./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 03:49:34,565 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 03:49:34,572 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 03:49:34,594 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 03:49:34,600 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 03:49:34,604 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 03:49:34,630 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 03:49:34,634 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 03:49:34,637 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 03:49:34,643 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 03:49:34,645 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 03:49:34,647 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 03:49:34,648 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 03:49:34,651 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 03:49:34,653 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 03:49:34,655 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 03:49:34,657 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 03:49:34,658 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 03:49:34,660 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 03:49:34,667 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 03:49:34,669 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 03:49:34,671 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 03:49:34,672 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 03:49:34,673 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 03:49:34,679 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 03:49:34,679 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 03:49:34,680 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 03:49:34,680 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 03:49:34,681 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 03:49:34,682 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 03:49:34,682 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 03:49:34,683 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 03:49:34,684 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 03:49:34,684 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 03:49:34,685 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 03:49:34,686 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 03:49:34,691 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 03:49:34,692 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 03:49:34,693 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 03:49:34,696 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 03:49:34,697 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 03:49:34,698 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-23 03:49:34,739 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 03:49:34,739 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 03:49:34,739 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 03:49:34,740 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 03:49:34,740 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 03:49:34,741 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 03:49:34,741 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 03:49:34,742 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 03:49:34,742 INFO L138 SettingsManager]: * Use SBE=true [2022-11-23 03:49:34,742 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 03:49:34,743 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 03:49:34,743 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 03:49:34,743 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 03:49:34,744 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 03:49:34,745 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 03:49:34,745 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 03:49:34,745 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 03:49:34,745 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 03:49:34,745 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 03:49:34,746 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 03:49:34,746 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 03:49:34,746 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 03:49:34,746 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 03:49:34,747 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-23 03:49:34,747 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 03:49:34,747 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-23 03:49:34,747 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 03:49:34,748 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-23 03:49:34,748 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 03:49:34,749 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 7bcd24ea8f621c8db79e853f5aaf064ffcae573e6c1e9f03eb1f84bb0c15fc3c [2022-11-23 03:49:35,056 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 03:49:35,085 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 03:49:35,087 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 03:49:35,089 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 03:49:35,089 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 03:49:35,091 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/../../sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-11-23 03:49:38,140 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 03:49:38,417 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 03:49:38,417 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c [2022-11-23 03:49:38,458 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/data/ad718a18d/56de80189f3f4037996d124074ed4dbb/FLAGf9069e8c8 [2022-11-23 03:49:38,472 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/data/ad718a18d/56de80189f3f4037996d124074ed4dbb [2022-11-23 03:49:38,478 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 03:49:38,480 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 03:49:38,482 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 03:49:38,483 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 03:49:38,486 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 03:49:38,487 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:49:38" (1/1) ... [2022-11-23 03:49:38,489 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e09d02c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:38, skipping insertion in model container [2022-11-23 03:49:38,490 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 03:49:38" (1/1) ... [2022-11-23 03:49:38,497 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 03:49:38,554 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 03:49:38,882 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-11-23 03:49:38,939 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 03:49:38,950 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 03:49:39,000 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/sv-benchmarks/c/product-lines/minepump_spec5_product56.cil.c[8146,8159] [2022-11-23 03:49:39,081 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 03:49:39,099 INFO L208 MainTranslator]: Completed translation [2022-11-23 03:49:39,099 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39 WrapperNode [2022-11-23 03:49:39,099 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 03:49:39,101 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 03:49:39,101 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 03:49:39,101 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 03:49:39,108 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,138 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,171 INFO L138 Inliner]: procedures = 60, calls = 108, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 238 [2022-11-23 03:49:39,172 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 03:49:39,172 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 03:49:39,173 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 03:49:39,173 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 03:49:39,181 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,182 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,184 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,184 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,190 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,197 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,198 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,200 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,202 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 03:49:39,203 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 03:49:39,204 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 03:49:39,204 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 03:49:39,205 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (1/1) ... [2022-11-23 03:49:39,212 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 03:49:39,225 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 03:49:39,237 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 03:49:39,251 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 03:49:39,280 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 03:49:39,280 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 03:49:39,280 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 03:49:39,281 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 03:49:39,281 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 03:49:39,281 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 03:49:39,281 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 03:49:39,281 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 03:49:39,282 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 03:49:39,282 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 03:49:39,282 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 03:49:39,282 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 03:49:39,282 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 03:49:39,282 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-23 03:49:39,283 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-23 03:49:39,283 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-23 03:49:39,283 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-23 03:49:39,283 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 03:49:39,283 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 03:49:39,284 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 03:49:39,284 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 03:49:39,284 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 03:49:39,359 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 03:49:39,360 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 03:49:39,762 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 03:49:39,769 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 03:49:39,774 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 03:49:39,778 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:49:39 BoogieIcfgContainer [2022-11-23 03:49:39,779 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 03:49:39,781 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 03:49:39,781 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 03:49:39,789 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 03:49:39,790 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 03:49:38" (1/3) ... [2022-11-23 03:49:39,790 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f3d1701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:49:39, skipping insertion in model container [2022-11-23 03:49:39,791 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 03:49:39" (2/3) ... [2022-11-23 03:49:39,791 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f3d1701 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 03:49:39, skipping insertion in model container [2022-11-23 03:49:39,793 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:49:39" (3/3) ... [2022-11-23 03:49:39,795 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product56.cil.c [2022-11-23 03:49:39,820 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 03:49:39,821 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 03:49:39,877 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 03:49:39,884 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6abfcd51, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 03:49:39,885 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 03:49:39,889 INFO L276 IsEmpty]: Start isEmpty. Operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-23 03:49:39,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-23 03:49:39,899 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:39,900 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:39,900 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:39,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:39,905 INFO L85 PathProgramCache]: Analyzing trace with hash 2077500872, now seen corresponding path program 1 times [2022-11-23 03:49:39,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:39,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749080650] [2022-11-23 03:49:39,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:39,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:40,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-23 03:49:40,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 03:49:40,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,168 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:40,169 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:40,169 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749080650] [2022-11-23 03:49:40,170 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749080650] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:40,170 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:40,170 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 03:49:40,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1416987171] [2022-11-23 03:49:40,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:40,180 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 03:49:40,181 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:40,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 03:49:40,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 03:49:40,229 INFO L87 Difference]: Start difference. First operand has 110 states, 82 states have (on average 1.3658536585365855) internal successors, (112), 93 states have internal predecessors, (112), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 03:49:40,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:40,310 INFO L93 Difference]: Finished difference Result 211 states and 286 transitions. [2022-11-23 03:49:40,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 03:49:40,312 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-23 03:49:40,313 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:40,326 INFO L225 Difference]: With dead ends: 211 [2022-11-23 03:49:40,326 INFO L226 Difference]: Without dead ends: 101 [2022-11-23 03:49:40,332 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 03:49:40,336 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:40,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:49:40,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-11-23 03:49:40,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 101. [2022-11-23 03:49:40,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 75 states have (on average 1.3066666666666666) internal successors, (98), 85 states have internal predecessors, (98), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-23 03:49:40,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 131 transitions. [2022-11-23 03:49:40,415 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 131 transitions. Word has length 32 [2022-11-23 03:49:40,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:40,416 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 131 transitions. [2022-11-23 03:49:40,416 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 03:49:40,417 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 131 transitions. [2022-11-23 03:49:40,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-23 03:49:40,425 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:40,426 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:40,427 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 03:49:40,427 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:40,428 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:40,428 INFO L85 PathProgramCache]: Analyzing trace with hash 604529845, now seen corresponding path program 1 times [2022-11-23 03:49:40,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:40,429 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7442857] [2022-11-23 03:49:40,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:40,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:40,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-23 03:49:40,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-23 03:49:40,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,606 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:40,607 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:40,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7442857] [2022-11-23 03:49:40,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7442857] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:40,608 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:40,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 03:49:40,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [454334110] [2022-11-23 03:49:40,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:40,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 03:49:40,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:40,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 03:49:40,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:49:40,611 INFO L87 Difference]: Start difference. First operand 101 states and 131 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 03:49:40,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:40,633 INFO L93 Difference]: Finished difference Result 162 states and 210 transitions. [2022-11-23 03:49:40,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 03:49:40,634 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-23 03:49:40,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:40,635 INFO L225 Difference]: With dead ends: 162 [2022-11-23 03:49:40,635 INFO L226 Difference]: Without dead ends: 92 [2022-11-23 03:49:40,636 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:49:40,638 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 17 mSDsluCounter, 96 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:40,639 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 214 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:49:40,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2022-11-23 03:49:40,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 92. [2022-11-23 03:49:40,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 69 states have (on average 1.318840579710145) internal successors, (91), 79 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-23 03:49:40,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 119 transitions. [2022-11-23 03:49:40,651 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 119 transitions. Word has length 33 [2022-11-23 03:49:40,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:40,652 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 119 transitions. [2022-11-23 03:49:40,652 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-23 03:49:40,652 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 119 transitions. [2022-11-23 03:49:40,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-23 03:49:40,653 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:40,654 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:40,654 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 03:49:40,654 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:40,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:40,655 INFO L85 PathProgramCache]: Analyzing trace with hash -1594505260, now seen corresponding path program 1 times [2022-11-23 03:49:40,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:40,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1335575614] [2022-11-23 03:49:40,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:40,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:40,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:49:40,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 03:49:40,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:40,740 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:40,740 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:40,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1335575614] [2022-11-23 03:49:40,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1335575614] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:40,741 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:40,741 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 03:49:40,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [224743221] [2022-11-23 03:49:40,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:40,742 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 03:49:40,743 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:40,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 03:49:40,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:49:40,744 INFO L87 Difference]: Start difference. First operand 92 states and 119 transitions. Second operand has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 03:49:40,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:40,783 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2022-11-23 03:49:40,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 03:49:40,784 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-23 03:49:40,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:40,786 INFO L225 Difference]: With dead ends: 258 [2022-11-23 03:49:40,787 INFO L226 Difference]: Without dead ends: 174 [2022-11-23 03:49:40,788 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 03:49:40,789 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 107 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 252 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:40,790 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 252 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 03:49:40,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 174 states. [2022-11-23 03:49:40,812 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 174 to 171. [2022-11-23 03:49:40,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 28 states have call successors, (28), 16 states have call predecessors, (28), 16 states have return successors, (28), 17 states have call predecessors, (28), 28 states have call successors, (28) [2022-11-23 03:49:40,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 225 transitions. [2022-11-23 03:49:40,815 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 225 transitions. Word has length 38 [2022-11-23 03:49:40,815 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:40,815 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 225 transitions. [2022-11-23 03:49:40,816 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.333333333333334) internal successors, (31), 3 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 03:49:40,816 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 225 transitions. [2022-11-23 03:49:40,817 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-23 03:49:40,818 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:40,818 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:40,818 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 03:49:40,818 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:40,819 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:40,819 INFO L85 PathProgramCache]: Analyzing trace with hash -969732780, now seen corresponding path program 1 times [2022-11-23 03:49:40,819 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:40,820 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1949870059] [2022-11-23 03:49:40,820 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:40,820 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:40,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-23 03:49:41,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-23 03:49:41,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,090 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 03:49:41,091 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:41,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1949870059] [2022-11-23 03:49:41,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1949870059] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:41,091 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:41,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:49:41,092 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198645206] [2022-11-23 03:49:41,092 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:41,092 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:49:41,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:41,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:49:41,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:49:41,094 INFO L87 Difference]: Start difference. First operand 171 states and 225 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 03:49:41,293 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:41,294 INFO L93 Difference]: Finished difference Result 445 states and 602 transitions. [2022-11-23 03:49:41,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-23 03:49:41,294 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-23 03:49:41,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:41,304 INFO L225 Difference]: With dead ends: 445 [2022-11-23 03:49:41,304 INFO L226 Difference]: Without dead ends: 282 [2022-11-23 03:49:41,309 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-23 03:49:41,316 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 81 mSDsluCounter, 438 mSDsCounter, 0 mSdLazyCounter, 78 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 90 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 78 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:41,318 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 572 Invalid, 90 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 78 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 03:49:41,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 282 states. [2022-11-23 03:49:41,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 282 to 269. [2022-11-23 03:49:41,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 269 states, 200 states have (on average 1.29) internal successors, (258), 217 states have internal predecessors, (258), 38 states have call successors, (38), 30 states have call predecessors, (38), 30 states have return successors, (50), 33 states have call predecessors, (50), 38 states have call successors, (50) [2022-11-23 03:49:41,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 269 states to 269 states and 346 transitions. [2022-11-23 03:49:41,390 INFO L78 Accepts]: Start accepts. Automaton has 269 states and 346 transitions. Word has length 41 [2022-11-23 03:49:41,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:41,391 INFO L495 AbstractCegarLoop]: Abstraction has 269 states and 346 transitions. [2022-11-23 03:49:41,392 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-23 03:49:41,392 INFO L276 IsEmpty]: Start isEmpty. Operand 269 states and 346 transitions. [2022-11-23 03:49:41,393 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-23 03:49:41,398 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:41,399 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:41,399 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 03:49:41,400 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:41,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:41,401 INFO L85 PathProgramCache]: Analyzing trace with hash -1724941251, now seen corresponding path program 1 times [2022-11-23 03:49:41,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:41,404 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424920143] [2022-11-23 03:49:41,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:41,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:41,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:49:41,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-23 03:49:41,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:41,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-23 03:49:41,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:41,556 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:41,557 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:41,557 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424920143] [2022-11-23 03:49:41,557 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424920143] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:41,557 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:41,557 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:49:41,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605182489] [2022-11-23 03:49:41,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:41,558 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:49:41,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:41,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:49:41,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:49:41,559 INFO L87 Difference]: Start difference. First operand 269 states and 346 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-23 03:49:41,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:41,878 INFO L93 Difference]: Finished difference Result 853 states and 1148 transitions. [2022-11-23 03:49:41,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-23 03:49:41,879 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-11-23 03:49:41,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:41,882 INFO L225 Difference]: With dead ends: 853 [2022-11-23 03:49:41,883 INFO L226 Difference]: Without dead ends: 592 [2022-11-23 03:49:41,884 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-11-23 03:49:41,885 INFO L413 NwaCegarLoop]: 123 mSDtfsCounter, 195 mSDsluCounter, 343 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 201 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:41,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [201 Valid, 466 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 03:49:41,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-11-23 03:49:41,933 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 529. [2022-11-23 03:49:41,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 529 states, 396 states have (on average 1.2575757575757576) internal successors, (498), 418 states have internal predecessors, (498), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-11-23 03:49:41,938 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 529 states to 529 states and 674 transitions. [2022-11-23 03:49:41,938 INFO L78 Accepts]: Start accepts. Automaton has 529 states and 674 transitions. Word has length 57 [2022-11-23 03:49:41,939 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:41,939 INFO L495 AbstractCegarLoop]: Abstraction has 529 states and 674 transitions. [2022-11-23 03:49:41,939 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-23 03:49:41,939 INFO L276 IsEmpty]: Start isEmpty. Operand 529 states and 674 transitions. [2022-11-23 03:49:41,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-23 03:49:41,941 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:41,941 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:41,941 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 03:49:41,941 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:41,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:41,942 INFO L85 PathProgramCache]: Analyzing trace with hash 80497083, now seen corresponding path program 1 times [2022-11-23 03:49:41,942 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:41,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [593562712] [2022-11-23 03:49:41,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:41,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:41,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:49:42,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-23 03:49:42,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:42,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-23 03:49:42,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,098 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:42,098 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:42,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [593562712] [2022-11-23 03:49:42,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [593562712] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:42,099 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:42,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:49:42,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [785759173] [2022-11-23 03:49:42,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:42,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:49:42,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:42,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:49:42,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:49:42,101 INFO L87 Difference]: Start difference. First operand 529 states and 674 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:49:42,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:42,350 INFO L93 Difference]: Finished difference Result 1076 states and 1397 transitions. [2022-11-23 03:49:42,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 03:49:42,351 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-23 03:49:42,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:42,354 INFO L225 Difference]: With dead ends: 1076 [2022-11-23 03:49:42,355 INFO L226 Difference]: Without dead ends: 555 [2022-11-23 03:49:42,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-23 03:49:42,358 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 74 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 172 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:42,359 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 444 Invalid, 172 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 03:49:42,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 555 states. [2022-11-23 03:49:42,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 555 to 541. [2022-11-23 03:49:42,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 541 states, 408 states have (on average 1.25) internal successors, (510), 430 states have internal predecessors, (510), 69 states have call successors, (69), 53 states have call predecessors, (69), 63 states have return successors, (107), 72 states have call predecessors, (107), 69 states have call successors, (107) [2022-11-23 03:49:42,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 541 states to 541 states and 686 transitions. [2022-11-23 03:49:42,411 INFO L78 Accepts]: Start accepts. Automaton has 541 states and 686 transitions. Word has length 57 [2022-11-23 03:49:42,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:42,412 INFO L495 AbstractCegarLoop]: Abstraction has 541 states and 686 transitions. [2022-11-23 03:49:42,412 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 03:49:42,413 INFO L276 IsEmpty]: Start isEmpty. Operand 541 states and 686 transitions. [2022-11-23 03:49:42,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-23 03:49:42,414 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:42,414 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:42,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 03:49:42,415 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:42,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:42,416 INFO L85 PathProgramCache]: Analyzing trace with hash 503198909, now seen corresponding path program 1 times [2022-11-23 03:49:42,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:42,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189364104] [2022-11-23 03:49:42,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:42,416 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:42,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-23 03:49:42,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-23 03:49:42,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,503 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:42,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-23 03:49:42,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:42,535 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:42,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:42,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189364104] [2022-11-23 03:49:42,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189364104] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:42,536 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:42,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 03:49:42,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [639714047] [2022-11-23 03:49:42,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:42,538 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 03:49:42,538 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:42,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 03:49:42,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 03:49:42,539 INFO L87 Difference]: Start difference. First operand 541 states and 686 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-23 03:49:42,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:42,877 INFO L93 Difference]: Finished difference Result 996 states and 1286 transitions. [2022-11-23 03:49:42,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 03:49:42,877 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 57 [2022-11-23 03:49:42,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:42,880 INFO L225 Difference]: With dead ends: 996 [2022-11-23 03:49:42,880 INFO L226 Difference]: Without dead ends: 463 [2022-11-23 03:49:42,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-23 03:49:42,883 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 250 mSDsluCounter, 336 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 258 SdHoareTripleChecker+Valid, 448 SdHoareTripleChecker+Invalid, 264 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:42,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [258 Valid, 448 Invalid, 264 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 03:49:42,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 463 states. [2022-11-23 03:49:42,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 463 to 447. [2022-11-23 03:49:42,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 447 states, 336 states have (on average 1.2291666666666667) internal successors, (413), 355 states have internal predecessors, (413), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (80), 59 states have call predecessors, (80), 58 states have call successors, (80) [2022-11-23 03:49:42,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 447 states to 447 states and 551 transitions. [2022-11-23 03:49:42,923 INFO L78 Accepts]: Start accepts. Automaton has 447 states and 551 transitions. Word has length 57 [2022-11-23 03:49:42,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:42,923 INFO L495 AbstractCegarLoop]: Abstraction has 447 states and 551 transitions. [2022-11-23 03:49:42,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-23 03:49:42,924 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 551 transitions. [2022-11-23 03:49:42,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-11-23 03:49:42,925 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:42,925 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:42,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 03:49:42,926 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:42,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:42,927 INFO L85 PathProgramCache]: Analyzing trace with hash 924671973, now seen corresponding path program 1 times [2022-11-23 03:49:42,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:42,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1510713456] [2022-11-23 03:49:42,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:42,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:42,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 03:49:43,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-23 03:49:43,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-23 03:49:43,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:43,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2022-11-23 03:49:43,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:43,167 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 03:49:43,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:43,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1510713456] [2022-11-23 03:49:43,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1510713456] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:43,168 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:43,168 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-23 03:49:43,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914197557] [2022-11-23 03:49:43,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:43,169 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-23 03:49:43,169 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:43,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-23 03:49:43,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-23 03:49:43,170 INFO L87 Difference]: Start difference. First operand 447 states and 551 transitions. Second operand has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-23 03:49:44,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:44,540 INFO L93 Difference]: Finished difference Result 1669 states and 2221 transitions. [2022-11-23 03:49:44,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-23 03:49:44,541 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 61 [2022-11-23 03:49:44,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:44,548 INFO L225 Difference]: With dead ends: 1669 [2022-11-23 03:49:44,549 INFO L226 Difference]: Without dead ends: 1344 [2022-11-23 03:49:44,551 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 297 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-23 03:49:44,552 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 630 mSDsluCounter, 772 mSDsCounter, 0 mSdLazyCounter, 1085 mSolverCounterSat, 232 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 640 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 1317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 232 IncrementalHoareTripleChecker+Valid, 1085 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:44,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [640 Valid, 911 Invalid, 1317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [232 Valid, 1085 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-23 03:49:44,555 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1344 states. [2022-11-23 03:49:44,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1344 to 1190. [2022-11-23 03:49:44,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1190 states, 887 states have (on average 1.2232243517474635) internal successors, (1085), 944 states have internal predecessors, (1085), 160 states have call successors, (160), 118 states have call predecessors, (160), 142 states have return successors, (260), 162 states have call predecessors, (260), 160 states have call successors, (260) [2022-11-23 03:49:44,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1190 states to 1190 states and 1505 transitions. [2022-11-23 03:49:44,688 INFO L78 Accepts]: Start accepts. Automaton has 1190 states and 1505 transitions. Word has length 61 [2022-11-23 03:49:44,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:44,688 INFO L495 AbstractCegarLoop]: Abstraction has 1190 states and 1505 transitions. [2022-11-23 03:49:44,689 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.8) internal successors, (48), 8 states have internal predecessors, (48), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-23 03:49:44,689 INFO L276 IsEmpty]: Start isEmpty. Operand 1190 states and 1505 transitions. [2022-11-23 03:49:44,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-11-23 03:49:44,691 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:44,691 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:44,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 03:49:44,692 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:44,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:44,693 INFO L85 PathProgramCache]: Analyzing trace with hash 798113011, now seen corresponding path program 1 times [2022-11-23 03:49:44,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:44,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1967800361] [2022-11-23 03:49:44,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:44,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:44,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 03:49:44,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 03:49:44,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:49:44,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-23 03:49:44,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:44,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-23 03:49:44,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 83 [2022-11-23 03:49:44,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:44,792 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 03:49:44,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:44,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1967800361] [2022-11-23 03:49:44,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1967800361] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 03:49:44,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 03:49:44,793 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 03:49:44,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890527472] [2022-11-23 03:49:44,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 03:49:44,793 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 03:49:44,793 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:44,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 03:49:44,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-23 03:49:44,794 INFO L87 Difference]: Start difference. First operand 1190 states and 1505 transitions. Second operand has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-23 03:49:45,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:45,230 INFO L93 Difference]: Finished difference Result 2008 states and 2529 transitions. [2022-11-23 03:49:45,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-23 03:49:45,231 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 91 [2022-11-23 03:49:45,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:45,237 INFO L225 Difference]: With dead ends: 2008 [2022-11-23 03:49:45,237 INFO L226 Difference]: Without dead ends: 826 [2022-11-23 03:49:45,243 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-11-23 03:49:45,245 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 351 mSDsluCounter, 228 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 129 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 360 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 394 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 129 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:45,246 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [360 Valid, 342 Invalid, 394 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [129 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-23 03:49:45,248 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 826 states. [2022-11-23 03:49:45,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 826 to 790. [2022-11-23 03:49:45,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 594 states have (on average 1.2121212121212122) internal successors, (720), 633 states have internal predecessors, (720), 104 states have call successors, (104), 79 states have call predecessors, (104), 91 states have return successors, (155), 105 states have call predecessors, (155), 104 states have call successors, (155) [2022-11-23 03:49:45,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 979 transitions. [2022-11-23 03:49:45,326 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 979 transitions. Word has length 91 [2022-11-23 03:49:45,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:45,328 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 979 transitions. [2022-11-23 03:49:45,329 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.285714285714286) internal successors, (72), 4 states have internal predecessors, (72), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-23 03:49:45,329 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 979 transitions. [2022-11-23 03:49:45,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 112 [2022-11-23 03:49:45,332 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:45,332 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:45,332 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-23 03:49:45,332 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:45,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:45,334 INFO L85 PathProgramCache]: Analyzing trace with hash -726468575, now seen corresponding path program 1 times [2022-11-23 03:49:45,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:45,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1720533935] [2022-11-23 03:49:45,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:45,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:45,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 03:49:45,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,499 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-23 03:49:45,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:49:45,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,535 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-23 03:49:45,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,546 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:45,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-23 03:49:45,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-23 03:49:45,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 03:49:45,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:45,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2022-11-23 03:49:45,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,593 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 16 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 03:49:45,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:45,593 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1720533935] [2022-11-23 03:49:45,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1720533935] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 03:49:45,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1989529708] [2022-11-23 03:49:45,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:45,594 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 03:49:45,594 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 03:49:45,599 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 03:49:45,622 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 03:49:45,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:45,765 INFO L263 TraceCheckSpWp]: Trace formula consists of 374 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-23 03:49:45,773 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 03:49:46,066 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 27 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 03:49:46,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 03:49:46,315 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 03:49:46,316 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1989529708] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 03:49:46,316 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 03:49:46,316 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2022-11-23 03:49:46,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406383570] [2022-11-23 03:49:46,317 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 03:49:46,319 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-11-23 03:49:46,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:46,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-11-23 03:49:46,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2022-11-23 03:49:46,320 INFO L87 Difference]: Start difference. First operand 790 states and 979 transitions. Second operand has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-11-23 03:49:48,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:48,101 INFO L93 Difference]: Finished difference Result 1832 states and 2348 transitions. [2022-11-23 03:49:48,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-11-23 03:49:48,102 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) Word has length 111 [2022-11-23 03:49:48,103 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:48,109 INFO L225 Difference]: With dead ends: 1832 [2022-11-23 03:49:48,109 INFO L226 Difference]: Without dead ends: 1139 [2022-11-23 03:49:48,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 310 GetRequests, 252 SyntacticMatches, 4 SemanticMatches, 54 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 919 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=621, Invalid=2459, Unknown=0, NotChecked=0, Total=3080 [2022-11-23 03:49:48,113 INFO L413 NwaCegarLoop]: 196 mSDtfsCounter, 602 mSDsluCounter, 883 mSDsCounter, 0 mSdLazyCounter, 1017 mSolverCounterSat, 291 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 611 SdHoareTripleChecker+Valid, 1079 SdHoareTripleChecker+Invalid, 1308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 291 IncrementalHoareTripleChecker+Valid, 1017 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:48,115 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [611 Valid, 1079 Invalid, 1308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [291 Valid, 1017 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-23 03:49:48,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1139 states. [2022-11-23 03:49:48,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1139 to 887. [2022-11-23 03:49:48,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 887 states, 659 states have (on average 1.1881638846737481) internal successors, (783), 710 states have internal predecessors, (783), 121 states have call successors, (121), 100 states have call predecessors, (121), 106 states have return successors, (154), 111 states have call predecessors, (154), 121 states have call successors, (154) [2022-11-23 03:49:48,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 887 states to 887 states and 1058 transitions. [2022-11-23 03:49:48,203 INFO L78 Accepts]: Start accepts. Automaton has 887 states and 1058 transitions. Word has length 111 [2022-11-23 03:49:48,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:48,203 INFO L495 AbstractCegarLoop]: Abstraction has 887 states and 1058 transitions. [2022-11-23 03:49:48,204 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 9.133333333333333) internal successors, (137), 10 states have internal predecessors, (137), 6 states have call successors, (25), 7 states have call predecessors, (25), 6 states have return successors, (19), 7 states have call predecessors, (19), 6 states have call successors, (19) [2022-11-23 03:49:48,204 INFO L276 IsEmpty]: Start isEmpty. Operand 887 states and 1058 transitions. [2022-11-23 03:49:48,208 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2022-11-23 03:49:48,208 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 03:49:48,208 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:49:48,220 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 03:49:48,414 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-23 03:49:48,415 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 03:49:48,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 03:49:48,415 INFO L85 PathProgramCache]: Analyzing trace with hash 605285009, now seen corresponding path program 1 times [2022-11-23 03:49:48,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 03:49:48,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1924105169] [2022-11-23 03:49:48,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:48,416 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 03:49:48,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-23 03:49:48,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-23 03:49:48,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:49:48,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-23 03:49:48,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:48,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-23 03:49:48,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:49:48,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-23 03:49:48,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-23 03:49:48,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:48,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2022-11-23 03:49:48,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-23 03:49:48,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-23 03:49:48,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2022-11-23 03:49:48,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-11-23 03:49:48,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 03:49:48,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-11-23 03:49:48,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:48,876 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 92 proven. 28 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-11-23 03:49:48,877 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 03:49:48,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1924105169] [2022-11-23 03:49:48,877 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1924105169] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 03:49:48,877 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1413624969] [2022-11-23 03:49:48,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 03:49:48,878 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 03:49:48,878 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 03:49:48,883 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 03:49:48,907 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 03:49:49,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 03:49:49,031 INFO L263 TraceCheckSpWp]: Trace formula consists of 585 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-23 03:49:49,036 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 03:49:49,285 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 52 trivial. 0 not checked. [2022-11-23 03:49:49,285 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 03:49:49,815 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 83 trivial. 0 not checked. [2022-11-23 03:49:49,815 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1413624969] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 03:49:49,815 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 03:49:49,815 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 11] total 25 [2022-11-23 03:49:49,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477811526] [2022-11-23 03:49:49,816 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 03:49:49,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-23 03:49:49,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 03:49:49,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-23 03:49:49,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2022-11-23 03:49:49,818 INFO L87 Difference]: Start difference. First operand 887 states and 1058 transitions. Second operand has 25 states, 25 states have (on average 8.64) internal successors, (216), 22 states have internal predecessors, (216), 10 states have call successors, (36), 8 states have call predecessors, (36), 9 states have return successors, (32), 9 states have call predecessors, (32), 10 states have call successors, (32) [2022-11-23 03:49:51,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 03:49:51,348 INFO L93 Difference]: Finished difference Result 1931 states and 2377 transitions. [2022-11-23 03:49:51,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-11-23 03:49:51,349 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.64) internal successors, (216), 22 states have internal predecessors, (216), 10 states have call successors, (36), 8 states have call predecessors, (36), 9 states have return successors, (32), 9 states have call predecessors, (32), 10 states have call successors, (32) Word has length 191 [2022-11-23 03:49:51,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 03:49:51,350 INFO L225 Difference]: With dead ends: 1931 [2022-11-23 03:49:51,351 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 03:49:51,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 463 GetRequests, 409 SyntacticMatches, 5 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 537 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=542, Invalid=2008, Unknown=0, NotChecked=0, Total=2550 [2022-11-23 03:49:51,357 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 816 mSDsluCounter, 697 mSDsCounter, 0 mSdLazyCounter, 1239 mSolverCounterSat, 293 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 822 SdHoareTripleChecker+Valid, 804 SdHoareTripleChecker+Invalid, 1532 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 293 IncrementalHoareTripleChecker+Valid, 1239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-23 03:49:51,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [822 Valid, 804 Invalid, 1532 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [293 Valid, 1239 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-23 03:49:51,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 03:49:51,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 03:49:51,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 03:49:51,358 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 03:49:51,359 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 191 [2022-11-23 03:49:51,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 03:49:51,359 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 03:49:51,360 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.64) internal successors, (216), 22 states have internal predecessors, (216), 10 states have call successors, (36), 8 states have call predecessors, (36), 9 states have return successors, (32), 9 states have call predecessors, (32), 10 states have call successors, (32) [2022-11-23 03:49:51,360 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 03:49:51,360 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 03:49:51,363 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 03:49:51,383 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 03:49:51,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 03:49:51,571 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 03:50:02,255 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 293 300) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (< 1 ~waterLevel~0)) .cse0 .cse1 .cse2 .cse3))) [2022-11-23 03:50:02,259 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 293 300) no Hoare annotation was computed. [2022-11-23 03:50:02,259 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 293 300) no Hoare annotation was computed. [2022-11-23 03:50:02,260 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 200 206) no Hoare annotation was computed. [2022-11-23 03:50:02,261 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 200 206) the Hoare annotation is: true [2022-11-23 03:50:02,261 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: true [2022-11-23 03:50:02,261 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-23 03:50:02,261 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-23 03:50:02,261 INFO L902 garLoopResultBuilder]: At program point L962-2(lines 962 976) the Hoare annotation is: true [2022-11-23 03:50:02,262 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 952 981) no Hoare annotation was computed. [2022-11-23 03:50:02,262 INFO L902 garLoopResultBuilder]: At program point L958(line 958) the Hoare annotation is: true [2022-11-23 03:50:02,262 INFO L899 garLoopResultBuilder]: For program point L958-1(line 958) no Hoare annotation was computed. [2022-11-23 03:50:02,262 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 952 981) the Hoare annotation is: true [2022-11-23 03:50:02,262 INFO L902 garLoopResultBuilder]: At program point L977(lines 952 981) the Hoare annotation is: true [2022-11-23 03:50:02,262 INFO L899 garLoopResultBuilder]: For program point L973(line 973) no Hoare annotation was computed. [2022-11-23 03:50:02,263 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 970) no Hoare annotation was computed. [2022-11-23 03:50:02,264 INFO L902 garLoopResultBuilder]: At program point L966-1(lines 966 970) the Hoare annotation is: true [2022-11-23 03:50:02,264 INFO L899 garLoopResultBuilder]: For program point L963(line 963) no Hoare annotation was computed. [2022-11-23 03:50:02,264 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-23 03:50:02,265 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse8)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse2 .cse5 .cse6 .cse1 .cse7) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse7)))) [2022-11-23 03:50:02,271 INFO L899 garLoopResultBuilder]: For program point L568(lines 568 574) no Hoare annotation was computed. [2022-11-23 03:50:02,271 INFO L895 garLoopResultBuilder]: At program point L279(line 279) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse2) (or .cse0 .cse2 (not (= 0 ~systemActive~0))) (or .cse1 .cse3 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-23 03:50:02,272 INFO L895 garLoopResultBuilder]: At program point L279-1(lines 260 284) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= ~waterLevel~0 1)) (.cse13 (= 1 ~systemActive~0)) (.cse15 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (and .cse4 .cse7 .cse14 .cse13 .cse15 .cse9)) (.cse11 (and .cse1 .cse14 .cse13 .cse15 .cse9)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse12 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse13))) (and (or .cse0 (and .cse1 .cse2) .cse3 (and .cse4 .cse2) .cse5) (or .cse0 .cse5 (not (= 0 ~systemActive~0))) (let ((.cse8 (= ~waterLevel~0 1))) (or .cse3 .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse8 .cse9) .cse5 (and .cse1 .cse8 .cse9))) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse6 .cse10 .cse11 .cse12) (or (and .cse7 .cse2 .cse9) .cse3 .cse6 .cse10 .cse11 (and .cse1 .cse2 .cse9) .cse5 .cse12) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse3)))) [2022-11-23 03:50:02,272 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 186) no Hoare annotation was computed. [2022-11-23 03:50:02,272 INFO L895 garLoopResultBuilder]: At program point L308(lines 301 311) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse8)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse2 .cse5 .cse6 .cse1 .cse7) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse7)))) [2022-11-23 03:50:02,273 INFO L899 garLoopResultBuilder]: For program point L531(line 531) no Hoare annotation was computed. [2022-11-23 03:50:02,273 INFO L899 garLoopResultBuilder]: For program point L180-2(lines 176 198) no Hoare annotation was computed. [2022-11-23 03:50:02,274 INFO L895 garLoopResultBuilder]: At program point L552(lines 545 554) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 (<= 1 ~switchedOnBeforeTS~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse6)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse4 .cse2 .cse5 (not (= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 .cse3 (not (= 0 ~systemActive~0)))))) [2022-11-23 03:50:02,274 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 173 199) no Hoare annotation was computed. [2022-11-23 03:50:02,275 INFO L895 garLoopResultBuilder]: At program point L565(line 565) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse15 (<= ~waterLevel~0 1)) (.cse16 (= 1 ~systemActive~0)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0))) (let ((.cse9 (and .cse11 .cse4 .cse15 .cse16 .cse17 .cse6 .cse7)) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse3 .cse4 .cse15 .cse16 .cse17 .cse6 .cse7)) (.cse13 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse16)) (.cse1 (and .cse11 .cse3 .cse4 .cse15 .cse5 .cse7)) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= 0 ~systemActive~0))) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 .cse9 .cse10 (and .cse11 .cse4 .cse5 .cse6 .cse7) .cse12 .cse13) (let ((.cse14 (= ~waterLevel~0 1))) (or (and .cse11 .cse4 .cse14 .cse6 .cse7) .cse8 .cse10 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 .cse4 .cse14 .cse6 .cse7) .cse2)) (or (not (= |old(~waterLevel~0)| 1)) .cse8 .cse9 .cse10 .cse12 .cse13) (or .cse0 .cse8 .cse1 .cse2)))) [2022-11-23 03:50:02,275 INFO L899 garLoopResultBuilder]: For program point L565-1(line 565) no Hoare annotation was computed. [2022-11-23 03:50:02,275 INFO L895 garLoopResultBuilder]: At program point L532(lines 527 534) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (<= |old(~waterLevel~0)| 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (<= |old(~waterLevel~0)| 2)) (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse1) (or .cse1 .cse4 .cse2) (or .cse3 .cse1 .cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-23 03:50:02,275 INFO L899 garLoopResultBuilder]: For program point L268(lines 268 276) no Hoare annotation was computed. [2022-11-23 03:50:02,276 INFO L899 garLoopResultBuilder]: For program point L264(lines 264 281) no Hoare annotation was computed. [2022-11-23 03:50:02,276 INFO L895 garLoopResultBuilder]: At program point L550(line 550) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (< 1 ~waterLevel~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (not (= 0 ~systemActive~0))) (.cse10 (and .cse3 .cse4 .cse13)) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7) (or .cse1 .cse8 .cse2 (and .cse9 .cse4 .cse5 .cse6) .cse7) (or .cse10 .cse11 .cse0 .cse12) (or .cse11 .cse1 .cse8 (and .cse9 .cse4 .cse13) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse10 .cse0 (not (= |old(~waterLevel~0)| 2)) .cse12) (or .cse10 .cse11 .cse0 .cse1)))) [2022-11-23 03:50:02,276 INFO L899 garLoopResultBuilder]: For program point L550-1(line 550) no Hoare annotation was computed. [2022-11-23 03:50:02,276 INFO L895 garLoopResultBuilder]: At program point L133(lines 128 136) the Hoare annotation is: (let ((.cse14 (<= 1 ~pumpRunning~0)) (.cse18 (= 1 ~systemActive~0)) (.cse20 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse16 (<= 1 ~switchedOnBeforeTS~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse13 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse19 (<= ~waterLevel~0 1)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse7 (and .cse17 .cse9 .cse13 .cse19 .cse10)) (.cse8 (not (= 0 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (and .cse9 .cse13 .cse19 .cse18 .cse20 .cse16)) (.cse4 (and .cse14 .cse17 .cse13 .cse19 .cse18 .cse20 .cse16)) (.cse15 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse18)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (< 1 |old(~waterLevel~0)|))) (.cse12 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse5 .cse6 .cse1 .cse7) (or (and .cse9 (= 2 |timeShift_getWaterLevel_#res#1|) .cse10) .cse6 .cse11 .cse12 .cse8) (or .cse6 .cse1 (and .cse9 .cse13 .cse10) (and .cse14 .cse13 .cse10) .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse4 .cse15) (or .cse5 .cse0 .cse1 .cse2 (and .cse9 .cse13 .cse10 .cse16) (and .cse17 .cse13 .cse10 .cse16) .cse4 .cse15) (or .cse1 .cse2 .cse11 (= ~waterLevel~0 1) .cse12)))) [2022-11-23 03:50:02,277 INFO L899 garLoopResultBuilder]: For program point L187-1(lines 187 193) no Hoare annotation was computed. [2022-11-23 03:50:02,277 INFO L899 garLoopResultBuilder]: For program point L567(lines 567 577) no Hoare annotation was computed. [2022-11-23 03:50:02,277 INFO L899 garLoopResultBuilder]: For program point L563(lines 563 580) no Hoare annotation was computed. [2022-11-23 03:50:02,277 INFO L895 garLoopResultBuilder]: At program point L274(line 274) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse8)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse2 .cse5 .cse6 .cse1 .cse7) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse7)))) [2022-11-23 03:50:02,278 INFO L895 garLoopResultBuilder]: At program point L563-1(lines 555 583) the Hoare annotation is: (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= 0 ~systemActive~0)) (.cse3 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse19 (<= ~waterLevel~0 1)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| ~waterLevel~0)) (.cse20 (= 1 ~systemActive~0))) (let ((.cse9 (not (<= |old(~waterLevel~0)| 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse1 (not .cse20)) (.cse11 (and .cse8 .cse2 .cse4 .cse19 .cse20 .cse21 .cse10 .cse6)) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse13 (and .cse3 .cse4 .cse19 .cse20 .cse21 .cse10 .cse6)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (and .cse2 .cse3 .cse4 .cse5 .cse18 .cse6)) (.cse16 (not .cse18))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5 .cse6) .cse7 (and .cse8 .cse4 (= 2 ~waterLevel~0) .cse5 .cse6)) (or .cse9 (and .cse3 .cse4 .cse5 .cse10 .cse6) .cse1 .cse11 .cse12 (and .cse2 .cse4 .cse5 .cse10 .cse6) .cse13 .cse14) (or .cse9 .cse0 .cse15 .cse16) (let ((.cse17 (= ~waterLevel~0 1))) (or (and .cse2 .cse4 .cse17 .cse10 .cse6) .cse1 .cse12 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 .cse4 .cse17 .cse10 .cse6) .cse7)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse11 .cse12 .cse13 .cse14) (or .cse0 .cse15 (not (= |old(~waterLevel~0)| 2)) .cse16)))) [2022-11-23 03:50:02,278 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 173 199) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (< 1 |old(~waterLevel~0)|))) (.cse5 (< 1 ~waterLevel~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (not (= 0 ~systemActive~0))) (.cse10 (and .cse3 .cse4 .cse13)) (.cse11 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6) .cse7) (or .cse1 .cse8 .cse2 (and .cse9 .cse4 .cse5 .cse6) .cse7) (or .cse10 .cse11 .cse0 .cse12) (or .cse11 .cse1 .cse8 (and .cse9 .cse4 .cse13) (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse10 .cse0 (not (= |old(~waterLevel~0)| 2)) .cse12) (or .cse10 .cse11 .cse0 .cse1)))) [2022-11-23 03:50:02,278 INFO L895 garLoopResultBuilder]: At program point L270(line 270) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse8)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse2 .cse5 .cse6 .cse1 .cse7) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse7)))) [2022-11-23 03:50:02,278 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 173 199) no Hoare annotation was computed. [2022-11-23 03:50:02,279 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 531) no Hoare annotation was computed. [2022-11-23 03:50:02,279 INFO L895 garLoopResultBuilder]: At program point L101(lines 96 104) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not .cse8)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and (<= 1 ~pumpRunning~0) .cse3 (<= ~waterLevel~0 1) .cse8 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4)) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (= 0 ~systemActive~0))) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 2))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse2) (or (and .cse3 (= |old(~waterLevel~0)| ~waterLevel~0) .cse4) .cse2 .cse5 .cse6 .cse1 .cse7) (or .cse2 .cse5 (not (< 1 |old(~waterLevel~0)|)) (and .cse3 (= ~waterLevel~0 1) .cse4) .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 .cse6 .cse7)))) [2022-11-23 03:50:02,279 INFO L895 garLoopResultBuilder]: At program point L415(lines 410 417) the Hoare annotation is: (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2) (and .cse3 (= 2 ~waterLevel~0) .cse0 .cse1) (and .cse3 .cse0 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-11-23 03:50:02,279 INFO L895 garLoopResultBuilder]: At program point L477(lines 430 479) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse6 .cse2) (and .cse4 .cse1 .cse6 .cse2) (and .cse0 .cse5 .cse6 .cse2))) [2022-11-23 03:50:02,280 INFO L899 garLoopResultBuilder]: For program point L440(lines 440 446) no Hoare annotation was computed. [2022-11-23 03:50:02,280 INFO L899 garLoopResultBuilder]: For program point L440-1(lines 440 446) no Hoare annotation was computed. [2022-11-23 03:50:02,280 INFO L895 garLoopResultBuilder]: At program point L407(lines 395 409) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2022-11-23 03:50:02,280 INFO L902 garLoopResultBuilder]: At program point L1043(lines 1024 1046) the Hoare annotation is: true [2022-11-23 03:50:02,280 INFO L895 garLoopResultBuilder]: At program point L1010(lines 1006 1012) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:50:02,280 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2022-11-23 03:50:02,281 INFO L899 garLoopResultBuilder]: For program point L399(lines 399 405) no Hoare annotation was computed. [2022-11-23 03:50:02,281 INFO L899 garLoopResultBuilder]: For program point L399-1(lines 399 405) no Hoare annotation was computed. [2022-11-23 03:50:02,281 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-23 03:50:02,281 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-23 03:50:02,282 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-23 03:50:02,282 INFO L895 garLoopResultBuilder]: At program point L507(lines 503 509) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:50:02,282 INFO L902 garLoopResultBuilder]: At program point L483(lines 420 487) the Hoare annotation is: true [2022-11-23 03:50:02,282 INFO L899 garLoopResultBuilder]: For program point L450(lines 450 456) no Hoare annotation was computed. [2022-11-23 03:50:02,282 INFO L899 garLoopResultBuilder]: For program point L450-1(lines 450 456) no Hoare annotation was computed. [2022-11-23 03:50:02,282 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 03:50:02,283 INFO L895 garLoopResultBuilder]: At program point L442(line 442) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse5 .cse6 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse6 .cse2) (and .cse4 .cse1 .cse6 .cse2) (and .cse0 .cse5 .cse6 .cse2))) [2022-11-23 03:50:02,283 INFO L895 garLoopResultBuilder]: At program point L401(line 401) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)))) [2022-11-23 03:50:02,285 INFO L895 garLoopResultBuilder]: At program point L480(lines 429 481) the Hoare annotation is: false [2022-11-23 03:50:02,285 INFO L895 garLoopResultBuilder]: At program point L542(lines 537 544) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:50:02,285 INFO L902 garLoopResultBuilder]: At program point L1021(lines 1013 1023) the Hoare annotation is: true [2022-11-23 03:50:02,285 INFO L899 garLoopResultBuilder]: For program point L468(lines 468 474) no Hoare annotation was computed. [2022-11-23 03:50:02,286 INFO L895 garLoopResultBuilder]: At program point L468-2(lines 460 475) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-11-23 03:50:02,286 INFO L899 garLoopResultBuilder]: For program point L431(lines 430 479) no Hoare annotation was computed. [2022-11-23 03:50:02,286 INFO L899 garLoopResultBuilder]: For program point L460(lines 460 475) no Hoare annotation was computed. [2022-11-23 03:50:02,286 INFO L895 garLoopResultBuilder]: At program point L522(lines 517 525) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:50:02,286 INFO L899 garLoopResultBuilder]: For program point L1034(lines 1034 1041) no Hoare annotation was computed. [2022-11-23 03:50:02,286 INFO L899 garLoopResultBuilder]: For program point L1034-2(lines 1034 1041) no Hoare annotation was computed. [2022-11-23 03:50:02,287 INFO L895 garLoopResultBuilder]: At program point L452(line 452) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2022-11-23 03:50:02,287 INFO L895 garLoopResultBuilder]: At program point L514(lines 510 516) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-23 03:50:02,288 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 208 232) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,288 INFO L895 garLoopResultBuilder]: At program point L372(lines 357 375) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and .cse1 .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) (and .cse1 .cse2 (= 2 ~waterLevel~0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-23 03:50:02,288 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 370) no Hoare annotation was computed. [2022-11-23 03:50:02,288 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-23 03:50:02,288 INFO L899 garLoopResultBuilder]: For program point L366-2(lines 366 370) no Hoare annotation was computed. [2022-11-23 03:50:02,289 INFO L895 garLoopResultBuilder]: At program point L290(lines 285 292) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-23 03:50:02,289 INFO L895 garLoopResultBuilder]: At program point L222(line 222) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) .cse4)) (.cse1 (not .cse4)) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (or .cse0 .cse2 .cse1 (not (= 2 ~waterLevel~0))) (or .cse0 .cse2 .cse1 .cse3) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) .cse3 (not (<= 1 ~switchedOnBeforeTS~0)))))) [2022-11-23 03:50:02,289 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 208 232) no Hoare annotation was computed. [2022-11-23 03:50:02,289 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 224) no Hoare annotation was computed. [2022-11-23 03:50:02,289 INFO L899 garLoopResultBuilder]: For program point L212(lines 212 229) no Hoare annotation was computed. [2022-11-23 03:50:02,290 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (<= ~waterLevel~0 1))) (and (let ((.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2 (not .cse3)) (not (<= ~waterLevel~0 2)) (and .cse1 (= 2 ~waterLevel~0) .cse3))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not .cse2) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-23 03:50:02,290 INFO L895 garLoopResultBuilder]: At program point L227(line 227) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,290 INFO L899 garLoopResultBuilder]: For program point L227-1(lines 208 232) no Hoare annotation was computed. [2022-11-23 03:50:02,290 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-23 03:50:02,290 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-23 03:50:02,291 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse5 .cse4 .cse0 .cse3) (or .cse4 .cse3 (not (<= |old(~waterLevel~0)| 2)) (not (= 0 ~systemActive~0))) (or .cse5 .cse0 .cse1 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-23 03:50:02,291 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 234 258) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,292 INFO L895 garLoopResultBuilder]: At program point L248(line 248) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,293 INFO L895 garLoopResultBuilder]: At program point L244(line 244) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,293 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 250) no Hoare annotation was computed. [2022-11-23 03:50:02,294 INFO L899 garLoopResultBuilder]: For program point L238(lines 238 255) no Hoare annotation was computed. [2022-11-23 03:50:02,294 INFO L895 garLoopResultBuilder]: At program point L391(lines 376 394) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,294 INFO L899 garLoopResultBuilder]: For program point L385(lines 385 389) no Hoare annotation was computed. [2022-11-23 03:50:02,295 INFO L899 garLoopResultBuilder]: For program point L385-2(lines 385 389) no Hoare annotation was computed. [2022-11-23 03:50:02,295 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 234 258) no Hoare annotation was computed. [2022-11-23 03:50:02,296 INFO L895 garLoopResultBuilder]: At program point L253(line 253) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-23 03:50:02,296 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-23 03:50:02,296 INFO L899 garLoopResultBuilder]: For program point L253-1(lines 234 258) no Hoare annotation was computed. [2022-11-23 03:50:02,296 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 312 320) no Hoare annotation was computed. [2022-11-23 03:50:02,296 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 312 320) the Hoare annotation is: true [2022-11-23 03:50:02,297 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 312 320) no Hoare annotation was computed. [2022-11-23 03:50:02,303 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 03:50:02,305 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 03:50:02,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 03:50:02 BoogieIcfgContainer [2022-11-23 03:50:02,389 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 03:50:02,390 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 03:50:02,390 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 03:50:02,390 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 03:50:02,391 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 03:49:39" (3/4) ... [2022-11-23 03:50:02,394 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 03:50:02,400 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-23 03:50:02,403 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 03:50:02,403 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 03:50:02,403 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 03:50:02,403 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 03:50:02,404 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 03:50:02,404 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 03:50:02,404 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-23 03:50:02,404 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-23 03:50:02,413 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-23 03:50:02,415 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-23 03:50:02,416 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-23 03:50:02,416 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 03:50:02,417 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 03:50:02,440 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) [2022-11-23 03:50:02,441 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-23 03:50:02,441 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) && (((((((!(\old(waterLevel) <= 1) || ((((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 0 == systemActive) && tmp == waterLevel)) || !(0 == systemActive))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 0 == systemActive) && tmp == waterLevel)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) [2022-11-23 03:50:02,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) [2022-11-23 03:50:02,442 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-23 03:50:02,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && waterLevel <= 1) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-11-23 03:50:02,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-23 03:50:02,443 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-23 03:50:02,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-23 03:50:02,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel <= 1) && !(\result == 0))) || !(waterLevel <= 2)) || ((pumpRunning == 0 && 2 == waterLevel) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-23 03:50:02,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-23 03:50:02,444 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-23 03:50:02,445 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-23 03:50:02,473 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/witness.graphml [2022-11-23 03:50:02,473 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 03:50:02,474 INFO L158 Benchmark]: Toolchain (without parser) took 23994.25ms. Allocated memory was 213.9MB in the beginning and 373.3MB in the end (delta: 159.4MB). Free memory was 183.9MB in the beginning and 246.2MB in the end (delta: -62.3MB). Peak memory consumption was 96.2MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,474 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 130.0MB. Free memory was 98.4MB in the beginning and 98.2MB in the end (delta: 159.4kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 03:50:02,475 INFO L158 Benchmark]: CACSL2BoogieTranslator took 617.53ms. Allocated memory is still 213.9MB. Free memory was 183.9MB in the beginning and 171.3MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,475 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.33ms. Allocated memory is still 213.9MB. Free memory was 171.3MB in the beginning and 168.1MB in the end (delta: 3.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,475 INFO L158 Benchmark]: Boogie Preprocessor took 30.33ms. Allocated memory is still 213.9MB. Free memory was 168.1MB in the beginning and 167.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,476 INFO L158 Benchmark]: RCFGBuilder took 575.23ms. Allocated memory is still 213.9MB. Free memory was 167.1MB in the beginning and 148.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,476 INFO L158 Benchmark]: TraceAbstraction took 22608.06ms. Allocated memory was 213.9MB in the beginning and 373.3MB in the end (delta: 159.4MB). Free memory was 148.2MB in the beginning and 252.5MB in the end (delta: -104.2MB). Peak memory consumption was 185.1MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,476 INFO L158 Benchmark]: Witness Printer took 83.72ms. Allocated memory is still 373.3MB. Free memory was 252.5MB in the beginning and 246.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 03:50:02,478 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 130.0MB. Free memory was 98.4MB in the beginning and 98.2MB in the end (delta: 159.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 617.53ms. Allocated memory is still 213.9MB. Free memory was 183.9MB in the beginning and 171.3MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.33ms. Allocated memory is still 213.9MB. Free memory was 171.3MB in the beginning and 168.1MB in the end (delta: 3.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.33ms. Allocated memory is still 213.9MB. Free memory was 168.1MB in the beginning and 167.1MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 575.23ms. Allocated memory is still 213.9MB. Free memory was 167.1MB in the beginning and 148.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 22608.06ms. Allocated memory was 213.9MB in the beginning and 373.3MB in the end (delta: 159.4MB). Free memory was 148.2MB in the beginning and 252.5MB in the end (delta: -104.2MB). Peak memory consumption was 185.1MB. Max. memory is 16.1GB. * Witness Printer took 83.72ms. Allocated memory is still 373.3MB. Free memory was 252.5MB in the beginning and 246.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 531]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 110 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 22.4s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3180 SdHoareTripleChecker+Valid, 3.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3123 mSDsluCounter, 5672 SdHoareTripleChecker+Invalid, 3.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4239 mSDsCounter, 1106 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4230 IncrementalHoareTripleChecker+Invalid, 5336 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1106 mSolverCounterUnsat, 1433 mSDtfsCounter, 4230 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 948 GetRequests, 753 SyntacticMatches, 10 SemanticMatches, 185 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1809 ImplicationChecksByTransitivity, 2.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1190occurred in iteration=8, InterpolantAutomatonStates: 168, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 11 MinimizatonAttempts, 551 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 52 LocationsWithAnnotation, 3001 PreInvPairs, 3360 NumberOfFragments, 3552 HoareAnnotationTreeSize, 3001 FomulaSimplifications, 6245 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 52 FomulaSimplificationsInter, 27296 FormulaSimplificationTreeSizeReductionInter, 9.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 1071 NumberOfCodeBlocks, 1071 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1358 ConstructedInterpolants, 0 QuantifiedInterpolants, 2686 SizeOfPredicates, 6 NumberOfNonLiveVariables, 959 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 670/775 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 420]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && waterLevel <= 1) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && waterLevel <= 1) && \old(waterLevel) == waterLevel))) && ((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && waterLevel == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2))) && ((((((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) || !(\old(waterLevel) <= 2)) || ((((1 <= pumpRunning && waterLevel == \result) && 2 == waterLevel) && \old(waterLevel) == waterLevel) && tmp == waterLevel)) && (((((((!(\old(waterLevel) <= 1) || ((((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 == systemActive)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 0 == systemActive) && tmp == waterLevel)) || !(0 == systemActive))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || (((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS) && tmp == waterLevel)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 0 == systemActive) && tmp == waterLevel)) || !(\old(waterLevel) == 2)) || !(0 == systemActive)) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 537]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && (((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 410]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || ((((1 <= pumpRunning && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 510]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 395]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 1024]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 429]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1006]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1013]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 96]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || pumpRunning == 0) || !(1 == systemActive)) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) == 2))) && ((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive))) && (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0 && 2 == waterLevel) && splverifierCounter == 0) && 0 == systemActive) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel <= 1) && splverifierCounter == 0) && 0 == systemActive)) || (((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel <= 1) && !(\result == 0))) || !(waterLevel <= 2)) || ((pumpRunning == 0 && 2 == waterLevel) && \result == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 == waterLevel)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 517]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2022-11-23 03:50:02,519 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_899e6eb3-770e-4b43-b1a8-63b581f65ddf/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE