888 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) [2022-11-20 10:55:50,889 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,890 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && waterLevel <= 1) && \result == 1)) [2022-11-20 10:55:50,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((\result == 1 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && 2 <= waterLevel) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2022-11-20 10:55:50,891 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 1)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2022-11-20 10:55:50,892 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:55:50,930 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 10:55:50,931 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 10:55:50,931 INFO L158 Benchmark]: Toolchain (without parser) took 10972.49ms. Allocated memory was 130.0MB in the beginning and 161.5MB in the end (delta: 31.5MB). Free memory was 87.8MB in the beginning and 74.6MB in the end (delta: 13.2MB). Peak memory consumption was 46.2MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,932 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 130.0MB. Free memory is still 77.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 10:55:50,932 INFO L158 Benchmark]: CACSL2BoogieTranslator took 584.58ms. Allocated memory is still 130.0MB. Free memory was 87.8MB in the beginning and 68.5MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,932 INFO L158 Benchmark]: Boogie Procedure Inliner took 69.75ms. Allocated memory is still 130.0MB. Free memory was 68.5MB in the beginning and 66.3MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,933 INFO L158 Benchmark]: Boogie Preprocessor took 35.88ms. Allocated memory is still 130.0MB. Free memory was 66.3MB in the beginning and 64.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,934 INFO L158 Benchmark]: RCFGBuilder took 589.18ms. Allocated memory was 130.0MB in the beginning and 161.5MB in the end (delta: 31.5MB). Free memory was 64.7MB in the beginning and 122.8MB in the end (delta: -58.1MB). Peak memory consumption was 14.8MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,934 INFO L158 Benchmark]: TraceAbstraction took 9597.30ms. Allocated memory is still 161.5MB. Free memory was 121.8MB in the beginning and 80.9MB in the end (delta: 40.9MB). Peak memory consumption was 84.9MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,935 INFO L158 Benchmark]: Witness Printer took 88.97ms. Allocated memory is still 161.5MB. Free memory was 80.9MB in the beginning and 74.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 10:55:50,938 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 130.0MB. Free memory is still 77.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 584.58ms. Allocated memory is still 130.0MB. Free memory was 87.8MB in the beginning and 68.5MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 69.75ms. Allocated memory is still 130.0MB. Free memory was 68.5MB in the beginning and 66.3MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 35.88ms. Allocated memory is still 130.0MB. Free memory was 66.3MB in the beginning and 64.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 589.18ms. Allocated memory was 130.0MB in the beginning and 161.5MB in the end (delta: 31.5MB). Free memory was 64.7MB in the beginning and 122.8MB in the end (delta: -58.1MB). Peak memory consumption was 14.8MB. Max. memory is 16.1GB. * TraceAbstraction took 9597.30ms. Allocated memory is still 161.5MB. Free memory was 121.8MB in the beginning and 80.9MB in the end (delta: 40.9MB). Peak memory consumption was 84.9MB. Max. memory is 16.1GB. * Witness Printer took 88.97ms. Allocated memory is still 161.5MB. Free memory was 80.9MB in the beginning and 74.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 969]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 9.5s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1832 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1804 mSDsluCounter, 3598 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2489 mSDsCounter, 455 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1898 IncrementalHoareTripleChecker+Invalid, 2353 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 455 mSolverCounterUnsat, 1109 mSDtfsCounter, 1898 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 356 GetRequests, 239 SyntacticMatches, 7 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 425 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=296occurred in iteration=9, InterpolantAutomatonStates: 104, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 49 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 957 PreInvPairs, 1134 NumberOfFragments, 1162 HoareAnnotationTreeSize, 957 FomulaSimplifications, 66 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 40 FomulaSimplificationsInter, 5670 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 603 NumberOfCodeBlocks, 603 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 668 ConstructedInterpolants, 0 QuantifiedInterpolants, 1210 SizeOfPredicates, 4 NumberOfNonLiveVariables, 294 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 43/60 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: ((((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && waterLevel <= 1) && \result == 1)) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((\result == 1 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 219]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && 2 <= waterLevel) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((((1 == systemActive && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 1)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 364]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-11-20 10:55:50,993 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_3de555c1-705d-4845-9989-d4bc793a0daf/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE