./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version b5237d83 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-b5237d8 [2022-11-21 14:05:02,409 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-21 14:05:02,412 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-21 14:05:02,450 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-21 14:05:02,451 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-21 14:05:02,452 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-21 14:05:02,454 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-21 14:05:02,456 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-21 14:05:02,458 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-21 14:05:02,460 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-21 14:05:02,461 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-21 14:05:02,463 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-21 14:05:02,463 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-21 14:05:02,465 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-21 14:05:02,466 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-21 14:05:02,468 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-21 14:05:02,469 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-21 14:05:02,471 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-21 14:05:02,473 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-21 14:05:02,476 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-21 14:05:02,478 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-21 14:05:02,479 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-21 14:05:02,481 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-21 14:05:02,482 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-21 14:05:02,487 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-21 14:05:02,488 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-21 14:05:02,488 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-21 14:05:02,489 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-21 14:05:02,490 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-21 14:05:02,491 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-21 14:05:02,492 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-21 14:05:02,493 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-21 14:05:02,494 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-21 14:05:02,495 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-21 14:05:02,496 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-21 14:05:02,496 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-21 14:05:02,497 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-21 14:05:02,498 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-21 14:05:02,498 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-21 14:05:02,499 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-21 14:05:02,500 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-21 14:05:02,501 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-21 14:05:02,526 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-21 14:05:02,526 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-21 14:05:02,527 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-21 14:05:02,527 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-21 14:05:02,528 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-21 14:05:02,528 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-21 14:05:02,529 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-21 14:05:02,529 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-21 14:05:02,530 INFO L138 SettingsManager]: * Use SBE=true [2022-11-21 14:05:02,530 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-21 14:05:02,530 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-21 14:05:02,531 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-21 14:05:02,531 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-21 14:05:02,531 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-21 14:05:02,532 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-21 14:05:02,532 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-21 14:05:02,532 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-21 14:05:02,532 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-21 14:05:02,533 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-21 14:05:02,533 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-21 14:05:02,533 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-21 14:05:02,534 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-21 14:05:02,534 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-21 14:05:02,534 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-21 14:05:02,535 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 14:05:02,535 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-21 14:05:02,535 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-21 14:05:02,536 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-21 14:05:02,536 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-21 14:05:02,536 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-21 14:05:02,537 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-21 14:05:02,537 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-21 14:05:02,537 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-21 14:05:02,537 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 894b9126919d6af09c0902d1c20b8183acfd3589fe20590a119ca487cf6e7a3f [2022-11-21 14:05:02,810 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-21 14:05:02,852 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-21 14:05:02,854 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-21 14:05:02,856 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-21 14:05:02,856 INFO L275 PluginConnector]: CDTParser initialized [2022-11-21 14:05:02,858 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/../../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-11-21 14:05:06,137 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-21 14:05:06,462 INFO L351 CDTParser]: Found 1 translation units. [2022-11-21 14:05:06,462 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2022-11-21 14:05:06,474 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/data/abc01e274/b7e1a4e92a1148bf9e03438703fcd1d8/FLAG9bc9eebd7 [2022-11-21 14:05:06,495 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/data/abc01e274/b7e1a4e92a1148bf9e03438703fcd1d8 [2022-11-21 14:05:06,499 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-21 14:05:06,500 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-21 14:05:06,502 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-21 14:05:06,502 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-21 14:05:06,506 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-21 14:05:06,507 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:06,508 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3f3d8381 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06, skipping insertion in model container [2022-11-21 14:05:06,509 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:06,517 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-21 14:05:06,579 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-21 14:05:06,727 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-11-21 14:05:06,853 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 14:05:06,877 INFO L203 MainTranslator]: Completed pre-run [2022-11-21 14:05:06,904 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c[1605,1618] [2022-11-21 14:05:06,973 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-21 14:05:06,995 INFO L208 MainTranslator]: Completed translation [2022-11-21 14:05:06,995 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06 WrapperNode [2022-11-21 14:05:06,996 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-21 14:05:07,001 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-21 14:05:07,001 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-21 14:05:07,001 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-21 14:05:07,010 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,028 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,058 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 236 [2022-11-21 14:05:07,059 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-21 14:05:07,060 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-21 14:05:07,060 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-21 14:05:07,060 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-21 14:05:07,070 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,070 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,072 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,073 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,078 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,084 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,085 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,087 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,090 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-21 14:05:07,091 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-21 14:05:07,091 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-21 14:05:07,091 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-21 14:05:07,092 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (1/1) ... [2022-11-21 14:05:07,099 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-21 14:05:07,114 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:05:07,149 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-21 14:05:07,180 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-21 14:05:07,215 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-21 14:05:07,216 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-21 14:05:07,216 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-21 14:05:07,216 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-21 14:05:07,216 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-21 14:05:07,217 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-21 14:05:07,218 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-21 14:05:07,218 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-21 14:05:07,219 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-21 14:05:07,219 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-21 14:05:07,219 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-21 14:05:07,220 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:05:07,220 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:05:07,220 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-21 14:05:07,220 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-21 14:05:07,221 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-21 14:05:07,221 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-21 14:05:07,221 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-21 14:05:07,221 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-21 14:05:07,222 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-21 14:05:07,222 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-21 14:05:07,222 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-21 14:05:07,309 INFO L235 CfgBuilder]: Building ICFG [2022-11-21 14:05:07,311 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-21 14:05:07,765 INFO L276 CfgBuilder]: Performing block encoding [2022-11-21 14:05:07,777 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-21 14:05:07,777 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-21 14:05:07,780 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:05:07 BoogieIcfgContainer [2022-11-21 14:05:07,780 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-21 14:05:07,787 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-21 14:05:07,789 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-21 14:05:07,801 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-21 14:05:07,802 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.11 02:05:06" (1/3) ... [2022-11-21 14:05:07,803 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bdb0f86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 02:05:07, skipping insertion in model container [2022-11-21 14:05:07,804 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 02:05:06" (2/3) ... [2022-11-21 14:05:07,804 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bdb0f86 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.11 02:05:07, skipping insertion in model container [2022-11-21 14:05:07,806 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:05:07" (3/3) ... [2022-11-21 14:05:07,809 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2022-11-21 14:05:07,831 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-21 14:05:07,832 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-21 14:05:07,945 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-21 14:05:07,957 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7aea69f1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-21 14:05:07,958 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-21 14:05:07,966 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-21 14:05:07,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-11-21 14:05:07,983 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:07,984 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:07,985 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:07,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:07,994 INFO L85 PathProgramCache]: Analyzing trace with hash 1971423540, now seen corresponding path program 1 times [2022-11-21 14:05:08,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:08,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320371929] [2022-11-21 14:05:08,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:08,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:08,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:08,375 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:08,376 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:08,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [320371929] [2022-11-21 14:05:08,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [320371929] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:08,379 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:08,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-21 14:05:08,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [682053757] [2022-11-21 14:05:08,384 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:08,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-21 14:05:08,402 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:08,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-21 14:05:08,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 14:05:08,466 INFO L87 Difference]: Start difference. First operand has 104 states, 77 states have (on average 1.3766233766233766) internal successors, (106), 87 states have internal predecessors, (106), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:08,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:08,517 INFO L93 Difference]: Finished difference Result 200 states and 271 transitions. [2022-11-21 14:05:08,518 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-21 14:05:08,520 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-11-21 14:05:08,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:08,533 INFO L225 Difference]: With dead ends: 200 [2022-11-21 14:05:08,534 INFO L226 Difference]: Without dead ends: 95 [2022-11-21 14:05:08,539 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-21 14:05:08,544 INFO L413 NwaCegarLoop]: 132 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:08,545 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 132 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:05:08,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2022-11-21 14:05:08,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2022-11-21 14:05:08,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 70 states have (on average 1.3142857142857143) internal successors, (92), 79 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-21 14:05:08,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 123 transitions. [2022-11-21 14:05:08,627 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 123 transitions. Word has length 19 [2022-11-21 14:05:08,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:08,628 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 123 transitions. [2022-11-21 14:05:08,628 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:08,629 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 123 transitions. [2022-11-21 14:05:08,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-11-21 14:05:08,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:08,632 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:08,632 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-21 14:05:08,633 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:08,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:08,634 INFO L85 PathProgramCache]: Analyzing trace with hash -856589602, now seen corresponding path program 1 times [2022-11-21 14:05:08,634 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:08,635 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947056609] [2022-11-21 14:05:08,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:08,635 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:08,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:08,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:08,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:08,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947056609] [2022-11-21 14:05:08,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947056609] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:08,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:08,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-21 14:05:08,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288138392] [2022-11-21 14:05:08,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:08,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-21 14:05:08,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:08,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-21 14:05:08,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:05:08,760 INFO L87 Difference]: Start difference. First operand 95 states and 123 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:08,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:08,787 INFO L93 Difference]: Finished difference Result 155 states and 201 transitions. [2022-11-21 14:05:08,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-21 14:05:08,788 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-11-21 14:05:08,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:08,790 INFO L225 Difference]: With dead ends: 155 [2022-11-21 14:05:08,791 INFO L226 Difference]: Without dead ends: 86 [2022-11-21 14:05:08,792 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-21 14:05:08,793 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 13 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 203 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:08,794 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 203 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:05:08,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-11-21 14:05:08,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-11-21 14:05:08,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.328125) internal successors, (85), 73 states have internal predecessors, (85), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-21 14:05:08,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-11-21 14:05:08,809 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 20 [2022-11-21 14:05:08,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:08,810 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-11-21 14:05:08,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:08,811 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-11-21 14:05:08,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-21 14:05:08,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:08,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:08,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-21 14:05:08,813 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:08,814 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:08,814 INFO L85 PathProgramCache]: Analyzing trace with hash 2135542647, now seen corresponding path program 1 times [2022-11-21 14:05:08,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:08,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1601657646] [2022-11-21 14:05:08,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:08,815 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:08,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:09,020 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:09,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1601657646] [2022-11-21 14:05:09,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1601657646] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:09,021 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:09,021 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-21 14:05:09,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1327631016] [2022-11-21 14:05:09,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:09,023 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-21 14:05:09,023 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:09,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 14:05:09,024 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-21 14:05:09,024 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:09,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:09,113 INFO L93 Difference]: Finished difference Result 165 states and 216 transitions. [2022-11-21 14:05:09,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-21 14:05:09,114 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-11-21 14:05:09,115 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:09,116 INFO L225 Difference]: With dead ends: 165 [2022-11-21 14:05:09,116 INFO L226 Difference]: Without dead ends: 86 [2022-11-21 14:05:09,117 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-21 14:05:09,119 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 136 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:09,119 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 280 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:05:09,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-11-21 14:05:09,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-11-21 14:05:09,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 73 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-21 14:05:09,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2022-11-21 14:05:09,140 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 25 [2022-11-21 14:05:09,140 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:09,140 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2022-11-21 14:05:09,140 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:09,141 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2022-11-21 14:05:09,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-21 14:05:09,143 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:09,143 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:09,143 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-21 14:05:09,143 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:09,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:09,144 INFO L85 PathProgramCache]: Analyzing trace with hash -181443690, now seen corresponding path program 1 times [2022-11-21 14:05:09,145 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:09,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997228941] [2022-11-21 14:05:09,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:09,146 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:09,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:09,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-21 14:05:09,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,239 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:09,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:09,240 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997228941] [2022-11-21 14:05:09,240 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997228941] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:09,240 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:09,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-21 14:05:09,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605018483] [2022-11-21 14:05:09,241 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:09,241 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-21 14:05:09,241 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:09,242 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-21 14:05:09,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-21 14:05:09,247 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 14:05:09,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:09,545 INFO L93 Difference]: Finished difference Result 241 states and 309 transitions. [2022-11-21 14:05:09,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-21 14:05:09,546 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-11-21 14:05:09,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:09,554 INFO L225 Difference]: With dead ends: 241 [2022-11-21 14:05:09,554 INFO L226 Difference]: Without dead ends: 162 [2022-11-21 14:05:09,556 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-21 14:05:09,557 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 169 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:09,558 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 193 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-21 14:05:09,564 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-11-21 14:05:09,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 156. [2022-11-21 14:05:09,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 119 states have (on average 1.26890756302521) internal successors, (151), 128 states have internal predecessors, (151), 16 states have call successors, (16), 15 states have call predecessors, (16), 20 states have return successors, (27), 18 states have call predecessors, (27), 16 states have call successors, (27) [2022-11-21 14:05:09,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 194 transitions. [2022-11-21 14:05:09,615 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 194 transitions. Word has length 38 [2022-11-21 14:05:09,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:09,615 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 194 transitions. [2022-11-21 14:05:09,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.25) internal successors, (33), 3 states have internal predecessors, (33), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-21 14:05:09,616 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 194 transitions. [2022-11-21 14:05:09,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-21 14:05:09,620 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:09,621 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:09,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-21 14:05:09,622 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:09,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:09,623 INFO L85 PathProgramCache]: Analyzing trace with hash -91120732, now seen corresponding path program 1 times [2022-11-21 14:05:09,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:09,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1125335475] [2022-11-21 14:05:09,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:09,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:09,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:09,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:09,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:09,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:09,949 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:09,949 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:09,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1125335475] [2022-11-21 14:05:09,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1125335475] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:09,950 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:09,950 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-21 14:05:09,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370944819] [2022-11-21 14:05:09,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:09,951 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-21 14:05:09,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:09,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-21 14:05:09,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-11-21 14:05:09,953 INFO L87 Difference]: Start difference. First operand 156 states and 194 transitions. Second operand has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-21 14:05:10,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:10,729 INFO L93 Difference]: Finished difference Result 544 states and 736 transitions. [2022-11-21 14:05:10,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-11-21 14:05:10,729 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-21 14:05:10,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:10,735 INFO L225 Difference]: With dead ends: 544 [2022-11-21 14:05:10,735 INFO L226 Difference]: Without dead ends: 395 [2022-11-21 14:05:10,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=113, Invalid=349, Unknown=0, NotChecked=0, Total=462 [2022-11-21 14:05:10,739 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 343 mSDsluCounter, 556 mSDsCounter, 0 mSdLazyCounter, 495 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 348 SdHoareTripleChecker+Valid, 661 SdHoareTripleChecker+Invalid, 591 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 495 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:10,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [348 Valid, 661 Invalid, 591 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 495 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-21 14:05:10,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2022-11-21 14:05:10,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 377. [2022-11-21 14:05:10,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 286 states have (on average 1.2377622377622377) internal successors, (354), 306 states have internal predecessors, (354), 40 states have call successors, (40), 38 states have call predecessors, (40), 50 states have return successors, (90), 46 states have call predecessors, (90), 40 states have call successors, (90) [2022-11-21 14:05:10,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 484 transitions. [2022-11-21 14:05:10,807 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 484 transitions. Word has length 46 [2022-11-21 14:05:10,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:10,808 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 484 transitions. [2022-11-21 14:05:10,808 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.333333333333333) internal successors, (39), 8 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-21 14:05:10,808 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 484 transitions. [2022-11-21 14:05:10,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 94 [2022-11-21 14:05:10,812 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:10,812 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:10,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-21 14:05:10,813 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:10,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:10,814 INFO L85 PathProgramCache]: Analyzing trace with hash 908063002, now seen corresponding path program 1 times [2022-11-21 14:05:10,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:10,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1828602914] [2022-11-21 14:05:10,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:10,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:10,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:10,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:05:10,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:10,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:10,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:10,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:05:10,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:10,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:10,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:11,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-21 14:05:11,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-21 14:05:11,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-21 14:05:11,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,015 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-21 14:05:11,015 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:11,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1828602914] [2022-11-21 14:05:11,016 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1828602914] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:11,016 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:11,016 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-21 14:05:11,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [175813376] [2022-11-21 14:05:11,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:11,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-21 14:05:11,017 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:11,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 14:05:11,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-21 14:05:11,018 INFO L87 Difference]: Start difference. First operand 377 states and 484 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-21 14:05:11,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:11,454 INFO L93 Difference]: Finished difference Result 840 states and 1145 transitions. [2022-11-21 14:05:11,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-21 14:05:11,454 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 93 [2022-11-21 14:05:11,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:11,459 INFO L225 Difference]: With dead ends: 840 [2022-11-21 14:05:11,459 INFO L226 Difference]: Without dead ends: 470 [2022-11-21 14:05:11,461 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-21 14:05:11,463 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 111 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 371 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 115 SdHoareTripleChecker+Valid, 364 SdHoareTripleChecker+Invalid, 408 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 371 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:11,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [115 Valid, 364 Invalid, 408 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 371 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-21 14:05:11,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 470 states. [2022-11-21 14:05:11,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 470 to 431. [2022-11-21 14:05:11,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 330 states have (on average 1.2242424242424241) internal successors, (404), 355 states have internal predecessors, (404), 44 states have call successors, (44), 38 states have call predecessors, (44), 56 states have return successors, (104), 51 states have call predecessors, (104), 44 states have call successors, (104) [2022-11-21 14:05:11,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 552 transitions. [2022-11-21 14:05:11,531 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 552 transitions. Word has length 93 [2022-11-21 14:05:11,532 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:11,532 INFO L495 AbstractCegarLoop]: Abstraction has 431 states and 552 transitions. [2022-11-21 14:05:11,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 5 states have call predecessors, (9), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-11-21 14:05:11,533 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 552 transitions. [2022-11-21 14:05:11,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2022-11-21 14:05:11,538 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:11,538 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:11,538 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-21 14:05:11,539 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:11,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:11,540 INFO L85 PathProgramCache]: Analyzing trace with hash -1534943524, now seen corresponding path program 1 times [2022-11-21 14:05:11,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:11,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [807794655] [2022-11-21 14:05:11,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:11,541 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:11,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-21 14:05:11,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:05:11,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:11,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:11,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-21 14:05:11,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 74 [2022-11-21 14:05:11,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:11,858 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-21 14:05:11,858 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:11,858 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [807794655] [2022-11-21 14:05:11,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [807794655] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:11,859 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-21 14:05:11,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-21 14:05:11,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [178809607] [2022-11-21 14:05:11,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:11,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-21 14:05:11,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:11,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-21 14:05:11,864 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-11-21 14:05:11,864 INFO L87 Difference]: Start difference. First operand 431 states and 552 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-21 14:05:12,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:12,272 INFO L93 Difference]: Finished difference Result 808 states and 1073 transitions. [2022-11-21 14:05:12,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-21 14:05:12,276 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) Word has length 85 [2022-11-21 14:05:12,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:12,281 INFO L225 Difference]: With dead ends: 808 [2022-11-21 14:05:12,281 INFO L226 Difference]: Without dead ends: 384 [2022-11-21 14:05:12,284 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=96, Unknown=0, NotChecked=0, Total=132 [2022-11-21 14:05:12,293 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 136 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 414 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 452 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 414 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:12,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 349 Invalid, 452 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 414 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-21 14:05:12,308 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2022-11-21 14:05:12,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 368. [2022-11-21 14:05:12,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 368 states, 280 states have (on average 1.2142857142857142) internal successors, (340), 301 states have internal predecessors, (340), 40 states have call successors, (40), 33 states have call predecessors, (40), 47 states have return successors, (86), 44 states have call predecessors, (86), 40 states have call successors, (86) [2022-11-21 14:05:12,381 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 368 states to 368 states and 466 transitions. [2022-11-21 14:05:12,381 INFO L78 Accepts]: Start accepts. Automaton has 368 states and 466 transitions. Word has length 85 [2022-11-21 14:05:12,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:12,382 INFO L495 AbstractCegarLoop]: Abstraction has 368 states and 466 transitions. [2022-11-21 14:05:12,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 6 states have internal predecessors, (66), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 1 states have call predecessors, (6), 2 states have call successors, (6) [2022-11-21 14:05:12,382 INFO L276 IsEmpty]: Start isEmpty. Operand 368 states and 466 transitions. [2022-11-21 14:05:12,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-21 14:05:12,386 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:12,386 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:12,386 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-21 14:05:12,387 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:12,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:12,388 INFO L85 PathProgramCache]: Analyzing trace with hash -1438943688, now seen corresponding path program 1 times [2022-11-21 14:05:12,388 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:12,388 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2034809390] [2022-11-21 14:05:12,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:12,389 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:12,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:05:12,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:12,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:05:12,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:12,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:12,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-21 14:05:12,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-21 14:05:12,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,577 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-21 14:05:12,577 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:12,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2034809390] [2022-11-21 14:05:12,577 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2034809390] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 14:05:12,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1126072523] [2022-11-21 14:05:12,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:12,578 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 14:05:12,578 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:05:12,582 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 14:05:12,609 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-21 14:05:12,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:12,706 INFO L263 TraceCheckSpWp]: Trace formula consists of 315 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-21 14:05:12,714 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 14:05:13,015 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-21 14:05:13,016 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-21 14:05:13,331 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-11-21 14:05:13,331 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1126072523] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-21 14:05:13,331 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-21 14:05:13,332 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 12 [2022-11-21 14:05:13,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1976571476] [2022-11-21 14:05:13,332 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-21 14:05:13,333 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-21 14:05:13,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:13,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-21 14:05:13,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=108, Unknown=0, NotChecked=0, Total=132 [2022-11-21 14:05:13,335 INFO L87 Difference]: Start difference. First operand 368 states and 466 transitions. Second operand has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-21 14:05:15,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:15,095 INFO L93 Difference]: Finished difference Result 817 states and 1104 transitions. [2022-11-21 14:05:15,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2022-11-21 14:05:15,096 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) Word has length 89 [2022-11-21 14:05:15,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:15,099 INFO L225 Difference]: With dead ends: 817 [2022-11-21 14:05:15,100 INFO L226 Difference]: Without dead ends: 504 [2022-11-21 14:05:15,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 256 GetRequests, 199 SyntacticMatches, 6 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 844 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=481, Invalid=2275, Unknown=0, NotChecked=0, Total=2756 [2022-11-21 14:05:15,103 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 814 mSDsluCounter, 592 mSDsCounter, 0 mSdLazyCounter, 1137 mSolverCounterSat, 327 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 821 SdHoareTripleChecker+Valid, 683 SdHoareTripleChecker+Invalid, 1464 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 327 IncrementalHoareTripleChecker+Valid, 1137 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:15,103 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [821 Valid, 683 Invalid, 1464 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [327 Valid, 1137 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-21 14:05:15,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 504 states. [2022-11-21 14:05:15,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 504 to 434. [2022-11-21 14:05:15,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 434 states, 328 states have (on average 1.2103658536585367) internal successors, (397), 352 states have internal predecessors, (397), 51 states have call successors, (51), 44 states have call predecessors, (51), 54 states have return successors, (111), 50 states have call predecessors, (111), 51 states have call successors, (111) [2022-11-21 14:05:15,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 434 states to 434 states and 559 transitions. [2022-11-21 14:05:15,151 INFO L78 Accepts]: Start accepts. Automaton has 434 states and 559 transitions. Word has length 89 [2022-11-21 14:05:15,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:15,152 INFO L495 AbstractCegarLoop]: Abstraction has 434 states and 559 transitions. [2022-11-21 14:05:15,152 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 9.666666666666666) internal successors, (116), 9 states have internal predecessors, (116), 3 states have call successors, (18), 6 states have call predecessors, (18), 4 states have return successors, (16), 4 states have call predecessors, (16), 3 states have call successors, (16) [2022-11-21 14:05:15,152 INFO L276 IsEmpty]: Start isEmpty. Operand 434 states and 559 transitions. [2022-11-21 14:05:15,155 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-21 14:05:15,155 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:15,155 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:15,163 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-21 14:05:15,363 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2022-11-21 14:05:15,363 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:15,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:15,364 INFO L85 PathProgramCache]: Analyzing trace with hash 1270234994, now seen corresponding path program 1 times [2022-11-21 14:05:15,364 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:15,364 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1391159552] [2022-11-21 14:05:15,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:15,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:15,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:05:15,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:15,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:05:15,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:15,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:15,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-21 14:05:15,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-21 14:05:15,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-21 14:05:15,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-21 14:05:15,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:15,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-11-21 14:05:15,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-11-21 14:05:15,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-21 14:05:15,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:15,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:15,958 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 52 proven. 23 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-21 14:05:15,959 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:15,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1391159552] [2022-11-21 14:05:15,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1391159552] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 14:05:15,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1382919223] [2022-11-21 14:05:15,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:15,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 14:05:15,960 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:05:15,962 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 14:05:15,979 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-21 14:05:16,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:16,098 INFO L263 TraceCheckSpWp]: Trace formula consists of 468 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-21 14:05:16,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 14:05:16,319 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 88 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-11-21 14:05:16,319 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-21 14:05:16,672 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 53 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-21 14:05:16,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1382919223] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-21 14:05:16,673 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-21 14:05:16,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 9] total 17 [2022-11-21 14:05:16,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [194389730] [2022-11-21 14:05:16,674 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-21 14:05:16,675 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-21 14:05:16,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:16,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-21 14:05:16,676 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=61, Invalid=211, Unknown=0, NotChecked=0, Total=272 [2022-11-21 14:05:16,677 INFO L87 Difference]: Start difference. First operand 434 states and 559 transitions. Second operand has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-21 14:05:18,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:18,228 INFO L93 Difference]: Finished difference Result 1193 states and 1627 transitions. [2022-11-21 14:05:18,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-21 14:05:18,229 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) Word has length 150 [2022-11-21 14:05:18,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:18,235 INFO L225 Difference]: With dead ends: 1193 [2022-11-21 14:05:18,235 INFO L226 Difference]: Without dead ends: 813 [2022-11-21 14:05:18,238 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 370 GetRequests, 327 SyntacticMatches, 6 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 312 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=384, Invalid=1098, Unknown=0, NotChecked=0, Total=1482 [2022-11-21 14:05:18,241 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 844 mSDsluCounter, 660 mSDsCounter, 0 mSdLazyCounter, 1143 mSolverCounterSat, 448 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 848 SdHoareTripleChecker+Valid, 801 SdHoareTripleChecker+Invalid, 1591 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 448 IncrementalHoareTripleChecker+Valid, 1143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:18,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [848 Valid, 801 Invalid, 1591 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [448 Valid, 1143 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-21 14:05:18,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 813 states. [2022-11-21 14:05:18,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 813 to 710. [2022-11-21 14:05:18,337 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 710 states, 533 states have (on average 1.2026266416510318) internal successors, (641), 565 states have internal predecessors, (641), 83 states have call successors, (83), 76 states have call predecessors, (83), 93 states have return successors, (177), 85 states have call predecessors, (177), 83 states have call successors, (177) [2022-11-21 14:05:18,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 710 states to 710 states and 901 transitions. [2022-11-21 14:05:18,342 INFO L78 Accepts]: Start accepts. Automaton has 710 states and 901 transitions. Word has length 150 [2022-11-21 14:05:18,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:18,344 INFO L495 AbstractCegarLoop]: Abstraction has 710 states and 901 transitions. [2022-11-21 14:05:18,344 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 8.941176470588236) internal successors, (152), 15 states have internal predecessors, (152), 6 states have call successors, (33), 9 states have call predecessors, (33), 6 states have return successors, (24), 8 states have call predecessors, (24), 6 states have call successors, (24) [2022-11-21 14:05:18,344 INFO L276 IsEmpty]: Start isEmpty. Operand 710 states and 901 transitions. [2022-11-21 14:05:18,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 151 [2022-11-21 14:05:18,351 INFO L187 NwaCegarLoop]: Found error trace [2022-11-21 14:05:18,351 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:18,363 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-21 14:05:18,557 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 14:05:18,558 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-21 14:05:18,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-21 14:05:18,558 INFO L85 PathProgramCache]: Analyzing trace with hash -2070792144, now seen corresponding path program 1 times [2022-11-21 14:05:18,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-21 14:05:18,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [704946757] [2022-11-21 14:05:18,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:18,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-21 14:05:18,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-21 14:05:18,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-21 14:05:18,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-21 14:05:18,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:18,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-21 14:05:18,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-21 14:05:18,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-11-21 14:05:18,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-21 14:05:18,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-21 14:05:18,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:18,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2022-11-21 14:05:18,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2022-11-21 14:05:18,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-21 14:05:18,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-21 14:05:18,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,777 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 45 proven. 6 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2022-11-21 14:05:18,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-21 14:05:18,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [704946757] [2022-11-21 14:05:18,777 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [704946757] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-21 14:05:18,777 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [879866230] [2022-11-21 14:05:18,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-21 14:05:18,778 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-21 14:05:18,778 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 [2022-11-21 14:05:18,779 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-21 14:05:18,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-21 14:05:18,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-21 14:05:18,897 INFO L263 TraceCheckSpWp]: Trace formula consists of 469 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-21 14:05:18,901 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-21 14:05:18,917 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 72 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-11-21 14:05:18,917 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-21 14:05:18,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [879866230] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-21 14:05:18,917 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-21 14:05:18,918 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 8 [2022-11-21 14:05:18,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324538423] [2022-11-21 14:05:18,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-21 14:05:18,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-21 14:05:18,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-21 14:05:18,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-21 14:05:18,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-21 14:05:18,919 INFO L87 Difference]: Start difference. First operand 710 states and 901 transitions. Second operand has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-21 14:05:18,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-21 14:05:18,982 INFO L93 Difference]: Finished difference Result 942 states and 1183 transitions. [2022-11-21 14:05:18,983 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-21 14:05:18,983 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 150 [2022-11-21 14:05:18,983 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-21 14:05:18,984 INFO L225 Difference]: With dead ends: 942 [2022-11-21 14:05:18,984 INFO L226 Difference]: Without dead ends: 0 [2022-11-21 14:05:18,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 187 GetRequests, 179 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-11-21 14:05:18,987 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 9 mSDsluCounter, 307 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 415 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-21 14:05:18,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 415 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-21 14:05:18,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-21 14:05:18,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-21 14:05:18,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-21 14:05:18,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-21 14:05:18,988 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 150 [2022-11-21 14:05:18,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-21 14:05:18,988 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-21 14:05:18,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 20.0) internal successors, (100), 5 states have internal predecessors, (100), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-11-21 14:05:18,989 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-21 14:05:18,989 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-21 14:05:18,991 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-21 14:05:19,003 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-21 14:05:19,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-21 14:05:19,200 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-21 14:05:22,243 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 278 285) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 278 285) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 278 285) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 168 174) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 168 174) the Hoare annotation is: true [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point L946-1(lines 942 953) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 942 953) the Hoare annotation is: true [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 942 953) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L902 garLoopResultBuilder]: At program point L480(lines 455 484) the Hoare annotation is: true [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 455 484) no Hoare annotation was computed. [2022-11-21 14:05:22,244 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 455 484) the Hoare annotation is: true [2022-11-21 14:05:22,244 INFO L899 garLoopResultBuilder]: For program point L476(line 476) no Hoare annotation was computed. [2022-11-21 14:05:22,245 INFO L899 garLoopResultBuilder]: For program point L469(lines 469 473) no Hoare annotation was computed. [2022-11-21 14:05:22,245 INFO L902 garLoopResultBuilder]: At program point L469-1(lines 469 473) the Hoare annotation is: true [2022-11-21 14:05:22,245 INFO L899 garLoopResultBuilder]: For program point L466(line 466) no Hoare annotation was computed. [2022-11-21 14:05:22,245 INFO L902 garLoopResultBuilder]: At program point L465-2(lines 465 479) the Hoare annotation is: true [2022-11-21 14:05:22,245 INFO L902 garLoopResultBuilder]: At program point L461(line 461) the Hoare annotation is: true [2022-11-21 14:05:22,245 INFO L899 garLoopResultBuilder]: For program point L461-1(line 461) no Hoare annotation was computed. [2022-11-21 14:05:22,245 INFO L899 garLoopResultBuilder]: For program point L155-1(lines 155 161) no Hoare annotation was computed. [2022-11-21 14:05:22,245 INFO L895 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-11-21 14:05:22,245 INFO L895 garLoopResultBuilder]: At program point L238(line 238) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-11-21 14:05:22,245 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-11-21 14:05:22,246 INFO L899 garLoopResultBuilder]: For program point L234-1(line 234) no Hoare annotation was computed. [2022-11-21 14:05:22,246 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 144 167) no Hoare annotation was computed. [2022-11-21 14:05:22,246 INFO L895 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-21 14:05:22,246 INFO L895 garLoopResultBuilder]: At program point L247-1(lines 228 252) the Hoare annotation is: (let ((.cse1 (< |old(~waterLevel~0)| 2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (let ((.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and .cse3 .cse4) .cse1 (and (<= 2 ~waterLevel~0) .cse4) .cse2)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 (= ~waterLevel~0 1)) .cse2))) [2022-11-21 14:05:22,246 INFO L899 garLoopResultBuilder]: For program point L148-1(lines 147 166) no Hoare annotation was computed. [2022-11-21 14:05:22,246 INFO L895 garLoopResultBuilder]: At program point L991(lines 986 994) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 (= ~waterLevel~0 1)) .cse2) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse1 (and (<= 2 ~waterLevel~0) .cse5 .cse4) (and .cse3 .cse5 .cse4) .cse2)))) [2022-11-21 14:05:22,246 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-21 14:05:22,247 INFO L895 garLoopResultBuilder]: At program point L302(lines 297 305) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-11-21 14:05:22,247 INFO L899 garLoopResultBuilder]: For program point L236(lines 236 244) no Hoare annotation was computed. [2022-11-21 14:05:22,247 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 249) no Hoare annotation was computed. [2022-11-21 14:05:22,247 INFO L899 garLoopResultBuilder]: For program point L922(lines 922 926) no Hoare annotation was computed. [2022-11-21 14:05:22,247 INFO L895 garLoopResultBuilder]: At program point L922-2(lines 918 929) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))))) [2022-11-21 14:05:22,247 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or (< |old(~waterLevel~0)| 2) .cse0))) [2022-11-21 14:05:22,247 INFO L899 garLoopResultBuilder]: For program point L402(lines 402 408) no Hoare annotation was computed. [2022-11-21 14:05:22,247 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 144 167) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-21 14:05:22,247 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 411) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L895 garLoopResultBuilder]: At program point L398-1(lines 390 414) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~7#1|)) (.cse4 (<= 1 |timeShift_getWaterLevel_#res#1|)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1 (<= |old(~waterLevel~0)| 1)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse2 .cse3 .cse4 (= ~waterLevel~0 1)) .cse1) (let ((.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or (and (<= 2 ~waterLevel~0) .cse3 .cse5 .cse4) (< |old(~waterLevel~0)| 2) (and .cse2 .cse3 .cse5 .cse4) .cse1)))) [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 144 167) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L895 garLoopResultBuilder]: At program point L122(lines 73 123) the Hoare annotation is: false [2022-11-21 14:05:22,248 INFO L902 garLoopResultBuilder]: At program point L523(lines 516 525) the Hoare annotation is: true [2022-11-21 14:05:22,248 INFO L895 garLoopResultBuilder]: At program point L449(lines 444 452) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point L94(lines 94 100) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point L94-1(lines 94 100) no Hoare annotation was computed. [2022-11-21 14:05:22,248 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-21 14:05:22,249 INFO L895 garLoopResultBuilder]: At program point L441(lines 437 443) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-21 14:05:22,249 INFO L899 garLoopResultBuilder]: For program point L536(lines 536 543) no Hoare annotation was computed. [2022-11-21 14:05:22,249 INFO L895 garLoopResultBuilder]: At program point L119(lines 74 121) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-11-21 14:05:22,249 INFO L895 garLoopResultBuilder]: At program point L86(line 86) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-11-21 14:05:22,249 INFO L899 garLoopResultBuilder]: For program point L536-2(lines 536 543) no Hoare annotation was computed. [2022-11-21 14:05:22,249 INFO L902 garLoopResultBuilder]: At program point L545(lines 526 548) the Hoare annotation is: true [2022-11-21 14:05:22,249 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-21 14:05:22,249 INFO L895 garLoopResultBuilder]: At program point L434(lines 430 436) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-21 14:05:22,249 INFO L899 garLoopResultBuilder]: For program point L112(lines 112 116) no Hoare annotation was computed. [2022-11-21 14:05:22,250 INFO L895 garLoopResultBuilder]: At program point L112-2(lines 104 117) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-11-21 14:05:22,250 INFO L899 garLoopResultBuilder]: For program point L75(lines 74 121) no Hoare annotation was computed. [2022-11-21 14:05:22,250 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 117) no Hoare annotation was computed. [2022-11-21 14:05:22,250 INFO L895 garLoopResultBuilder]: At program point L513(lines 509 515) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) (not (= 0 ~systemActive~0))) [2022-11-21 14:05:22,250 INFO L895 garLoopResultBuilder]: At program point L385(lines 380 387) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-11-21 14:05:22,250 INFO L895 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 (= ~waterLevel~0 1) (= ~waterLevel~0 |ULTIMATE.start_main_~tmp~8#1|) .cse2) (and .cse0 (<= 2 ~waterLevel~0) (= |ULTIMATE.start_main_~tmp~8#1| 1) .cse1 .cse2))) [2022-11-21 14:05:22,250 INFO L902 garLoopResultBuilder]: At program point L125(lines 64 129) the Hoare annotation is: true [2022-11-21 14:05:22,250 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 90) no Hoare annotation was computed. [2022-11-21 14:05:22,250 INFO L899 garLoopResultBuilder]: For program point L84-1(lines 84 90) no Hoare annotation was computed. [2022-11-21 14:05:22,256 INFO L899 garLoopResultBuilder]: For program point L76(lines 76 80) no Hoare annotation was computed. [2022-11-21 14:05:22,256 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 176 200) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-11-21 14:05:22,256 INFO L899 garLoopResultBuilder]: For program point L351(lines 351 355) no Hoare annotation was computed. [2022-11-21 14:05:22,257 INFO L895 garLoopResultBuilder]: At program point L190(line 190) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse1) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0) .cse1) (= 0 ~systemActive~0))) [2022-11-21 14:05:22,258 INFO L899 garLoopResultBuilder]: For program point L351-2(lines 351 355) no Hoare annotation was computed. [2022-11-21 14:05:22,258 INFO L899 garLoopResultBuilder]: For program point L184(lines 184 192) no Hoare annotation was computed. [2022-11-21 14:05:22,258 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 197) no Hoare annotation was computed. [2022-11-21 14:05:22,259 INFO L895 garLoopResultBuilder]: At program point L1004(lines 995 1008) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0))) [2022-11-21 14:05:22,259 INFO L895 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,259 INFO L899 garLoopResultBuilder]: For program point L195-1(lines 176 200) no Hoare annotation was computed. [2022-11-21 14:05:22,259 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 176 200) no Hoare annotation was computed. [2022-11-21 14:05:22,259 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 274) no Hoare annotation was computed. [2022-11-21 14:05:22,260 INFO L895 garLoopResultBuilder]: At program point L266(line 266) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 0) (< ~waterLevel~0 2) .cse1) (or (not (= ~waterLevel~0 1)) .cse0 .cse1))) [2022-11-21 14:05:22,260 INFO L895 garLoopResultBuilder]: At program point L268-2(lines 261 277) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (<= 2 ~waterLevel~0) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,260 INFO L899 garLoopResultBuilder]: For program point L266-1(line 266) no Hoare annotation was computed. [2022-11-21 14:05:22,260 INFO L899 garLoopResultBuilder]: For program point L999(lines 999 1005) no Hoare annotation was computed. [2022-11-21 14:05:22,261 INFO L895 garLoopResultBuilder]: At program point L357(lines 342 360) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~5#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2))) [2022-11-21 14:05:22,261 INFO L895 garLoopResultBuilder]: At program point L258(lines 253 260) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,261 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 930 941) no Hoare annotation was computed. [2022-11-21 14:05:22,261 INFO L899 garLoopResultBuilder]: For program point L934-1(lines 930 941) no Hoare annotation was computed. [2022-11-21 14:05:22,262 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 930 941) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= ~pumpRunning~0 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (= ~waterLevel~0 1)) (or (= |old(~waterLevel~0)| ~waterLevel~0) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-21 14:05:22,262 INFO L895 garLoopResultBuilder]: At program point L221(line 221) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,262 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 202 226) no Hoare annotation was computed. [2022-11-21 14:05:22,263 INFO L895 garLoopResultBuilder]: At program point L376(lines 361 379) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0)) .cse0 .cse1))) [2022-11-21 14:05:22,263 INFO L895 garLoopResultBuilder]: At program point L1014(lines 1009 1017) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 14:05:22,263 INFO L899 garLoopResultBuilder]: For program point L370(lines 370 374) no Hoare annotation was computed. [2022-11-21 14:05:22,263 INFO L899 garLoopResultBuilder]: For program point L370-2(lines 370 374) no Hoare annotation was computed. [2022-11-21 14:05:22,263 INFO L895 garLoopResultBuilder]: At program point L216(line 216) the Hoare annotation is: (or (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,264 INFO L895 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~waterLevel~0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp___0~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_#res#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (= |processEnvironment__wrappee__methaneQuery_isLowWaterLevel_~tmp~6#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-11-21 14:05:22,264 INFO L899 garLoopResultBuilder]: For program point L210(lines 210 218) no Hoare annotation was computed. [2022-11-21 14:05:22,264 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 202 226) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0)) [2022-11-21 14:05:22,264 INFO L899 garLoopResultBuilder]: For program point L206(lines 206 223) no Hoare annotation was computed. [2022-11-21 14:05:22,264 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 202 226) no Hoare annotation was computed. [2022-11-21 14:05:22,264 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 286 296) the Hoare annotation is: true [2022-11-21 14:05:22,265 INFO L902 garLoopResultBuilder]: At program point L959(lines 954 962) the Hoare annotation is: true [2022-11-21 14:05:22,265 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 286 296) no Hoare annotation was computed. [2022-11-21 14:05:22,266 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 286 296) no Hoare annotation was computed. [2022-11-21 14:05:22,269 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-21 14:05:22,272 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-21 14:05:22,306 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.11 02:05:22 BoogieIcfgContainer [2022-11-21 14:05:22,309 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-21 14:05:22,310 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-21 14:05:22,310 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-21 14:05:22,310 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-21 14:05:22,311 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 02:05:07" (3/4) ... [2022-11-21 14:05:22,314 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-21 14:05:22,321 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-21 14:05:22,321 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-21 14:05:22,322 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-21 14:05:22,322 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-21 14:05:22,322 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-21 14:05:22,323 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-21 14:05:22,323 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-21 14:05:22,323 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-21 14:05:22,323 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-21 14:05:22,334 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-21 14:05:22,335 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-21 14:05:22,335 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-21 14:05:22,336 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 14:05:22,336 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-21 14:05:22,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-21 14:05:22,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) [2022-11-21 14:05:22,370 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-21 14:05:22,372 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) [2022-11-21 14:05:22,373 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) [2022-11-21 14:05:22,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-21 14:05:22,375 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-11-21 14:05:22,376 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) [2022-11-21 14:05:22,376 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-11-21 14:05:22,377 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-11-21 14:05:22,377 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive [2022-11-21 14:05:22,377 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive [2022-11-21 14:05:22,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive [2022-11-21 14:05:22,378 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) [2022-11-21 14:05:22,381 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) [2022-11-21 14:05:22,382 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) [2022-11-21 14:05:22,429 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/witness.graphml [2022-11-21 14:05:22,430 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-21 14:05:22,430 INFO L158 Benchmark]: Toolchain (without parser) took 15930.28ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 124.7MB in the beginning and 131.3MB in the end (delta: -6.5MB). Peak memory consumption was 71.6MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,431 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 159.4MB. Free memory is still 103.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-21 14:05:22,431 INFO L158 Benchmark]: CACSL2BoogieTranslator took 494.51ms. Allocated memory is still 159.4MB. Free memory was 124.2MB in the beginning and 105.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,432 INFO L158 Benchmark]: Boogie Procedure Inliner took 58.46ms. Allocated memory is still 159.4MB. Free memory was 105.3MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,432 INFO L158 Benchmark]: Boogie Preprocessor took 30.12ms. Allocated memory is still 159.4MB. Free memory was 103.1MB in the beginning and 101.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,433 INFO L158 Benchmark]: RCFGBuilder took 689.95ms. Allocated memory is still 159.4MB. Free memory was 101.7MB in the beginning and 83.7MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,434 INFO L158 Benchmark]: TraceAbstraction took 14522.28ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 82.8MB in the beginning and 137.6MB in the end (delta: -54.8MB). Peak memory consumption was 102.5MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,434 INFO L158 Benchmark]: Witness Printer took 120.17ms. Allocated memory is still 237.0MB. Free memory was 137.6MB in the beginning and 131.3MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-21 14:05:22,436 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 159.4MB. Free memory is still 103.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 494.51ms. Allocated memory is still 159.4MB. Free memory was 124.2MB in the beginning and 105.3MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 58.46ms. Allocated memory is still 159.4MB. Free memory was 105.3MB in the beginning and 103.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.12ms. Allocated memory is still 159.4MB. Free memory was 103.1MB in the beginning and 101.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 689.95ms. Allocated memory is still 159.4MB. Free memory was 101.7MB in the beginning and 83.7MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 14522.28ms. Allocated memory was 159.4MB in the beginning and 237.0MB in the end (delta: 77.6MB). Free memory was 82.8MB in the beginning and 137.6MB in the end (delta: -54.8MB). Peak memory consumption was 102.5MB. Max. memory is 16.1GB. * Witness Printer took 120.17ms. Allocated memory is still 237.0MB. Free memory was 137.6MB in the beginning and 131.3MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.4s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2607 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2575 mSDsluCounter, 4081 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3077 mSDsCounter, 999 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3666 IncrementalHoareTripleChecker+Invalid, 4665 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 999 mSolverCounterUnsat, 1004 mSDtfsCounter, 3666 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 920 GetRequests, 763 SyntacticMatches, 12 SemanticMatches, 145 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1259 ImplicationChecksByTransitivity, 1.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=710occurred in iteration=9, InterpolantAutomatonStates: 136, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 252 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1422 PreInvPairs, 1536 NumberOfFragments, 1066 HoareAnnotationTreeSize, 1422 FomulaSimplifications, 1427 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 49 FomulaSimplificationsInter, 7307 FormulaSimplificationTreeSizeReductionInter, 2.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1104 NumberOfCodeBlocks, 1104 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1328 ConstructedInterpolants, 0 QuantifiedInterpolants, 2338 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1252 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 8 PerfectInterpolantSequences, 554/634 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 444]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 253]: Loop Invariant Derived loop invariant: (!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && ((((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) || \old(waterLevel) < 2) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (pumpRunning == 0 && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((\old(waterLevel) < 2 || 0 == systemActive) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) && ((((((pumpRunning == \old(pumpRunning) && 1 <= tmp___0) && 1 <= \result) && \result == 0) && tmp == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) == waterLevel) || 0 == systemActive) || \old(waterLevel) <= 1) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && 1 <= tmp) && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && ((((((2 <= waterLevel && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result) || \old(waterLevel) < 2) || (((pumpRunning == 0 && 1 <= tmp) && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((!(1 <= waterLevel) || (pumpRunning == \old(pumpRunning) && \result == 0)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || 0 == systemActive - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive)) || ((((\result == 1 && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 342]: Loop Invariant Derived loop invariant: (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && !(\result == 0)) && \result == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || waterLevel < 2) || 0 == systemActive) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 986]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || \old(waterLevel) < 2) || \old(waterLevel) == waterLevel) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && 1 <= \result) && waterLevel == 1)) || 0 == systemActive)) && (((\old(waterLevel) < 2 || ((2 <= waterLevel && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || ((pumpRunning == 0 && \old(waterLevel) <= waterLevel + 1) && 1 <= \result)) || 0 == systemActive) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 509]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && waterLevel == 1) && waterLevel == tmp) && !(0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) - InvariantResult [Line: 297]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || 0 == systemActive) && (\old(waterLevel) < 2 || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-21 14:05:22,496 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4c56c042-852a-4920-a400-6a3ed3b00ca0/bin/uautomizer-vX5HgA9Q3a/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE