./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 11:16:42,129 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 11:16:42,131 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 11:16:42,152 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 11:16:42,153 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 11:16:42,154 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 11:16:42,155 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 11:16:42,157 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 11:16:42,159 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 11:16:42,160 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 11:16:42,161 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 11:16:42,162 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 11:16:42,163 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 11:16:42,166 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 11:16:42,170 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 11:16:42,173 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 11:16:42,174 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 11:16:42,177 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 11:16:42,179 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 11:16:42,182 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 11:16:42,187 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 11:16:42,188 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 11:16:42,193 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 11:16:42,194 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 11:16:42,198 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 11:16:42,202 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 11:16:42,203 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 11:16:42,204 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 11:16:42,205 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 11:16:42,206 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 11:16:42,208 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 11:16:42,209 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 11:16:42,211 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 11:16:42,212 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 11:16:42,213 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 11:16:42,214 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 11:16:42,215 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 11:16:42,216 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 11:16:42,216 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 11:16:42,218 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 11:16:42,219 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 11:16:42,220 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 11:16:42,259 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 11:16:42,263 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 11:16:42,263 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 11:16:42,264 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 11:16:42,265 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 11:16:42,265 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 11:16:42,266 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 11:16:42,266 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 11:16:42,266 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 11:16:42,266 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 11:16:42,267 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 11:16:42,268 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 11:16:42,268 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 11:16:42,268 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 11:16:42,268 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 11:16:42,269 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 11:16:42,269 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 11:16:42,269 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 11:16:42,269 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 11:16:42,269 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 11:16:42,270 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 11:16:42,270 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 11:16:42,270 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 11:16:42,270 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 11:16:42,271 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:16:42,271 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 11:16:42,271 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 11:16:42,271 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 11:16:42,272 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 11:16:42,272 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 11:16:42,273 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 11:16:42,273 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 11:16:42,273 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 11:16:42,273 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5340faf3ec1f0e0bc66d280fc3b45c510e704ff1d108d74101ee8606e665888 [2022-11-20 11:16:42,518 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 11:16:42,539 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 11:16:42,541 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 11:16:42,543 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 11:16:42,543 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 11:16:42,545 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-20 11:16:45,561 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 11:16:45,870 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 11:16:45,871 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c [2022-11-20 11:16:45,883 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/data/9429d3858/7dc4ae9659b04274a28581b342a1fd8a/FLAG8101986ca [2022-11-20 11:16:45,918 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/data/9429d3858/7dc4ae9659b04274a28581b342a1fd8a [2022-11-20 11:16:45,923 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 11:16:45,924 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 11:16:45,932 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 11:16:45,933 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 11:16:45,937 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 11:16:45,940 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:16:45" (1/1) ... [2022-11-20 11:16:45,941 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6ffa28a7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:45, skipping insertion in model container [2022-11-20 11:16:45,941 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 11:16:45" (1/1) ... [2022-11-20 11:16:45,949 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 11:16:46,009 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 11:16:46,138 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-20 11:16:46,282 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:16:46,299 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 11:16:46,328 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/sv-benchmarks/c/product-lines/minepump_spec4_product61.cil.c[1605,1618] [2022-11-20 11:16:46,414 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 11:16:46,440 INFO L208 MainTranslator]: Completed translation [2022-11-20 11:16:46,441 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46 WrapperNode [2022-11-20 11:16:46,441 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 11:16:46,443 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 11:16:46,443 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 11:16:46,443 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 11:16:46,450 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,463 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,489 INFO L138 Inliner]: procedures = 57, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 233 [2022-11-20 11:16:46,489 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 11:16:46,490 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 11:16:46,490 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 11:16:46,490 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 11:16:46,500 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,500 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,502 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,502 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,508 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,513 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,514 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,516 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,518 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 11:16:46,519 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 11:16:46,519 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 11:16:46,519 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 11:16:46,520 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (1/1) ... [2022-11-20 11:16:46,534 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 11:16:46,545 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:16:46,555 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 11:16:46,562 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 11:16:46,598 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 11:16:46,599 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 11:16:46,599 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 11:16:46,599 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 11:16:46,599 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 11:16:46,599 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 11:16:46,599 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 11:16:46,600 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:16:46,600 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:16:46,600 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 11:16:46,600 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 11:16:46,600 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:16:46,601 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:16:46,601 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-20 11:16:46,601 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-20 11:16:46,601 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 11:16:46,601 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 11:16:46,601 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 11:16:46,602 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 11:16:46,602 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 11:16:46,602 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 11:16:46,602 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 11:16:46,680 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 11:16:46,682 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 11:16:46,997 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 11:16:47,005 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 11:16:47,005 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 11:16:47,008 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:16:47 BoogieIcfgContainer [2022-11-20 11:16:47,008 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 11:16:47,011 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 11:16:47,011 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 11:16:47,014 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 11:16:47,014 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 11:16:45" (1/3) ... [2022-11-20 11:16:47,015 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f40bc0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:16:47, skipping insertion in model container [2022-11-20 11:16:47,015 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 11:16:46" (2/3) ... [2022-11-20 11:16:47,016 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4f40bc0e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 11:16:47, skipping insertion in model container [2022-11-20 11:16:47,016 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:16:47" (3/3) ... [2022-11-20 11:16:47,017 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product61.cil.c [2022-11-20 11:16:47,036 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 11:16:47,036 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 11:16:47,102 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 11:16:47,109 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@575f195e, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 11:16:47,109 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 11:16:47,113 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 11:16:47,120 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-20 11:16:47,121 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:47,121 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:47,122 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:47,127 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:47,127 INFO L85 PathProgramCache]: Analyzing trace with hash 332135154, now seen corresponding path program 1 times [2022-11-20 11:16:47,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:47,134 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292770550] [2022-11-20 11:16:47,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:47,135 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:47,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:47,317 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:47,318 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:47,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292770550] [2022-11-20 11:16:47,319 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292770550] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:47,319 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:47,319 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 11:16:47,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260140232] [2022-11-20 11:16:47,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:47,326 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 11:16:47,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:47,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 11:16:47,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:16:47,361 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,402 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:47,402 INFO L93 Difference]: Finished difference Result 198 states and 269 transitions. [2022-11-20 11:16:47,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 11:16:47,405 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-20 11:16:47,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:47,414 INFO L225 Difference]: With dead ends: 198 [2022-11-20 11:16:47,414 INFO L226 Difference]: Without dead ends: 94 [2022-11-20 11:16:47,419 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 11:16:47,422 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:47,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:16:47,439 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-20 11:16:47,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-11-20 11:16:47,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 11:16:47,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-11-20 11:16:47,471 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 19 [2022-11-20 11:16:47,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:47,471 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-11-20 11:16:47,472 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,472 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-11-20 11:16:47,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-20 11:16:47,474 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:47,474 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:47,475 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 11:16:47,475 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:47,476 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:47,476 INFO L85 PathProgramCache]: Analyzing trace with hash 2057254746, now seen corresponding path program 1 times [2022-11-20 11:16:47,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:47,476 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794086259] [2022-11-20 11:16:47,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:47,477 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:47,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:47,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:47,699 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:47,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794086259] [2022-11-20 11:16:47,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794086259] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:47,701 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:47,702 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 11:16:47,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1550714740] [2022-11-20 11:16:47,703 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:47,704 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:16:47,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:47,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:16:47,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:16:47,710 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:47,737 INFO L93 Difference]: Finished difference Result 154 states and 200 transitions. [2022-11-20 11:16:47,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:16:47,738 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-20 11:16:47,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:47,740 INFO L225 Difference]: With dead ends: 154 [2022-11-20 11:16:47,740 INFO L226 Difference]: Without dead ends: 85 [2022-11-20 11:16:47,741 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:16:47,743 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 12 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:47,743 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 202 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:16:47,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-20 11:16:47,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-20 11:16:47,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 11:16:47,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-20 11:16:47,757 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 20 [2022-11-20 11:16:47,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:47,758 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-20 11:16:47,758 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,758 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-20 11:16:47,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-20 11:16:47,759 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:47,759 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:47,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 11:16:47,760 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:47,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:47,761 INFO L85 PathProgramCache]: Analyzing trace with hash 1387625524, now seen corresponding path program 1 times [2022-11-20 11:16:47,761 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:47,761 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775110096] [2022-11-20 11:16:47,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:47,762 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:47,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:47,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:47,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:47,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775110096] [2022-11-20 11:16:47,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775110096] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:47,881 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:47,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 11:16:47,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842142650] [2022-11-20 11:16:47,882 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:47,882 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 11:16:47,882 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:47,883 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 11:16:47,883 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:16:47,883 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:47,918 INFO L93 Difference]: Finished difference Result 163 states and 214 transitions. [2022-11-20 11:16:47,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 11:16:47,928 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-11-20 11:16:47,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:47,929 INFO L225 Difference]: With dead ends: 163 [2022-11-20 11:16:47,930 INFO L226 Difference]: Without dead ends: 85 [2022-11-20 11:16:47,931 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 11:16:47,932 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 92 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:47,933 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 108 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:16:47,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-20 11:16:47,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-20 11:16:47,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 11:16:47,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-11-20 11:16:47,949 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 24 [2022-11-20 11:16:47,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:47,949 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-11-20 11:16:47,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 2 states have internal predecessors, (23), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:47,949 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-11-20 11:16:47,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-20 11:16:47,951 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:47,951 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:47,952 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 11:16:47,952 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:47,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:47,953 INFO L85 PathProgramCache]: Analyzing trace with hash 610675451, now seen corresponding path program 1 times [2022-11-20 11:16:47,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:47,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [20484451] [2022-11-20 11:16:47,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:47,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:47,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:16:48,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2022-11-20 11:16:48,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,159 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:48,159 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:48,159 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [20484451] [2022-11-20 11:16:48,159 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [20484451] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:48,159 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:48,160 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 11:16:48,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275070997] [2022-11-20 11:16:48,160 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:48,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 11:16:48,161 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:48,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 11:16:48,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 11:16:48,161 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:16:48,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:48,424 INFO L93 Difference]: Finished difference Result 238 states and 306 transitions. [2022-11-20 11:16:48,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 11:16:48,425 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 37 [2022-11-20 11:16:48,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:48,427 INFO L225 Difference]: With dead ends: 238 [2022-11-20 11:16:48,427 INFO L226 Difference]: Without dead ends: 160 [2022-11-20 11:16:48,428 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 11:16:48,430 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 153 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:48,430 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 190 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:16:48,431 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-20 11:16:48,453 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 154. [2022-11-20 11:16:48,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 126 states have internal predecessors, (149), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-11-20 11:16:48,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 192 transitions. [2022-11-20 11:16:48,456 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 192 transitions. Word has length 37 [2022-11-20 11:16:48,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:48,457 INFO L495 AbstractCegarLoop]: Abstraction has 154 states and 192 transitions. [2022-11-20 11:16:48,457 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 11:16:48,457 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 192 transitions. [2022-11-20 11:16:48,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-11-20 11:16:48,459 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:48,459 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:48,459 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 11:16:48,460 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:48,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:48,460 INFO L85 PathProgramCache]: Analyzing trace with hash -1599675381, now seen corresponding path program 1 times [2022-11-20 11:16:48,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:48,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308003150] [2022-11-20 11:16:48,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:48,461 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:48,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:16:48,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:48,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:48,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:48,739 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:48,741 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:48,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308003150] [2022-11-20 11:16:48,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308003150] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:48,743 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:48,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 11:16:48,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1072659384] [2022-11-20 11:16:48,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:48,745 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 11:16:48,745 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:48,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 11:16:48,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:16:48,749 INFO L87 Difference]: Start difference. First operand 154 states and 192 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 11:16:49,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:49,516 INFO L93 Difference]: Finished difference Result 589 states and 788 transitions. [2022-11-20 11:16:49,516 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-20 11:16:49,517 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 45 [2022-11-20 11:16:49,517 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:49,521 INFO L225 Difference]: With dead ends: 589 [2022-11-20 11:16:49,522 INFO L226 Difference]: Without dead ends: 442 [2022-11-20 11:16:49,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=105, Invalid=237, Unknown=0, NotChecked=0, Total=342 [2022-11-20 11:16:49,525 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 360 mSDsluCounter, 409 mSDsCounter, 0 mSdLazyCounter, 372 mSolverCounterSat, 128 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 365 SdHoareTripleChecker+Valid, 512 SdHoareTripleChecker+Invalid, 500 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 128 IncrementalHoareTripleChecker+Valid, 372 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:49,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [365 Valid, 512 Invalid, 500 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [128 Valid, 372 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-20 11:16:49,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 442 states. [2022-11-20 11:16:49,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 442 to 424. [2022-11-20 11:16:49,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 424 states, 317 states have (on average 1.2460567823343849) internal successors, (395), 342 states have internal predecessors, (395), 46 states have call successors, (46), 43 states have call predecessors, (46), 60 states have return successors, (105), 54 states have call predecessors, (105), 46 states have call successors, (105) [2022-11-20 11:16:49,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 424 states to 424 states and 546 transitions. [2022-11-20 11:16:49,602 INFO L78 Accepts]: Start accepts. Automaton has 424 states and 546 transitions. Word has length 45 [2022-11-20 11:16:49,602 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:49,603 INFO L495 AbstractCegarLoop]: Abstraction has 424 states and 546 transitions. [2022-11-20 11:16:49,603 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 11:16:49,603 INFO L276 IsEmpty]: Start isEmpty. Operand 424 states and 546 transitions. [2022-11-20 11:16:49,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-20 11:16:49,608 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:49,608 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:49,609 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 11:16:49,609 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:49,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:49,610 INFO L85 PathProgramCache]: Analyzing trace with hash 414561125, now seen corresponding path program 1 times [2022-11-20 11:16:49,610 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:49,610 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1551827668] [2022-11-20 11:16:49,610 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:49,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:49,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:49,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:49,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:49,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:16:49,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:49,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:49,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:49,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:49,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:49,762 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:49,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:49,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1551827668] [2022-11-20 11:16:49,763 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1551827668] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:49,763 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:49,763 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 11:16:49,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721778313] [2022-11-20 11:16:49,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:49,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 11:16:49,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:49,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 11:16:49,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:16:49,765 INFO L87 Difference]: Start difference. First operand 424 states and 546 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 11:16:50,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:50,403 INFO L93 Difference]: Finished difference Result 515 states and 667 transitions. [2022-11-20 11:16:50,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-11-20 11:16:50,404 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 49 [2022-11-20 11:16:50,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:50,408 INFO L225 Difference]: With dead ends: 515 [2022-11-20 11:16:50,408 INFO L226 Difference]: Without dead ends: 513 [2022-11-20 11:16:50,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 91 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=127, Invalid=335, Unknown=0, NotChecked=0, Total=462 [2022-11-20 11:16:50,410 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 236 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 404 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:50,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 359 Invalid, 480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 404 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-20 11:16:50,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2022-11-20 11:16:50,467 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 465. [2022-11-20 11:16:50,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 465 states, 350 states have (on average 1.2314285714285715) internal successors, (431), 378 states have internal predecessors, (431), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-11-20 11:16:50,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 465 states to 465 states and 600 transitions. [2022-11-20 11:16:50,473 INFO L78 Accepts]: Start accepts. Automaton has 465 states and 600 transitions. Word has length 49 [2022-11-20 11:16:50,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:50,473 INFO L495 AbstractCegarLoop]: Abstraction has 465 states and 600 transitions. [2022-11-20 11:16:50,474 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 11:16:50,474 INFO L276 IsEmpty]: Start isEmpty. Operand 465 states and 600 transitions. [2022-11-20 11:16:50,476 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-20 11:16:50,476 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:50,476 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:50,477 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 11:16:50,477 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:50,477 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:50,477 INFO L85 PathProgramCache]: Analyzing trace with hash -1510129521, now seen corresponding path program 1 times [2022-11-20 11:16:50,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:50,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [703081475] [2022-11-20 11:16:50,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:50,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:50,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:50,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:50,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:50,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:16:50,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:50,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:50,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:50,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:50,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:50,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:50,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:50,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [703081475] [2022-11-20 11:16:50,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [703081475] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:50,611 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:50,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 11:16:50,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [771984688] [2022-11-20 11:16:50,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:50,612 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 11:16:50,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:50,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 11:16:50,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:16:50,613 INFO L87 Difference]: Start difference. First operand 465 states and 600 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 11:16:50,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:50,977 INFO L93 Difference]: Finished difference Result 971 states and 1329 transitions. [2022-11-20 11:16:50,978 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 11:16:50,978 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 55 [2022-11-20 11:16:50,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:50,982 INFO L225 Difference]: With dead ends: 971 [2022-11-20 11:16:50,982 INFO L226 Difference]: Without dead ends: 513 [2022-11-20 11:16:50,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-20 11:16:50,985 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 160 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 398 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:50,986 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 285 Invalid, 398 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:16:50,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 513 states. [2022-11-20 11:16:51,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 513 to 474. [2022-11-20 11:16:51,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 474 states, 359 states have (on average 1.2256267409470751) internal successors, (440), 387 states have internal predecessors, (440), 50 states have call successors, (50), 43 states have call predecessors, (50), 64 states have return successors, (119), 59 states have call predecessors, (119), 50 states have call successors, (119) [2022-11-20 11:16:51,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 474 states to 474 states and 609 transitions. [2022-11-20 11:16:51,041 INFO L78 Accepts]: Start accepts. Automaton has 474 states and 609 transitions. Word has length 55 [2022-11-20 11:16:51,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:51,042 INFO L495 AbstractCegarLoop]: Abstraction has 474 states and 609 transitions. [2022-11-20 11:16:51,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 11:16:51,042 INFO L276 IsEmpty]: Start isEmpty. Operand 474 states and 609 transitions. [2022-11-20 11:16:51,044 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-11-20 11:16:51,044 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:51,044 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:51,044 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 11:16:51,045 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:51,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:51,045 INFO L85 PathProgramCache]: Analyzing trace with hash -1644143027, now seen corresponding path program 1 times [2022-11-20 11:16:51,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:51,046 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102635616] [2022-11-20 11:16:51,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:51,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:51,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:51,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 11:16:51,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:51,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:51,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:51,203 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:51,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102635616] [2022-11-20 11:16:51,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102635616] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:51,203 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 11:16:51,203 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 11:16:51,204 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1975655594] [2022-11-20 11:16:51,204 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:51,204 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 11:16:51,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:51,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 11:16:51,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 11:16:51,205 INFO L87 Difference]: Start difference. First operand 474 states and 609 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 11:16:51,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:51,569 INFO L93 Difference]: Finished difference Result 942 states and 1257 transitions. [2022-11-20 11:16:51,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-20 11:16:51,570 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 55 [2022-11-20 11:16:51,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:51,573 INFO L225 Difference]: With dead ends: 942 [2022-11-20 11:16:51,573 INFO L226 Difference]: Without dead ends: 475 [2022-11-20 11:16:51,575 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-20 11:16:51,576 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 259 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 271 mSolverCounterSat, 88 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 262 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 88 IncrementalHoareTripleChecker+Valid, 271 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:51,576 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [262 Valid, 221 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [88 Valid, 271 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 11:16:51,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2022-11-20 11:16:51,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 458. [2022-11-20 11:16:51,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 458 states, 346 states have (on average 1.2196531791907514) internal successors, (422), 373 states have internal predecessors, (422), 50 states have call successors, (50), 42 states have call predecessors, (50), 61 states have return successors, (113), 57 states have call predecessors, (113), 50 states have call successors, (113) [2022-11-20 11:16:51,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 585 transitions. [2022-11-20 11:16:51,627 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 585 transitions. Word has length 55 [2022-11-20 11:16:51,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:51,627 INFO L495 AbstractCegarLoop]: Abstraction has 458 states and 585 transitions. [2022-11-20 11:16:51,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 11:16:51,628 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 585 transitions. [2022-11-20 11:16:51,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2022-11-20 11:16:51,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:51,631 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:51,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 11:16:51,632 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:51,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:51,632 INFO L85 PathProgramCache]: Analyzing trace with hash -493181504, now seen corresponding path program 1 times [2022-11-20 11:16:51,632 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:51,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926743712] [2022-11-20 11:16:51,633 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:51,633 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:51,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:51,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:16:51,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:16:51,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:51,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:51,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-20 11:16:51,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-20 11:16:51,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:51,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:51,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:51,919 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 11 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-20 11:16:51,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:51,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926743712] [2022-11-20 11:16:51,920 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926743712] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:16:51,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [326015471] [2022-11-20 11:16:51,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:51,921 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:51,921 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:16:51,924 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:16:51,953 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 11:16:52,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:52,076 INFO L263 TraceCheckSpWp]: Trace formula consists of 345 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 11:16:52,084 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:16:52,303 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 16 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 11:16:52,304 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 11:16:52,542 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-20 11:16:52,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [326015471] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 11:16:52,543 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 11:16:52,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 11 [2022-11-20 11:16:52,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352345346] [2022-11-20 11:16:52,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 11:16:52,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-20 11:16:52,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:52,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-20 11:16:52,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2022-11-20 11:16:52,545 INFO L87 Difference]: Start difference. First operand 458 states and 585 transitions. Second operand has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:16:53,647 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:53,648 INFO L93 Difference]: Finished difference Result 1035 states and 1398 transitions. [2022-11-20 11:16:53,648 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-20 11:16:53,649 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 101 [2022-11-20 11:16:53,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:53,653 INFO L225 Difference]: With dead ends: 1035 [2022-11-20 11:16:53,654 INFO L226 Difference]: Without dead ends: 584 [2022-11-20 11:16:53,656 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 257 GetRequests, 216 SyntacticMatches, 9 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 303 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=279, Invalid=843, Unknown=0, NotChecked=0, Total=1122 [2022-11-20 11:16:53,659 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 467 mSDsluCounter, 512 mSDsCounter, 0 mSdLazyCounter, 912 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 473 SdHoareTripleChecker+Valid, 594 SdHoareTripleChecker+Invalid, 1104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 912 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:53,659 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [473 Valid, 594 Invalid, 1104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 912 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-20 11:16:53,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 584 states. [2022-11-20 11:16:53,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 584 to 515. [2022-11-20 11:16:53,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 515 states, 388 states have (on average 1.2190721649484537) internal successors, (473), 416 states have internal predecessors, (473), 61 states have call successors, (61), 54 states have call predecessors, (61), 65 states have return successors, (136), 62 states have call predecessors, (136), 61 states have call successors, (136) [2022-11-20 11:16:53,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 515 states to 515 states and 670 transitions. [2022-11-20 11:16:53,726 INFO L78 Accepts]: Start accepts. Automaton has 515 states and 670 transitions. Word has length 101 [2022-11-20 11:16:53,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:53,726 INFO L495 AbstractCegarLoop]: Abstraction has 515 states and 670 transitions. [2022-11-20 11:16:53,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 9.272727272727273) internal successors, (102), 8 states have internal predecessors, (102), 3 states have call successors, (21), 6 states have call predecessors, (21), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:16:53,727 INFO L276 IsEmpty]: Start isEmpty. Operand 515 states and 670 transitions. [2022-11-20 11:16:53,729 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-11-20 11:16:53,730 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:53,730 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:53,740 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-20 11:16:53,940 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:53,941 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:53,941 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:53,941 INFO L85 PathProgramCache]: Analyzing trace with hash -879070667, now seen corresponding path program 2 times [2022-11-20 11:16:53,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:53,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199035748] [2022-11-20 11:16:53,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:53,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:53,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:54,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:16:54,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:16:54,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:54,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:54,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-20 11:16:54,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-20 11:16:54,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 11:16:54,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:54,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,490 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:54,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,492 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-11-20 11:16:54,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-20 11:16:54,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:54,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:54,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:54,505 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 49 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-20 11:16:54,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:54,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199035748] [2022-11-20 11:16:54,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199035748] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:16:54,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2053868101] [2022-11-20 11:16:54,506 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-11-20 11:16:54,506 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:54,507 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:16:54,508 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:16:54,531 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 11:16:54,634 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-11-20 11:16:54,634 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-11-20 11:16:54,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 10 conjunts are in the unsatisfiable core [2022-11-20 11:16:54,641 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:16:54,743 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 84 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-20 11:16:54,744 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 11:16:54,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2053868101] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:54,745 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 11:16:54,745 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 12 [2022-11-20 11:16:54,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998902556] [2022-11-20 11:16:54,745 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:54,746 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 11:16:54,746 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:54,746 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 11:16:54,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-11-20 11:16:54,747 INFO L87 Difference]: Start difference. First operand 515 states and 670 transitions. Second operand has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:16:55,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:55,105 INFO L93 Difference]: Finished difference Result 1230 states and 1669 transitions. [2022-11-20 11:16:55,106 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-20 11:16:55,106 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) Word has length 147 [2022-11-20 11:16:55,107 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:55,112 INFO L225 Difference]: With dead ends: 1230 [2022-11-20 11:16:55,112 INFO L226 Difference]: Without dead ends: 856 [2022-11-20 11:16:55,114 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 175 SyntacticMatches, 3 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 30 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=57, Invalid=215, Unknown=0, NotChecked=0, Total=272 [2022-11-20 11:16:55,115 INFO L413 NwaCegarLoop]: 189 mSDtfsCounter, 225 mSDsluCounter, 436 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 625 SdHoareTripleChecker+Invalid, 204 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:55,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 625 Invalid, 204 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 11:16:55,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 856 states. [2022-11-20 11:16:55,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 856 to 831. [2022-11-20 11:16:55,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 831 states, 625 states have (on average 1.2112) internal successors, (757), 661 states have internal predecessors, (757), 96 states have call successors, (96), 90 states have call predecessors, (96), 109 states have return successors, (207), 102 states have call predecessors, (207), 96 states have call successors, (207) [2022-11-20 11:16:55,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 831 states to 831 states and 1060 transitions. [2022-11-20 11:16:55,197 INFO L78 Accepts]: Start accepts. Automaton has 831 states and 1060 transitions. Word has length 147 [2022-11-20 11:16:55,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:55,198 INFO L495 AbstractCegarLoop]: Abstraction has 831 states and 1060 transitions. [2022-11-20 11:16:55,198 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 17.666666666666668) internal successors, (106), 6 states have internal predecessors, (106), 3 states have call successors, (14), 4 states have call predecessors, (14), 3 states have return successors, (14), 3 states have call predecessors, (14), 3 states have call successors, (14) [2022-11-20 11:16:55,198 INFO L276 IsEmpty]: Start isEmpty. Operand 831 states and 1060 transitions. [2022-11-20 11:16:55,201 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 144 [2022-11-20 11:16:55,202 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:55,202 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:55,213 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 11:16:55,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-20 11:16:55,408 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:55,408 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:55,409 INFO L85 PathProgramCache]: Analyzing trace with hash -1643986723, now seen corresponding path program 1 times [2022-11-20 11:16:55,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:55,409 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132915556] [2022-11-20 11:16:55,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:55,409 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:55,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 11:16:55,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:16:55,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:55,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:55,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-11-20 11:16:55,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-20 11:16:55,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 11:16:55,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:55,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:55,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2022-11-20 11:16:55,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-11-20 11:16:55,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:55,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:55,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,631 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 38 proven. 17 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2022-11-20 11:16:55,631 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:55,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132915556] [2022-11-20 11:16:55,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2132915556] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:16:55,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [779419452] [2022-11-20 11:16:55,632 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:55,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:55,632 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:16:55,634 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:16:55,639 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 11:16:55,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:55,761 INFO L263 TraceCheckSpWp]: Trace formula consists of 451 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 11:16:55,768 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:16:55,899 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 59 proven. 0 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2022-11-20 11:16:55,899 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 11:16:55,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [779419452] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:55,900 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 11:16:55,900 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [9] total 12 [2022-11-20 11:16:55,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1660343502] [2022-11-20 11:16:55,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:55,901 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 11:16:55,901 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:55,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 11:16:55,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2022-11-20 11:16:55,902 INFO L87 Difference]: Start difference. First operand 831 states and 1060 transitions. Second operand has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 5 states have call successors, (9), 4 states have call predecessors, (9), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-11-20 11:16:56,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:56,305 INFO L93 Difference]: Finished difference Result 1733 states and 2247 transitions. [2022-11-20 11:16:56,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 11:16:56,306 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 5 states have call successors, (9), 4 states have call predecessors, (9), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) Word has length 143 [2022-11-20 11:16:56,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:56,313 INFO L225 Difference]: With dead ends: 1733 [2022-11-20 11:16:56,313 INFO L226 Difference]: Without dead ends: 954 [2022-11-20 11:16:56,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 165 SyntacticMatches, 1 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2022-11-20 11:16:56,320 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 186 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 407 mSolverCounterSat, 68 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 475 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 407 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:56,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 294 Invalid, 475 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 407 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 11:16:56,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 954 states. [2022-11-20 11:16:56,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 954 to 826. [2022-11-20 11:16:56,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 826 states, 621 states have (on average 1.2077294685990339) internal successors, (750), 654 states have internal predecessors, (750), 96 states have call successors, (96), 90 states have call predecessors, (96), 108 states have return successors, (196), 101 states have call predecessors, (196), 96 states have call successors, (196) [2022-11-20 11:16:56,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 826 states to 826 states and 1042 transitions. [2022-11-20 11:16:56,443 INFO L78 Accepts]: Start accepts. Automaton has 826 states and 1042 transitions. Word has length 143 [2022-11-20 11:16:56,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:56,443 INFO L495 AbstractCegarLoop]: Abstraction has 826 states and 1042 transitions. [2022-11-20 11:16:56,444 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 14.0) internal successors, (84), 6 states have internal predecessors, (84), 5 states have call successors, (9), 4 states have call predecessors, (9), 3 states have return successors, (9), 3 states have call predecessors, (9), 5 states have call successors, (9) [2022-11-20 11:16:56,444 INFO L276 IsEmpty]: Start isEmpty. Operand 826 states and 1042 transitions. [2022-11-20 11:16:56,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 148 [2022-11-20 11:16:56,451 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 11:16:56,451 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:16:56,464 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-20 11:16:56,657 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 11:16:56,657 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 11:16:56,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 11:16:56,658 INFO L85 PathProgramCache]: Analyzing trace with hash -2095224393, now seen corresponding path program 1 times [2022-11-20 11:16:56,658 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 11:16:56,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631640502] [2022-11-20 11:16:56,659 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:56,659 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 11:16:56,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-20 11:16:56,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-20 11:16:56,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,773 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 11:16:56,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:56,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 11:16:56,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-20 11:16:56,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-20 11:16:56,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 11:16:56,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:56,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:56,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-11-20 11:16:56,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-20 11:16:56,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 11:16:56,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 11:16:56,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,867 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 43 proven. 6 refuted. 0 times theorem prover too weak. 53 trivial. 0 not checked. [2022-11-20 11:16:56,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 11:16:56,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631640502] [2022-11-20 11:16:56,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631640502] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 11:16:56,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [934061224] [2022-11-20 11:16:56,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 11:16:56,868 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:56,869 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 11:16:56,870 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 11:16:56,895 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 11:16:56,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 11:16:56,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 460 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-20 11:16:56,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 11:16:57,012 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 70 proven. 0 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2022-11-20 11:16:57,013 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 11:16:57,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [934061224] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 11:16:57,013 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 11:16:57,013 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-11-20 11:16:57,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510567326] [2022-11-20 11:16:57,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 11:16:57,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 11:16:57,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 11:16:57,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 11:16:57,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-20 11:16:57,017 INFO L87 Difference]: Start difference. First operand 826 states and 1042 transitions. Second operand has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-20 11:16:57,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 11:16:57,096 INFO L93 Difference]: Finished difference Result 1128 states and 1412 transitions. [2022-11-20 11:16:57,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 11:16:57,097 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 147 [2022-11-20 11:16:57,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 11:16:57,097 INFO L225 Difference]: With dead ends: 1128 [2022-11-20 11:16:57,098 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 11:16:57,100 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 176 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-11-20 11:16:57,101 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 9 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 411 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 11:16:57,101 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 411 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 11:16:57,102 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 11:16:57,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 11:16:57,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 11:16:57,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 11:16:57,103 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 147 [2022-11-20 11:16:57,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 11:16:57,104 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 11:16:57,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 19.6) internal successors, (98), 5 states have internal predecessors, (98), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-20 11:16:57,104 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 11:16:57,104 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 11:16:57,106 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 11:16:57,117 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 11:16:57,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 11:16:57,314 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 11:17:00,717 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 245 252) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-20 11:17:00,717 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 245 252) no Hoare annotation was computed. [2022-11-20 11:17:00,717 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 245 252) no Hoare annotation was computed. [2022-11-20 11:17:00,717 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 135 141) no Hoare annotation was computed. [2022-11-20 11:17:00,717 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 135 141) the Hoare annotation is: true [2022-11-20 11:17:00,717 INFO L899 garLoopResultBuilder]: For program point L447-1(lines 443 454) no Hoare annotation was computed. [2022-11-20 11:17:00,717 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 443 454) the Hoare annotation is: true [2022-11-20 11:17:00,718 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 443 454) no Hoare annotation was computed. [2022-11-20 11:17:00,718 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 913 942) no Hoare annotation was computed. [2022-11-20 11:17:00,718 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 931) no Hoare annotation was computed. [2022-11-20 11:17:00,718 INFO L902 garLoopResultBuilder]: At program point L927-1(lines 927 931) the Hoare annotation is: true [2022-11-20 11:17:00,718 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 913 942) the Hoare annotation is: true [2022-11-20 11:17:00,718 INFO L899 garLoopResultBuilder]: For program point L924(line 924) no Hoare annotation was computed. [2022-11-20 11:17:00,719 INFO L902 garLoopResultBuilder]: At program point L923-2(lines 923 937) the Hoare annotation is: true [2022-11-20 11:17:00,719 INFO L902 garLoopResultBuilder]: At program point L919(line 919) the Hoare annotation is: true [2022-11-20 11:17:00,719 INFO L899 garLoopResultBuilder]: For program point L919-1(line 919) no Hoare annotation was computed. [2022-11-20 11:17:00,719 INFO L902 garLoopResultBuilder]: At program point L938(lines 913 942) the Hoare annotation is: true [2022-11-20 11:17:00,719 INFO L899 garLoopResultBuilder]: For program point L934(line 934) no Hoare annotation was computed. [2022-11-20 11:17:00,719 INFO L899 garLoopResultBuilder]: For program point L122-1(lines 122 128) no Hoare annotation was computed. [2022-11-20 11:17:00,720 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,720 INFO L895 garLoopResultBuilder]: At program point L205(line 205) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,720 INFO L895 garLoopResultBuilder]: At program point L201(line 201) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,720 INFO L899 garLoopResultBuilder]: For program point L201-1(line 201) no Hoare annotation was computed. [2022-11-20 11:17:00,721 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 111 134) no Hoare annotation was computed. [2022-11-20 11:17:00,721 INFO L895 garLoopResultBuilder]: At program point L214(line 214) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 11:17:00,721 INFO L895 garLoopResultBuilder]: At program point L214-1(lines 195 219) the Hoare annotation is: (let ((.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and (<= 2 ~waterLevel~0) .cse0) (and .cse1 (<= 1 ~waterLevel~0) .cse0) .cse2 .cse3)) (or .cse4 .cse2 .cse5 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 (and .cse1 .cse5) .cse2 (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-20 11:17:00,721 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 538) no Hoare annotation was computed. [2022-11-20 11:17:00,721 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 114 133) no Hoare annotation was computed. [2022-11-20 11:17:00,722 INFO L899 garLoopResultBuilder]: For program point L528(lines 528 541) no Hoare annotation was computed. [2022-11-20 11:17:00,722 INFO L895 garLoopResultBuilder]: At program point L528-1(lines 520 544) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse3 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2 .cse3 (= ~waterLevel~0 ~systemActive~0)) .cse4 (not (= |old(~waterLevel~0)| ~systemActive~0))) (or .cse0 .cse4 (= |old(~waterLevel~0)| ~waterLevel~0) .cse5) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse4 (and .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3 .cse6) (and (<= 2 ~waterLevel~0) .cse2 .cse3 .cse6) .cse5)))) [2022-11-20 11:17:00,722 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-20 11:17:00,722 INFO L895 garLoopResultBuilder]: At program point L269(lines 264 272) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,723 INFO L895 garLoopResultBuilder]: At program point L492(lines 487 495) the Hoare annotation is: (let ((.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse1 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse2 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse0 (and (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse3 (<= 1 ~waterLevel~0) .cse1 .cse2) .cse4)) (or .cse5 .cse0 .cse6 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 (and .cse3 .cse1 .cse6) (not (<= 1 |old(~waterLevel~0)|))))) [2022-11-20 11:17:00,723 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 211) no Hoare annotation was computed. [2022-11-20 11:17:00,723 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 216) no Hoare annotation was computed. [2022-11-20 11:17:00,723 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,724 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 111 134) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 11:17:00,724 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 111 134) no Hoare annotation was computed. [2022-11-20 11:17:00,724 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-20 11:17:00,724 INFO L899 garLoopResultBuilder]: For program point L423(lines 423 427) no Hoare annotation was computed. [2022-11-20 11:17:00,724 INFO L895 garLoopResultBuilder]: At program point L423-2(lines 419 430) the Hoare annotation is: (let ((.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse2) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| ~systemActive~0))))) [2022-11-20 11:17:00,725 INFO L895 garLoopResultBuilder]: At program point L407(lines 360 408) the Hoare annotation is: false [2022-11-20 11:17:00,725 INFO L902 garLoopResultBuilder]: At program point L981(lines 974 983) the Hoare annotation is: true [2022-11-20 11:17:00,725 INFO L895 garLoopResultBuilder]: At program point L77(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-11-20 11:17:00,725 INFO L899 garLoopResultBuilder]: For program point L362(lines 361 406) no Hoare annotation was computed. [2022-11-20 11:17:00,725 INFO L899 garLoopResultBuilder]: For program point L391(lines 391 402) no Hoare annotation was computed. [2022-11-20 11:17:00,726 INFO L899 garLoopResultBuilder]: For program point L994(lines 994 1001) no Hoare annotation was computed. [2022-11-20 11:17:00,726 INFO L899 garLoopResultBuilder]: For program point L994-2(lines 994 1001) no Hoare annotation was computed. [2022-11-20 11:17:00,726 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 11:17:00,726 INFO L895 garLoopResultBuilder]: At program point L383(line 383) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-20 11:17:00,726 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 11:17:00,726 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 11:17:00,727 INFO L895 garLoopResultBuilder]: At program point L404(lines 361 406) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-20 11:17:00,727 INFO L899 garLoopResultBuilder]: For program point L371(lines 371 377) no Hoare annotation was computed. [2022-11-20 11:17:00,727 INFO L899 garLoopResultBuilder]: For program point L371-1(lines 371 377) no Hoare annotation was computed. [2022-11-20 11:17:00,727 INFO L899 garLoopResultBuilder]: For program point L363(lines 363 367) no Hoare annotation was computed. [2022-11-20 11:17:00,727 INFO L902 garLoopResultBuilder]: At program point L1003(lines 984 1006) the Hoare annotation is: true [2022-11-20 11:17:00,727 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 11:17:00,728 INFO L899 garLoopResultBuilder]: For program point L397(lines 397 401) no Hoare annotation was computed. [2022-11-20 11:17:00,728 INFO L895 garLoopResultBuilder]: At program point L971(lines 967 973) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-11-20 11:17:00,728 INFO L895 garLoopResultBuilder]: At program point L397-2(lines 391 402) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-20 11:17:00,728 INFO L899 garLoopResultBuilder]: For program point L381(lines 381 387) no Hoare annotation was computed. [2022-11-20 11:17:00,728 INFO L895 garLoopResultBuilder]: At program point L92(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-11-20 11:17:00,729 INFO L899 garLoopResultBuilder]: For program point L381-1(lines 381 387) no Hoare annotation was computed. [2022-11-20 11:17:00,729 INFO L902 garLoopResultBuilder]: At program point L410(lines 351 414) the Hoare annotation is: true [2022-11-20 11:17:00,729 INFO L895 garLoopResultBuilder]: At program point L373(line 373) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-11-20 11:17:00,729 INFO L895 garLoopResultBuilder]: At program point L84(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 ~systemActive~0)) [2022-11-20 11:17:00,729 INFO L895 garLoopResultBuilder]: At program point L225(lines 220 227) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))) [2022-11-20 11:17:00,730 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 143 167) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))))) [2022-11-20 11:17:00,730 INFO L899 garLoopResultBuilder]: For program point L318(lines 318 322) no Hoare annotation was computed. [2022-11-20 11:17:00,730 INFO L895 garLoopResultBuilder]: At program point L157(line 157) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (not (<= 1 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|)))) [2022-11-20 11:17:00,730 INFO L899 garLoopResultBuilder]: For program point L318-2(lines 318 322) no Hoare annotation was computed. [2022-11-20 11:17:00,730 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 159) no Hoare annotation was computed. [2022-11-20 11:17:00,731 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2022-11-20 11:17:00,731 INFO L899 garLoopResultBuilder]: For program point L147(lines 147 164) no Hoare annotation was computed. [2022-11-20 11:17:00,731 INFO L895 garLoopResultBuilder]: At program point L162(line 162) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-20 11:17:00,731 INFO L899 garLoopResultBuilder]: For program point L162-1(lines 143 167) no Hoare annotation was computed. [2022-11-20 11:17:00,731 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 143 167) no Hoare annotation was computed. [2022-11-20 11:17:00,731 INFO L895 garLoopResultBuilder]: At program point L505(lines 496 509) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (<= ~waterLevel~0 1)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2)) (or .cse0 .cse2 .cse1 (not (<= 2 ~waterLevel~0))))) [2022-11-20 11:17:00,732 INFO L899 garLoopResultBuilder]: For program point L235(lines 235 241) no Hoare annotation was computed. [2022-11-20 11:17:00,732 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (= ~pumpRunning~0 0) (not (= 1 ~systemActive~0)) (not (<= 2 ~waterLevel~0))) (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))))) [2022-11-20 11:17:00,732 INFO L895 garLoopResultBuilder]: At program point L235-2(lines 228 244) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (not (= ~waterLevel~0 ~systemActive~0)) (not (<= ~waterLevel~0 1))) [2022-11-20 11:17:00,732 INFO L899 garLoopResultBuilder]: For program point L233-1(line 233) no Hoare annotation was computed. [2022-11-20 11:17:00,732 INFO L895 garLoopResultBuilder]: At program point L324(lines 309 327) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)))) [2022-11-20 11:17:00,733 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 431 442) no Hoare annotation was computed. [2022-11-20 11:17:00,733 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 431 442) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 ~systemActive~0)) (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 11:17:00,733 INFO L899 garLoopResultBuilder]: For program point L435-1(lines 431 442) no Hoare annotation was computed. [2022-11-20 11:17:00,733 INFO L895 garLoopResultBuilder]: At program point L188(line 188) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) [2022-11-20 11:17:00,733 INFO L899 garLoopResultBuilder]: For program point L188-1(lines 169 193) no Hoare annotation was computed. [2022-11-20 11:17:00,734 INFO L895 garLoopResultBuilder]: At program point L343(lines 328 346) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 11:17:00,734 INFO L899 garLoopResultBuilder]: For program point L337(lines 337 341) no Hoare annotation was computed. [2022-11-20 11:17:00,734 INFO L899 garLoopResultBuilder]: For program point L337-2(lines 337 341) no Hoare annotation was computed. [2022-11-20 11:17:00,734 INFO L895 garLoopResultBuilder]: At program point L515(lines 510 518) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 11:17:00,734 INFO L895 garLoopResultBuilder]: At program point L183(line 183) the Hoare annotation is: (or (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-20 11:17:00,735 INFO L895 garLoopResultBuilder]: At program point L179(line 179) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~1#1|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-20 11:17:00,735 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 185) no Hoare annotation was computed. [2022-11-20 11:17:00,735 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 169 193) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-11-20 11:17:00,735 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 190) no Hoare annotation was computed. [2022-11-20 11:17:00,735 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 169 193) no Hoare annotation was computed. [2022-11-20 11:17:00,736 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 253 263) the Hoare annotation is: true [2022-11-20 11:17:00,736 INFO L902 garLoopResultBuilder]: At program point L460(lines 455 463) the Hoare annotation is: true [2022-11-20 11:17:00,736 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 253 263) no Hoare annotation was computed. [2022-11-20 11:17:00,736 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 253 263) no Hoare annotation was computed. [2022-11-20 11:17:00,739 INFO L444 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 11:17:00,742 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 11:17:00,764 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 11:17:00 BoogieIcfgContainer [2022-11-20 11:17:00,764 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 11:17:00,765 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 11:17:00,765 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 11:17:00,765 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 11:17:00,766 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 11:16:47" (3/4) ... [2022-11-20 11:17:00,769 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 11:17:00,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 11:17:00,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 11:17:00,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 11:17:00,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 11:17:00,776 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 11:17:00,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 11:17:00,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 11:17:00,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-20 11:17:00,777 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-20 11:17:00,784 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-20 11:17:00,785 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 11:17:00,785 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 11:17:00,786 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:17:00,786 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 11:17:00,812 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-11-20 11:17:00,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && waterLevel <= \old(waterLevel)) || ((pumpRunning == 0 && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) [2022-11-20 11:17:00,813 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || ((2 <= waterLevel && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) [2022-11-20 11:17:00,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == systemActive)) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((2 <= waterLevel && 1 <= tmp) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) [2022-11-20 11:17:00,814 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= waterLevel)) || (pumpRunning == \old(pumpRunning) && \result == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) [2022-11-20 11:17:00,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-11-20 11:17:00,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) [2022-11-20 11:17:00,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(waterLevel <= 1)) || (1 <= \result && pumpRunning == 0)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) [2022-11-20 11:17:00,815 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) [2022-11-20 11:17:00,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) [2022-11-20 11:17:00,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) [2022-11-20 11:17:00,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((1 <= \result && pumpRunning == 0) && 1 <= tmp) && \result == 0) && tmp___0 == 0) [2022-11-20 11:17:00,838 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 11:17:00,838 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 11:17:00,839 INFO L158 Benchmark]: Toolchain (without parser) took 14914.86ms. Allocated memory was 188.7MB in the beginning and 226.5MB in the end (delta: 37.7MB). Free memory was 154.6MB in the beginning and 147.6MB in the end (delta: 7.0MB). Peak memory consumption was 46.8MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,839 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 146.8MB. Free memory is still 89.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 11:17:00,840 INFO L158 Benchmark]: CACSL2BoogieTranslator took 509.48ms. Allocated memory is still 188.7MB. Free memory was 153.8MB in the beginning and 135.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,840 INFO L158 Benchmark]: Boogie Procedure Inliner took 46.61ms. Allocated memory is still 188.7MB. Free memory was 135.0MB in the beginning and 132.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,840 INFO L158 Benchmark]: Boogie Preprocessor took 28.30ms. Allocated memory is still 188.7MB. Free memory was 132.9MB in the beginning and 131.5MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 11:17:00,841 INFO L158 Benchmark]: RCFGBuilder took 489.23ms. Allocated memory is still 188.7MB. Free memory was 130.8MB in the beginning and 112.6MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,841 INFO L158 Benchmark]: TraceAbstraction took 13753.76ms. Allocated memory was 188.7MB in the beginning and 226.5MB in the end (delta: 37.7MB). Free memory was 111.9MB in the beginning and 153.9MB in the end (delta: -42.0MB). Peak memory consumption was 93.5MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,842 INFO L158 Benchmark]: Witness Printer took 73.70ms. Allocated memory is still 226.5MB. Free memory was 153.9MB in the beginning and 147.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 11:17:00,843 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 146.8MB. Free memory is still 89.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 509.48ms. Allocated memory is still 188.7MB. Free memory was 153.8MB in the beginning and 135.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 46.61ms. Allocated memory is still 188.7MB. Free memory was 135.0MB in the beginning and 132.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.30ms. Allocated memory is still 188.7MB. Free memory was 132.9MB in the beginning and 131.5MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 489.23ms. Allocated memory is still 188.7MB. Free memory was 130.8MB in the beginning and 112.6MB in the end (delta: 18.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13753.76ms. Allocated memory was 188.7MB in the beginning and 226.5MB in the end (delta: 37.7MB). Free memory was 111.9MB in the beginning and 153.9MB in the end (delta: -42.0MB). Peak memory consumption was 93.5MB. Max. memory is 16.1GB. * Witness Printer took 73.70ms. Allocated memory is still 226.5MB. Free memory was 153.9MB in the beginning and 147.6MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.7s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 4.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2198 SdHoareTripleChecker+Valid, 2.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2159 mSDsluCounter, 3932 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2748 mSDsCounter, 702 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2960 IncrementalHoareTripleChecker+Invalid, 3662 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 702 mSolverCounterUnsat, 1184 mSDtfsCounter, 2960 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 931 GetRequests, 790 SyntacticMatches, 13 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 531 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=831occurred in iteration=10, InterpolantAutomatonStates: 121, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 350 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 2039 PreInvPairs, 2159 NumberOfFragments, 1101 HoareAnnotationTreeSize, 2039 FomulaSimplifications, 4741 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 48 FomulaSimplificationsInter, 11618 FormulaSimplificationTreeSizeReductionInter, 2.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.1s InterpolantComputationTime, 1380 NumberOfCodeBlocks, 1380 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1464 ConstructedInterpolants, 0 QuantifiedInterpolants, 2627 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1715 ConjunctsInSsa, 27 ConjunctsInUnsatCore, 17 InterpolantComputations, 11 PerfectInterpolantSequences, 621/696 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && waterLevel <= \old(waterLevel)) || ((pumpRunning == 0 && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= waterLevel)) || ((((pumpRunning == \old(pumpRunning) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) - InvariantResult [Line: 913]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && 1 <= waterLevel) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(waterLevel <= 1)) || (1 <= \result && pumpRunning == 0)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 309]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((((1 <= \result && pumpRunning == 0) && 1 <= tmp) && \result == 0) && tmp___0 == 0) - InvariantResult [Line: 220]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 974]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 520]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == systemActive)) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((pumpRunning == 0 && 1 <= tmp) && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((2 <= waterLevel && 1 <= tmp) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == systemActive - InvariantResult [Line: 487]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || ((2 <= waterLevel && 1 <= \result) && waterLevel <= \old(waterLevel))) || (((pumpRunning == 0 && 1 <= waterLevel) && 1 <= \result) && waterLevel <= \old(waterLevel))) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || \old(waterLevel) == waterLevel) || !(2 <= \old(waterLevel)))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && 1 <= \result) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == systemActive)) - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(waterLevel == systemActive)) || !(waterLevel <= 1) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= waterLevel)) || (pumpRunning == \old(pumpRunning) && \result == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) - InvariantResult [Line: 923]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-20 11:17:00,877 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a7a8cc7e-9663-4937-ab4e-c5d97cad219b/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE