./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 15:33:59,543 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 15:33:59,546 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 15:33:59,586 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 15:33:59,586 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 15:33:59,590 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 15:33:59,593 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 15:33:59,596 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 15:33:59,599 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 15:33:59,605 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 15:33:59,606 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 15:33:59,608 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 15:33:59,609 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 15:33:59,612 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 15:33:59,613 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 15:33:59,617 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 15:33:59,619 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 15:33:59,620 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 15:33:59,621 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 15:33:59,628 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 15:33:59,630 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 15:33:59,632 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 15:33:59,634 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 15:33:59,635 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 15:33:59,645 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 15:33:59,645 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 15:33:59,645 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 15:33:59,647 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 15:33:59,648 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 15:33:59,649 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 15:33:59,649 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 15:33:59,650 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 15:33:59,652 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 15:33:59,653 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 15:33:59,654 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 15:33:59,655 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 15:33:59,655 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 15:33:59,656 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 15:33:59,656 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 15:33:59,658 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 15:33:59,659 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 15:33:59,660 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 15:33:59,699 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 15:33:59,699 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 15:33:59,700 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 15:33:59,700 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 15:33:59,701 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 15:33:59,701 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 15:33:59,702 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 15:33:59,702 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 15:33:59,703 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 15:33:59,703 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 15:33:59,704 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 15:33:59,704 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 15:33:59,705 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 15:33:59,705 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 15:33:59,705 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 15:33:59,705 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 15:33:59,706 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 15:33:59,706 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 15:33:59,706 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 15:33:59,706 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 15:33:59,706 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 15:33:59,707 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 15:33:59,707 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 15:33:59,707 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 15:33:59,707 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 15:33:59,708 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 15:33:59,708 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 15:33:59,708 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 15:33:59,708 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 15:33:59,709 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 15:33:59,709 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 15:33:59,709 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 15:33:59,710 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 15:33:59,710 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 15:33:59,710 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a5df7e7a530538a677becf014bfb990c6b0570c5e1058d85d7e78cec25f53253 [2022-11-25 15:33:59,963 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 15:33:59,986 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 15:33:59,988 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 15:33:59,990 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 15:33:59,990 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 15:33:59,992 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-11-25 15:34:02,970 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 15:34:03,237 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 15:34:03,237 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c [2022-11-25 15:34:03,250 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/data/625168cbf/90988b2440d243e8ade40843ebb9a5a5/FLAGe82d0ee7f [2022-11-25 15:34:03,264 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/data/625168cbf/90988b2440d243e8ade40843ebb9a5a5 [2022-11-25 15:34:03,267 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 15:34:03,269 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 15:34:03,270 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 15:34:03,270 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 15:34:03,274 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 15:34:03,282 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,283 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@42757d08 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03, skipping insertion in model container [2022-11-25 15:34:03,284 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,291 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 15:34:03,354 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 15:34:03,651 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-11-25 15:34:03,655 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 15:34:03,667 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 15:34:03,769 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/sv-benchmarks/c/product-lines/minepump_spec2_product58.cil.c[19170,19183] [2022-11-25 15:34:03,769 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 15:34:03,794 INFO L208 MainTranslator]: Completed translation [2022-11-25 15:34:03,795 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03 WrapperNode [2022-11-25 15:34:03,795 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 15:34:03,796 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 15:34:03,796 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 15:34:03,797 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 15:34:03,804 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,829 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,874 INFO L138 Inliner]: procedures = 58, calls = 102, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 223 [2022-11-25 15:34:03,874 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 15:34:03,875 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 15:34:03,875 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 15:34:03,876 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 15:34:03,885 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,886 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,888 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,888 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,893 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,909 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,911 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,912 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,915 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 15:34:03,916 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 15:34:03,916 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 15:34:03,916 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 15:34:03,917 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (1/1) ... [2022-11-25 15:34:03,923 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 15:34:03,934 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:34:03,948 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 15:34:03,975 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 15:34:03,994 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 15:34:03,994 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 15:34:03,995 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 15:34:03,996 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 15:34:03,996 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 15:34:03,996 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 15:34:04,000 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 15:34:04,000 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-25 15:34:04,001 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-25 15:34:04,001 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:34:04,001 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:34:04,001 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 15:34:04,001 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 15:34:04,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 15:34:04,002 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 15:34:04,002 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 15:34:04,002 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 15:34:04,003 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 15:34:04,082 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 15:34:04,084 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 15:34:04,473 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 15:34:04,486 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 15:34:04,487 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 15:34:04,489 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:34:04 BoogieIcfgContainer [2022-11-25 15:34:04,489 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 15:34:04,492 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 15:34:04,492 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 15:34:04,503 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 15:34:04,503 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 03:34:03" (1/3) ... [2022-11-25 15:34:04,504 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@49aaec9d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 03:34:04, skipping insertion in model container [2022-11-25 15:34:04,505 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:34:03" (2/3) ... [2022-11-25 15:34:04,507 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@49aaec9d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 03:34:04, skipping insertion in model container [2022-11-25 15:34:04,507 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:34:04" (3/3) ... [2022-11-25 15:34:04,509 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product58.cil.c [2022-11-25 15:34:04,530 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 15:34:04,530 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 15:34:04,584 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 15:34:04,592 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@72787f2f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 15:34:04,592 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 15:34:04,596 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-25 15:34:04,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 15:34:04,605 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:04,606 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:04,607 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:04,612 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:04,613 INFO L85 PathProgramCache]: Analyzing trace with hash 1936540556, now seen corresponding path program 1 times [2022-11-25 15:34:04,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:04,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1526352267] [2022-11-25 15:34:04,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:04,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:04,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:04,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 15:34:04,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:04,809 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:04,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:04,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1526352267] [2022-11-25 15:34:04,810 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1526352267] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:04,810 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:04,811 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 15:34:04,812 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1999228237] [2022-11-25 15:34:04,813 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:04,818 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 15:34:04,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:04,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 15:34:04,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 15:34:04,852 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:04,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:04,896 INFO L93 Difference]: Finished difference Result 179 states and 244 transitions. [2022-11-25 15:34:04,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 15:34:04,898 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-25 15:34:04,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:04,930 INFO L225 Difference]: With dead ends: 179 [2022-11-25 15:34:04,931 INFO L226 Difference]: Without dead ends: 85 [2022-11-25 15:34:04,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 15:34:04,945 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:04,947 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:34:04,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-25 15:34:04,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-25 15:34:05,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-25 15:34:05,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-25 15:34:05,006 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-11-25 15:34:05,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:05,007 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-25 15:34:05,007 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,007 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-25 15:34:05,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 15:34:05,010 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:05,010 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:05,010 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 15:34:05,011 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:05,011 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:05,012 INFO L85 PathProgramCache]: Analyzing trace with hash -433728910, now seen corresponding path program 1 times [2022-11-25 15:34:05,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:05,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [876482331] [2022-11-25 15:34:05,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:05,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:05,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-25 15:34:05,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:05,172 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:05,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [876482331] [2022-11-25 15:34:05,173 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [876482331] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:05,173 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:05,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 15:34:05,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223718340] [2022-11-25 15:34:05,173 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:05,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 15:34:05,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:05,176 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 15:34:05,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:34:05,176 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:05,196 INFO L93 Difference]: Finished difference Result 134 states and 174 transitions. [2022-11-25 15:34:05,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 15:34:05,197 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-25 15:34:05,197 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:05,198 INFO L225 Difference]: With dead ends: 134 [2022-11-25 15:34:05,199 INFO L226 Difference]: Without dead ends: 76 [2022-11-25 15:34:05,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:34:05,201 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:05,201 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:34:05,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-25 15:34:05,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-25 15:34:05,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-25 15:34:05,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-11-25 15:34:05,221 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-11-25 15:34:05,222 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:05,222 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-11-25 15:34:05,222 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,222 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-11-25 15:34:05,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-25 15:34:05,224 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:05,224 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:05,224 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 15:34:05,224 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:05,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:05,225 INFO L85 PathProgramCache]: Analyzing trace with hash -960870689, now seen corresponding path program 1 times [2022-11-25 15:34:05,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:05,225 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [130559952] [2022-11-25 15:34:05,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:05,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:05,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:05,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,392 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:05,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:05,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [130559952] [2022-11-25 15:34:05,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [130559952] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:05,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:05,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:34:05,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2137548683] [2022-11-25 15:34:05,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:05,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:34:05,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:05,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:34:05,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:34:05,396 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:05,466 INFO L93 Difference]: Finished difference Result 144 states and 189 transitions. [2022-11-25 15:34:05,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 15:34:05,467 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-25 15:34:05,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:05,468 INFO L225 Difference]: With dead ends: 144 [2022-11-25 15:34:05,468 INFO L226 Difference]: Without dead ends: 76 [2022-11-25 15:34:05,469 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:34:05,471 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 125 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:05,471 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 239 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:34:05,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-25 15:34:05,488 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-25 15:34:05,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-25 15:34:05,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-11-25 15:34:05,490 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2022-11-25 15:34:05,490 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:05,491 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-11-25 15:34:05,491 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,491 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-11-25 15:34:05,493 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-11-25 15:34:05,493 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:05,493 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:05,493 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 15:34:05,494 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:05,494 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:05,495 INFO L85 PathProgramCache]: Analyzing trace with hash 1051649323, now seen corresponding path program 1 times [2022-11-25 15:34:05,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:05,495 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035976969] [2022-11-25 15:34:05,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:05,496 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:05,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-25 15:34:05,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,668 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:05,668 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:05,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035976969] [2022-11-25 15:34:05,669 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035976969] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:05,669 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:05,669 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 15:34:05,669 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1674040628] [2022-11-25 15:34:05,670 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:05,670 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 15:34:05,670 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:05,671 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 15:34:05,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:34:05,672 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:05,744 INFO L93 Difference]: Finished difference Result 189 states and 247 transitions. [2022-11-25 15:34:05,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 15:34:05,745 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 39 [2022-11-25 15:34:05,746 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:05,747 INFO L225 Difference]: With dead ends: 189 [2022-11-25 15:34:05,747 INFO L226 Difference]: Without dead ends: 121 [2022-11-25 15:34:05,748 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:34:05,750 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 60 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 173 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:05,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 173 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:34:05,756 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-11-25 15:34:05,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-11-25 15:34:05,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 93 states have (on average 1.3010752688172043) internal successors, (121), 101 states have internal predecessors, (121), 13 states have call successors, (13), 12 states have call predecessors, (13), 12 states have return successors, (17), 13 states have call predecessors, (17), 13 states have call successors, (17) [2022-11-25 15:34:05,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 151 transitions. [2022-11-25 15:34:05,786 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 151 transitions. Word has length 39 [2022-11-25 15:34:05,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:05,786 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 151 transitions. [2022-11-25 15:34:05,787 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.0) internal successors, (36), 3 states have internal predecessors, (36), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:34:05,787 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 151 transitions. [2022-11-25 15:34:05,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 15:34:05,793 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:05,794 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:05,794 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 15:34:05,794 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:05,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:05,795 INFO L85 PathProgramCache]: Analyzing trace with hash 1776043399, now seen corresponding path program 1 times [2022-11-25 15:34:05,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:05,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728132099] [2022-11-25 15:34:05,796 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:05,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:05,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:05,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:05,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-25 15:34:05,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:05,963 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:05,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:05,963 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728132099] [2022-11-25 15:34:05,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728132099] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:05,964 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:05,964 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:34:05,964 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1548092708] [2022-11-25 15:34:05,965 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:05,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:34:05,965 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:05,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:34:05,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:34:05,967 INFO L87 Difference]: Start difference. First operand 119 states and 151 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:34:06,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:06,139 INFO L93 Difference]: Finished difference Result 273 states and 359 transitions. [2022-11-25 15:34:06,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 15:34:06,140 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-25 15:34:06,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:06,145 INFO L225 Difference]: With dead ends: 273 [2022-11-25 15:34:06,145 INFO L226 Difference]: Without dead ends: 162 [2022-11-25 15:34:06,146 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 15:34:06,148 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 92 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:06,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 289 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:34:06,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162 states. [2022-11-25 15:34:06,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162 to 145. [2022-11-25 15:34:06,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2982456140350878) internal successors, (148), 122 states have internal predecessors, (148), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-11-25 15:34:06,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 185 transitions. [2022-11-25 15:34:06,191 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 185 transitions. Word has length 47 [2022-11-25 15:34:06,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:06,191 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 185 transitions. [2022-11-25 15:34:06,191 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:34:06,192 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 185 transitions. [2022-11-25 15:34:06,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-25 15:34:06,195 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:06,195 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:06,195 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 15:34:06,196 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:06,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:06,196 INFO L85 PathProgramCache]: Analyzing trace with hash 1353341573, now seen corresponding path program 1 times [2022-11-25 15:34:06,196 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:06,197 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [166387976] [2022-11-25 15:34:06,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:06,197 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:06,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:06,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:06,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-25 15:34:06,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:34:06,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:06,352 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [166387976] [2022-11-25 15:34:06,352 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [166387976] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:06,353 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:06,353 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 15:34:06,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [329817436] [2022-11-25 15:34:06,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:06,354 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 15:34:06,355 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:06,356 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 15:34:06,356 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 15:34:06,356 INFO L87 Difference]: Start difference. First operand 145 states and 185 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-25 15:34:06,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:06,628 INFO L93 Difference]: Finished difference Result 294 states and 376 transitions. [2022-11-25 15:34:06,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 15:34:06,629 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2022-11-25 15:34:06,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:06,636 INFO L225 Difference]: With dead ends: 294 [2022-11-25 15:34:06,636 INFO L226 Difference]: Without dead ends: 157 [2022-11-25 15:34:06,637 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-25 15:34:06,643 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 116 mSDsluCounter, 297 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 399 SdHoareTripleChecker+Invalid, 184 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:06,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [120 Valid, 399 Invalid, 184 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 15:34:06,651 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-25 15:34:06,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 143. [2022-11-25 15:34:06,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 112 states have (on average 1.2678571428571428) internal successors, (142), 120 states have internal predecessors, (142), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-11-25 15:34:06,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 179 transitions. [2022-11-25 15:34:06,686 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 179 transitions. Word has length 47 [2022-11-25 15:34:06,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:06,688 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 179 transitions. [2022-11-25 15:34:06,688 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-25 15:34:06,688 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 179 transitions. [2022-11-25 15:34:06,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 15:34:06,691 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:06,691 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:06,692 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 15:34:06,692 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:06,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:06,693 INFO L85 PathProgramCache]: Analyzing trace with hash -1275147008, now seen corresponding path program 1 times [2022-11-25 15:34:06,693 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:06,693 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473889076] [2022-11-25 15:34:06,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:06,693 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:06,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:06,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,868 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:06,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 15:34:06,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:06,876 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:34:06,876 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:06,876 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473889076] [2022-11-25 15:34:06,876 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473889076] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:06,877 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:06,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 15:34:06,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [467498568] [2022-11-25 15:34:06,877 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:06,879 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 15:34:06,879 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:06,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 15:34:06,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 15:34:06,880 INFO L87 Difference]: Start difference. First operand 143 states and 179 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:34:07,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:07,052 INFO L93 Difference]: Finished difference Result 288 states and 371 transitions. [2022-11-25 15:34:07,053 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 15:34:07,054 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 53 [2022-11-25 15:34:07,054 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:07,055 INFO L225 Difference]: With dead ends: 288 [2022-11-25 15:34:07,055 INFO L226 Difference]: Without dead ends: 153 [2022-11-25 15:34:07,056 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 15:34:07,057 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 66 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 146 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:07,057 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 369 Invalid, 146 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:34:07,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-11-25 15:34:07,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 146. [2022-11-25 15:34:07,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 115 states have (on average 1.2608695652173914) internal successors, (145), 123 states have internal predecessors, (145), 15 states have call successors, (15), 12 states have call predecessors, (15), 15 states have return successors, (22), 16 states have call predecessors, (22), 15 states have call successors, (22) [2022-11-25 15:34:07,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 182 transitions. [2022-11-25 15:34:07,075 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 182 transitions. Word has length 53 [2022-11-25 15:34:07,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:07,075 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 182 transitions. [2022-11-25 15:34:07,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:34:07,076 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 182 transitions. [2022-11-25 15:34:07,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 15:34:07,077 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:07,077 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:07,077 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 15:34:07,077 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:07,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:07,078 INFO L85 PathProgramCache]: Analyzing trace with hash 2034284420, now seen corresponding path program 1 times [2022-11-25 15:34:07,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:07,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [992087054] [2022-11-25 15:34:07,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:07,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:07,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:07,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:07,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 15:34:07,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,170 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:34:07,170 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:07,170 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [992087054] [2022-11-25 15:34:07,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [992087054] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:07,171 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:07,171 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:34:07,171 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2006417634] [2022-11-25 15:34:07,171 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:07,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:34:07,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:07,173 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:34:07,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:34:07,173 INFO L87 Difference]: Start difference. First operand 146 states and 182 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 15:34:07,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:07,445 INFO L93 Difference]: Finished difference Result 404 states and 525 transitions. [2022-11-25 15:34:07,446 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 15:34:07,446 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 53 [2022-11-25 15:34:07,446 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:07,450 INFO L225 Difference]: With dead ends: 404 [2022-11-25 15:34:07,450 INFO L226 Difference]: Without dead ends: 266 [2022-11-25 15:34:07,451 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:34:07,453 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 191 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 197 SdHoareTripleChecker+Valid, 310 SdHoareTripleChecker+Invalid, 209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:07,453 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [197 Valid, 310 Invalid, 209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 15:34:07,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 266 states. [2022-11-25 15:34:07,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 266 to 264. [2022-11-25 15:34:07,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 204 states have (on average 1.2352941176470589) internal successors, (252), 216 states have internal predecessors, (252), 30 states have call successors, (30), 28 states have call predecessors, (30), 29 states have return successors, (49), 30 states have call predecessors, (49), 30 states have call successors, (49) [2022-11-25 15:34:07,498 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 331 transitions. [2022-11-25 15:34:07,498 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 331 transitions. Word has length 53 [2022-11-25 15:34:07,499 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:07,499 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 331 transitions. [2022-11-25 15:34:07,499 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 15:34:07,499 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 331 transitions. [2022-11-25 15:34:07,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-25 15:34:07,500 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:07,500 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:07,500 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 15:34:07,500 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:07,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:07,501 INFO L85 PathProgramCache]: Analyzing trace with hash 1253719722, now seen corresponding path program 1 times [2022-11-25 15:34:07,501 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:07,501 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37166854] [2022-11-25 15:34:07,501 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:07,502 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:07,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:34:07,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 15:34:07,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:07,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-11-25 15:34:07,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:07,756 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:34:07,756 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:07,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37166854] [2022-11-25 15:34:07,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37166854] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:07,757 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:07,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-25 15:34:07,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1111632300] [2022-11-25 15:34:07,757 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:07,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 15:34:07,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:07,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 15:34:07,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-11-25 15:34:07,760 INFO L87 Difference]: Start difference. First operand 264 states and 331 transitions. Second operand has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:34:08,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:08,521 INFO L93 Difference]: Finished difference Result 874 states and 1153 transitions. [2022-11-25 15:34:08,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-11-25 15:34:08,522 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-25 15:34:08,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:08,527 INFO L225 Difference]: With dead ends: 874 [2022-11-25 15:34:08,527 INFO L226 Difference]: Without dead ends: 618 [2022-11-25 15:34:08,529 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=210, Invalid=720, Unknown=0, NotChecked=0, Total=930 [2022-11-25 15:34:08,530 INFO L413 NwaCegarLoop]: 75 mSDtfsCounter, 338 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 592 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 345 SdHoareTripleChecker+Valid, 566 SdHoareTripleChecker+Invalid, 712 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 592 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:08,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [345 Valid, 566 Invalid, 712 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 592 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 15:34:08,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 618 states. [2022-11-25 15:34:08,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 618 to 569. [2022-11-25 15:34:08,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 569 states, 435 states have (on average 1.2022988505747128) internal successors, (523), 465 states have internal predecessors, (523), 69 states have call successors, (69), 54 states have call predecessors, (69), 64 states have return successors, (132), 71 states have call predecessors, (132), 69 states have call successors, (132) [2022-11-25 15:34:08,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 569 states to 569 states and 724 transitions. [2022-11-25 15:34:08,611 INFO L78 Accepts]: Start accepts. Automaton has 569 states and 724 transitions. Word has length 57 [2022-11-25 15:34:08,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:08,612 INFO L495 AbstractCegarLoop]: Abstraction has 569 states and 724 transitions. [2022-11-25 15:34:08,612 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.181818181818182) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:34:08,612 INFO L276 IsEmpty]: Start isEmpty. Operand 569 states and 724 transitions. [2022-11-25 15:34:08,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-11-25 15:34:08,615 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:08,616 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:08,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 15:34:08,616 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:08,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:08,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1972813179, now seen corresponding path program 1 times [2022-11-25 15:34:08,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:08,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1202653273] [2022-11-25 15:34:08,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:08,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:08,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:34:08,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:08,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:34:08,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:08,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 15:34:08,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 15:34:08,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,751 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 15:34:08,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:08,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-25 15:34:08,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,759 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 17 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-25 15:34:08,759 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:08,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1202653273] [2022-11-25 15:34:08,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1202653273] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:34:08,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1917910520] [2022-11-25 15:34:08,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:08,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:34:08,760 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:34:08,764 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:34:08,777 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 15:34:08,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:08,883 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 15:34:08,890 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:34:09,044 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:34:09,045 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 15:34:09,045 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1917910520] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:09,045 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 15:34:09,045 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-25 15:34:09,046 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1500442670] [2022-11-25 15:34:09,046 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:09,046 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 15:34:09,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:09,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 15:34:09,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:34:09,047 INFO L87 Difference]: Start difference. First operand 569 states and 724 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-25 15:34:09,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:09,157 INFO L93 Difference]: Finished difference Result 888 states and 1165 transitions. [2022-11-25 15:34:09,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 15:34:09,158 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 100 [2022-11-25 15:34:09,158 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:09,163 INFO L225 Difference]: With dead ends: 888 [2022-11-25 15:34:09,163 INFO L226 Difference]: Without dead ends: 886 [2022-11-25 15:34:09,164 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:34:09,165 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 45 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:09,165 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 191 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:34:09,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 886 states. [2022-11-25 15:34:09,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 886 to 802. [2022-11-25 15:34:09,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 802 states, 613 states have (on average 1.2185970636215335) internal successors, (747), 658 states have internal predecessors, (747), 100 states have call successors, (100), 76 states have call predecessors, (100), 88 states have return successors, (220), 94 states have call predecessors, (220), 100 states have call successors, (220) [2022-11-25 15:34:09,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 802 states to 802 states and 1067 transitions. [2022-11-25 15:34:09,273 INFO L78 Accepts]: Start accepts. Automaton has 802 states and 1067 transitions. Word has length 100 [2022-11-25 15:34:09,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:09,273 INFO L495 AbstractCegarLoop]: Abstraction has 802 states and 1067 transitions. [2022-11-25 15:34:09,274 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-25 15:34:09,274 INFO L276 IsEmpty]: Start isEmpty. Operand 802 states and 1067 transitions. [2022-11-25 15:34:09,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 15:34:09,279 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:09,279 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:09,299 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 15:34:09,480 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-25 15:34:09,480 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:09,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:09,481 INFO L85 PathProgramCache]: Analyzing trace with hash -1774926035, now seen corresponding path program 1 times [2022-11-25 15:34:09,481 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:09,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128126386] [2022-11-25 15:34:09,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:09,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:09,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:34:09,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:09,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:34:09,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:09,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 15:34:09,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 15:34:09,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 15:34:09,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 15:34:09,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,797 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:09,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:34:09,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 15:34:09,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:09,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 15:34:09,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,809 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 25 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-25 15:34:09,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:09,809 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128126386] [2022-11-25 15:34:09,809 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128126386] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:34:09,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1142020396] [2022-11-25 15:34:09,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:09,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:34:09,810 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:34:09,811 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:34:09,839 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 15:34:09,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:09,943 INFO L263 TraceCheckSpWp]: Trace formula consists of 457 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-25 15:34:09,947 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:34:10,150 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 68 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-25 15:34:10,150 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 15:34:10,485 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 24 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-25 15:34:10,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1142020396] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 15:34:10,485 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 15:34:10,485 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-11-25 15:34:10,486 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1179252618] [2022-11-25 15:34:10,486 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 15:34:10,487 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-25 15:34:10,487 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:10,488 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-25 15:34:10,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-25 15:34:10,488 INFO L87 Difference]: Start difference. First operand 802 states and 1067 transitions. Second operand has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-25 15:34:11,512 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:11,512 INFO L93 Difference]: Finished difference Result 1963 states and 2755 transitions. [2022-11-25 15:34:11,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-25 15:34:11,513 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 142 [2022-11-25 15:34:11,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:11,522 INFO L225 Difference]: With dead ends: 1963 [2022-11-25 15:34:11,522 INFO L226 Difference]: Without dead ends: 1265 [2022-11-25 15:34:11,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 308 SyntacticMatches, 6 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=283, Invalid=587, Unknown=0, NotChecked=0, Total=870 [2022-11-25 15:34:11,529 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 505 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 588 mSolverCounterSat, 220 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 506 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 808 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 220 IncrementalHoareTripleChecker+Valid, 588 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:11,529 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [506 Valid, 227 Invalid, 808 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [220 Valid, 588 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-25 15:34:11,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1265 states. [2022-11-25 15:34:11,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1265 to 1129. [2022-11-25 15:34:11,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1129 states, 858 states have (on average 1.2272727272727273) internal successors, (1053), 922 states have internal predecessors, (1053), 143 states have call successors, (143), 113 states have call predecessors, (143), 127 states have return successors, (329), 127 states have call predecessors, (329), 143 states have call successors, (329) [2022-11-25 15:34:11,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1129 states to 1129 states and 1525 transitions. [2022-11-25 15:34:11,692 INFO L78 Accepts]: Start accepts. Automaton has 1129 states and 1525 transitions. Word has length 142 [2022-11-25 15:34:11,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:11,693 INFO L495 AbstractCegarLoop]: Abstraction has 1129 states and 1525 transitions. [2022-11-25 15:34:11,693 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.583333333333334) internal successors, (139), 9 states have internal predecessors, (139), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-25 15:34:11,693 INFO L276 IsEmpty]: Start isEmpty. Operand 1129 states and 1525 transitions. [2022-11-25 15:34:11,698 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 15:34:11,698 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:11,698 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:11,709 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 15:34:11,904 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:34:11,904 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:11,905 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:11,905 INFO L85 PathProgramCache]: Analyzing trace with hash 1133837867, now seen corresponding path program 1 times [2022-11-25 15:34:11,905 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:11,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [335121141] [2022-11-25 15:34:11,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:11,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:11,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:34:12,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:12,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:34:12,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:12,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 15:34:12,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 15:34:12,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 15:34:12,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 15:34:12,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:12,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:34:12,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 15:34:12,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:12,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 15:34:12,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,237 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 59 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-25 15:34:12,238 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:12,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [335121141] [2022-11-25 15:34:12,238 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [335121141] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:34:12,238 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1635810332] [2022-11-25 15:34:12,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:12,238 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:34:12,239 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:34:12,240 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:34:12,298 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 15:34:12,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:12,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 15:34:12,421 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:34:12,718 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 82 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:34:12,718 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 15:34:12,993 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 60 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-25 15:34:12,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1635810332] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 15:34:12,994 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 15:34:12,994 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 18 [2022-11-25 15:34:12,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045280639] [2022-11-25 15:34:12,995 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 15:34:12,995 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 15:34:12,995 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:12,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 15:34:12,997 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=67, Invalid=239, Unknown=0, NotChecked=0, Total=306 [2022-11-25 15:34:12,997 INFO L87 Difference]: Start difference. First operand 1129 states and 1525 transitions. Second operand has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-25 15:34:15,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:15,381 INFO L93 Difference]: Finished difference Result 3239 states and 4691 transitions. [2022-11-25 15:34:15,381 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2022-11-25 15:34:15,382 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 142 [2022-11-25 15:34:15,382 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:15,395 INFO L225 Difference]: With dead ends: 3239 [2022-11-25 15:34:15,395 INFO L226 Difference]: Without dead ends: 2210 [2022-11-25 15:34:15,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 354 GetRequests, 304 SyntacticMatches, 5 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 473 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=535, Invalid=1627, Unknown=0, NotChecked=0, Total=2162 [2022-11-25 15:34:15,403 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 674 mSDsluCounter, 361 mSDsCounter, 0 mSdLazyCounter, 1664 mSolverCounterSat, 337 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 676 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 2001 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 337 IncrementalHoareTripleChecker+Valid, 1664 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:15,404 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [676 Valid, 432 Invalid, 2001 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [337 Valid, 1664 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-11-25 15:34:15,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2210 states. [2022-11-25 15:34:15,624 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2210 to 1802. [2022-11-25 15:34:15,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1802 states, 1362 states have (on average 1.2143906020558002) internal successors, (1654), 1451 states have internal predecessors, (1654), 230 states have call successors, (230), 195 states have call predecessors, (230), 209 states have return successors, (494), 208 states have call predecessors, (494), 230 states have call successors, (494) [2022-11-25 15:34:15,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1802 states to 1802 states and 2378 transitions. [2022-11-25 15:34:15,638 INFO L78 Accepts]: Start accepts. Automaton has 1802 states and 2378 transitions. Word has length 142 [2022-11-25 15:34:15,639 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:15,639 INFO L495 AbstractCegarLoop]: Abstraction has 1802 states and 2378 transitions. [2022-11-25 15:34:15,639 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 8.11111111111111) internal successors, (146), 15 states have internal predecessors, (146), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-25 15:34:15,640 INFO L276 IsEmpty]: Start isEmpty. Operand 1802 states and 2378 transitions. [2022-11-25 15:34:15,646 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 143 [2022-11-25 15:34:15,646 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:34:15,646 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:15,657 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-25 15:34:15,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-25 15:34:15,858 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:34:15,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:34:15,858 INFO L85 PathProgramCache]: Analyzing trace with hash 401870441, now seen corresponding path program 1 times [2022-11-25 15:34:15,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:34:15,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [921263426] [2022-11-25 15:34:15,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:34:15,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:34:15,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:15,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:34:15,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 15:34:16,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:34:16,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:34:16,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 15:34:16,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 15:34:16,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 15:34:16,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 15:34:16,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:16,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:34:16,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-25 15:34:16,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:34:16,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2022-11-25 15:34:16,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:34:16,097 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 46 proven. 0 refuted. 0 times theorem prover too weak. 55 trivial. 0 not checked. [2022-11-25 15:34:16,098 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:34:16,098 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [921263426] [2022-11-25 15:34:16,098 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [921263426] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:34:16,098 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:34:16,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-25 15:34:16,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1948922741] [2022-11-25 15:34:16,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:34:16,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-25 15:34:16,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:34:16,103 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-25 15:34:16,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=89, Unknown=0, NotChecked=0, Total=110 [2022-11-25 15:34:16,104 INFO L87 Difference]: Start difference. First operand 1802 states and 2378 transitions. Second operand has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-25 15:34:16,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:34:16,674 INFO L93 Difference]: Finished difference Result 2257 states and 2924 transitions. [2022-11-25 15:34:16,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-25 15:34:16,675 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 142 [2022-11-25 15:34:16,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:34:16,676 INFO L225 Difference]: With dead ends: 2257 [2022-11-25 15:34:16,676 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 15:34:16,683 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2022-11-25 15:34:16,684 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 251 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 638 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 252 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 712 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 638 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-25 15:34:16,684 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [252 Valid, 166 Invalid, 712 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 638 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-25 15:34:16,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 15:34:16,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 15:34:16,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 15:34:16,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 15:34:16,686 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 142 [2022-11-25 15:34:16,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:34:16,687 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 15:34:16,687 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 8.090909090909092) internal successors, (89), 7 states have internal predecessors, (89), 2 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-25 15:34:16,687 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 15:34:16,687 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 15:34:16,690 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 15:34:16,690 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-11-25 15:34:16,692 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 15:34:22,341 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 629 635) no Hoare annotation was computed. [2022-11-25 15:34:22,342 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 629 635) the Hoare annotation is: true [2022-11-25 15:34:22,342 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (not (<= 2 ~waterLevel~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse2 .cse3))) [2022-11-25 15:34:22,342 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-25 15:34:22,342 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-25 15:34:22,342 INFO L902 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2022-11-25 15:34:22,342 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2022-11-25 15:34:22,343 INFO L899 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2022-11-25 15:34:22,343 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 904 933) the Hoare annotation is: true [2022-11-25 15:34:22,343 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-11-25 15:34:22,343 INFO L902 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2022-11-25 15:34:22,343 INFO L899 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2022-11-25 15:34:22,343 INFO L902 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2022-11-25 15:34:22,343 INFO L902 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2022-11-25 15:34:22,343 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2022-11-25 15:34:22,343 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-25 15:34:22,344 INFO L899 garLoopResultBuilder]: For program point L609-1(lines 608 627) no Hoare annotation was computed. [2022-11-25 15:34:22,344 INFO L899 garLoopResultBuilder]: For program point L671(lines 671 679) no Hoare annotation was computed. [2022-11-25 15:34:22,344 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-25 15:34:22,344 INFO L899 garLoopResultBuilder]: For program point L667(lines 667 684) no Hoare annotation was computed. [2022-11-25 15:34:22,344 INFO L895 garLoopResultBuilder]: At program point L812(lines 797 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-25 15:34:22,345 INFO L895 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse0 .cse6 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse4)))) (or (and .cse0 .cse1) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse1) .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|))))) (or (and .cse6 .cse7 (= ~waterLevel~0 1)) .cse8 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse9) .cse8 .cse2 .cse5 (<= |old(~waterLevel~0)| 1) (and .cse9 .cse7))))) [2022-11-25 15:34:22,345 INFO L899 garLoopResultBuilder]: For program point L841-1(line 841) no Hoare annotation was computed. [2022-11-25 15:34:22,345 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 605 628) no Hoare annotation was computed. [2022-11-25 15:34:22,345 INFO L895 garLoopResultBuilder]: At program point L738(lines 733 741) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse4 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2 .cse3) (or .cse0 .cse1 .cse3 (<= |old(~waterLevel~0)| 1) (and (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (or .cse1 .cse2 .cse3 .cse5) (let ((.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (let ((.cse7 (let ((.cse10 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse11 (not .cse3))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse8 .cse9 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse10 .cse11) (and .cse6 .cse8 .cse9 .cse10 .cse11))))) (or .cse1 (and .cse6 .cse7) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse7 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3 .cse5))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) (and .cse8 .cse9 .cse4 (= ~waterLevel~0 1)) .cse3))) [2022-11-25 15:34:22,345 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~methAndRunningLastTime~0 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-25 15:34:22,346 INFO L895 garLoopResultBuilder]: At program point L677(line 677) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 15:34:22,346 INFO L895 garLoopResultBuilder]: At program point L719(lines 714 721) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-25 15:34:22,347 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 857) no Hoare annotation was computed. [2022-11-25 15:34:22,347 INFO L899 garLoopResultBuilder]: For program point L1004(line 1004) no Hoare annotation was computed. [2022-11-25 15:34:22,347 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-11-25 15:34:22,347 INFO L895 garLoopResultBuilder]: At program point L682(line 682) the Hoare annotation is: (let ((.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse3 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 15:34:22,348 INFO L895 garLoopResultBuilder]: At program point L843-1(lines 835 863) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 0))) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse10)) (.cse2 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse3 .cse4) (or .cse5 .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse8 .cse9 .cse6 .cse7) .cse3) (or .cse5 .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse2 .cse3) (let ((.cse11 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (or .cse0 (and .cse6 .cse10 (<= 2 ~waterLevel~0) .cse11) (and .cse8 .cse9) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse9 .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) .cse11 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse3 .cse4))))) [2022-11-25 15:34:22,348 INFO L895 garLoopResultBuilder]: At program point L682-1(lines 663 687) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= 0 ~systemActive~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (let ((.cse1 (or (and .cse0 .cse6 .cse4) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse6 (= |timeShift_isLowWaterLevel_~tmp~8#1| 0) .cse4)))) (or (and .cse0 .cse1) (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) .cse1) .cse2 (and .cse3 (<= 2 ~waterLevel~0) .cse4) .cse5 (not (<= 2 |old(~waterLevel~0)|))))) (or (and .cse6 .cse7 (= ~waterLevel~0 1)) .cse8 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse5) (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse3 .cse9) .cse8 .cse2 .cse5 (<= |old(~waterLevel~0)| 1) (and .cse9 .cse7))))) [2022-11-25 15:34:22,348 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 616 622) no Hoare annotation was computed. [2022-11-25 15:34:22,348 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2022-11-25 15:34:22,349 INFO L899 garLoopResultBuilder]: For program point L806-2(lines 806 810) no Hoare annotation was computed. [2022-11-25 15:34:22,349 INFO L899 garLoopResultBuilder]: For program point L848(lines 848 854) no Hoare annotation was computed. [2022-11-25 15:34:22,349 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 605 628) the Hoare annotation is: (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) .cse1 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0) .cse0) .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 15:34:22,349 INFO L895 garLoopResultBuilder]: At program point L1005(lines 1000 1007) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-25 15:34:22,349 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 605 628) no Hoare annotation was computed. [2022-11-25 15:34:22,350 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1004) no Hoare annotation was computed. [2022-11-25 15:34:22,350 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-25 15:34:22,350 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-11-25 15:34:22,350 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-25 15:34:22,350 INFO L895 garLoopResultBuilder]: At program point L832(lines 827 834) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-25 15:34:22,351 INFO L895 garLoopResultBuilder]: At program point L890(lines 886 892) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 15:34:22,351 INFO L899 garLoopResultBuilder]: For program point L560(lines 560 566) no Hoare annotation was computed. [2022-11-25 15:34:22,351 INFO L899 garLoopResultBuilder]: For program point L560-1(lines 560 566) no Hoare annotation was computed. [2022-11-25 15:34:22,351 INFO L902 garLoopResultBuilder]: At program point L973(lines 965 975) the Hoare annotation is: true [2022-11-25 15:34:22,351 INFO L895 garLoopResultBuilder]: At program point L585(lines 540 587) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-11-25 15:34:22,352 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-11-25 15:34:22,352 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 15:34:22,352 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 15:34:22,352 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 15:34:22,352 INFO L899 garLoopResultBuilder]: For program point L986(lines 986 993) no Hoare annotation was computed. [2022-11-25 15:34:22,352 INFO L899 garLoopResultBuilder]: For program point L986-2(lines 986 993) no Hoare annotation was computed. [2022-11-25 15:34:22,353 INFO L895 garLoopResultBuilder]: At program point L821(lines 816 823) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3 .cse4))) [2022-11-25 15:34:22,353 INFO L895 garLoopResultBuilder]: At program point L883(lines 879 885) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 15:34:22,353 INFO L902 garLoopResultBuilder]: At program point L995(lines 976 998) the Hoare annotation is: true [2022-11-25 15:34:22,353 INFO L895 garLoopResultBuilder]: At program point L962(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-25 15:34:22,353 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 582) no Hoare annotation was computed. [2022-11-25 15:34:22,354 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 15:34:22,354 INFO L895 garLoopResultBuilder]: At program point L578-2(lines 570 583) the Hoare annotation is: (let ((.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 (= ~waterLevel~0 1) .cse3 .cse4))) [2022-11-25 15:34:22,354 INFO L899 garLoopResultBuilder]: For program point L541(lines 540 587) no Hoare annotation was computed. [2022-11-25 15:34:22,354 INFO L899 garLoopResultBuilder]: For program point L570(lines 570 583) no Hoare annotation was computed. [2022-11-25 15:34:22,354 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse3 (= ~waterLevel~0 1) .cse4 .cse5))) [2022-11-25 15:34:22,355 INFO L902 garLoopResultBuilder]: At program point L591(lines 530 595) the Hoare annotation is: true [2022-11-25 15:34:22,355 INFO L899 garLoopResultBuilder]: For program point L550(lines 550 556) no Hoare annotation was computed. [2022-11-25 15:34:22,355 INFO L899 garLoopResultBuilder]: For program point L550-1(lines 550 556) no Hoare annotation was computed. [2022-11-25 15:34:22,355 INFO L899 garLoopResultBuilder]: For program point L542(lines 542 546) no Hoare annotation was computed. [2022-11-25 15:34:22,355 INFO L895 garLoopResultBuilder]: At program point L588(lines 539 589) the Hoare annotation is: false [2022-11-25 15:34:22,356 INFO L895 garLoopResultBuilder]: At program point L898(lines 893 901) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 15:34:22,356 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 637 661) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3))) [2022-11-25 15:34:22,356 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2022-11-25 15:34:22,356 INFO L895 garLoopResultBuilder]: At program point L704-2(lines 697 713) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) .cse0) (= 0 ~systemActive~0) (and (= ~pumpRunning~0 0) .cse0 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~6#1|) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0)))) [2022-11-25 15:34:22,357 INFO L895 garLoopResultBuilder]: At program point L793(lines 778 796) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and .cse0 .cse1 (<= 2 ~waterLevel~0)) (and .cse0 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2022-11-25 15:34:22,357 INFO L895 garLoopResultBuilder]: At program point L729(lines 722 732) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) (or (= ~methaneLevelCritical~0 0) (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 15:34:22,357 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 15:34:22,357 INFO L899 garLoopResultBuilder]: For program point L727-1(line 727) no Hoare annotation was computed. [2022-11-25 15:34:22,357 INFO L899 garLoopResultBuilder]: For program point L787(lines 787 791) no Hoare annotation was computed. [2022-11-25 15:34:22,357 INFO L899 garLoopResultBuilder]: For program point L787-2(lines 787 791) no Hoare annotation was computed. [2022-11-25 15:34:22,358 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-25 15:34:22,358 INFO L895 garLoopResultBuilder]: At program point L651(line 651) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 15:34:22,358 INFO L899 garLoopResultBuilder]: For program point L645(lines 645 653) no Hoare annotation was computed. [2022-11-25 15:34:22,358 INFO L899 garLoopResultBuilder]: For program point L641(lines 641 658) no Hoare annotation was computed. [2022-11-25 15:34:22,358 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 637 661) no Hoare annotation was computed. [2022-11-25 15:34:22,359 INFO L895 garLoopResultBuilder]: At program point L693(lines 688 695) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (and (= ~methaneLevelCritical~0 0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 15:34:22,359 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2 .cse3))) [2022-11-25 15:34:22,359 INFO L895 garLoopResultBuilder]: At program point L656(line 656) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (<= 1 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2022-11-25 15:34:22,359 INFO L899 garLoopResultBuilder]: For program point L656-1(lines 637 661) no Hoare annotation was computed. [2022-11-25 15:34:22,359 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-25 15:34:22,360 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-25 15:34:22,360 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 (= ~waterLevel~0 1) .cse3) (or (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 .cse3 .cse4))) [2022-11-25 15:34:22,363 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:34:22,366 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 15:34:22,422 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 03:34:22 BoogieIcfgContainer [2022-11-25 15:34:22,422 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 15:34:22,423 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 15:34:22,425 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 15:34:22,425 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 15:34:22,426 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:34:04" (3/4) ... [2022-11-25 15:34:22,429 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 15:34:22,442 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 15:34:22,442 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 15:34:22,443 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 15:34:22,443 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 15:34:22,443 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-25 15:34:22,443 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:34:22,443 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 15:34:22,452 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-25 15:34:22,455 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 15:34:22,455 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 15:34:22,456 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 15:34:22,456 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 15:34:22,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 15:34:22,484 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-11-25 15:34:22,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-11-25 15:34:22,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) [2022-11-25 15:34:22,485 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-25 15:34:22,486 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) || (((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(\old(methAndRunningLastTime) == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((((methaneLevelCritical == 0 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) [2022-11-25 15:34:22,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((methAndRunningLastTime == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) [2022-11-25 15:34:22,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || (((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-25 15:34:22,487 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 15:34:22,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || (((1 <= tmp && 1 <= \result) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1)) || 0 == systemActive) [2022-11-25 15:34:22,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-25 15:34:22,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0) [2022-11-25 15:34:22,488 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-25 15:34:22,489 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 15:34:22,489 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-25 15:34:22,489 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-25 15:34:22,489 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) [2022-11-25 15:34:22,490 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) [2022-11-25 15:34:22,511 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 15:34:22,512 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 15:34:22,512 INFO L158 Benchmark]: Toolchain (without parser) took 19243.71ms. Allocated memory was 199.2MB in the beginning and 346.0MB in the end (delta: 146.8MB). Free memory was 156.0MB in the beginning and 152.1MB in the end (delta: 3.9MB). Peak memory consumption was 152.6MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,512 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 142.6MB. Free memory is still 84.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 15:34:22,513 INFO L158 Benchmark]: CACSL2BoogieTranslator took 525.22ms. Allocated memory is still 199.2MB. Free memory was 156.0MB in the beginning and 136.3MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,513 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.42ms. Allocated memory is still 199.2MB. Free memory was 136.3MB in the beginning and 134.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,514 INFO L158 Benchmark]: Boogie Preprocessor took 39.65ms. Allocated memory is still 199.2MB. Free memory was 134.2MB in the beginning and 132.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,514 INFO L158 Benchmark]: RCFGBuilder took 573.58ms. Allocated memory is still 199.2MB. Free memory was 132.7MB in the beginning and 115.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,514 INFO L158 Benchmark]: TraceAbstraction took 17930.55ms. Allocated memory was 199.2MB in the beginning and 346.0MB in the end (delta: 146.8MB). Free memory was 114.7MB in the beginning and 158.4MB in the end (delta: -43.7MB). Peak memory consumption was 161.4MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,515 INFO L158 Benchmark]: Witness Printer took 88.84ms. Allocated memory is still 346.0MB. Free memory was 158.4MB in the beginning and 152.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 15:34:22,517 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 142.6MB. Free memory is still 84.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 525.22ms. Allocated memory is still 199.2MB. Free memory was 156.0MB in the beginning and 136.3MB in the end (delta: 19.7MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 78.42ms. Allocated memory is still 199.2MB. Free memory was 136.3MB in the beginning and 134.2MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.65ms. Allocated memory is still 199.2MB. Free memory was 134.2MB in the beginning and 132.7MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 573.58ms. Allocated memory is still 199.2MB. Free memory was 132.7MB in the beginning and 115.3MB in the end (delta: 17.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 17930.55ms. Allocated memory was 199.2MB in the beginning and 346.0MB in the end (delta: 146.8MB). Free memory was 114.7MB in the beginning and 158.4MB in the end (delta: -43.7MB). Peak memory consumption was 161.4MB. Max. memory is 16.1GB. * Witness Printer took 88.84ms. Allocated memory is still 346.0MB. Free memory was 158.4MB in the beginning and 152.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1004]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.8s, OverallIterations: 13, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 6.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2507 SdHoareTripleChecker+Valid, 3.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2476 mSDsluCounter, 3657 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2506 mSDsCounter, 894 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4035 IncrementalHoareTripleChecker+Invalid, 4929 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 894 mSolverCounterUnsat, 1151 mSDtfsCounter, 4035 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 996 GetRequests, 824 SyntacticMatches, 11 SemanticMatches, 161 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 907 ImplicationChecksByTransitivity, 1.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1802occurred in iteration=12, InterpolantAutomatonStates: 145, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 13 MinimizatonAttempts, 719 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 2682 PreInvPairs, 2990 NumberOfFragments, 1801 HoareAnnotationTreeSize, 2682 FomulaSimplifications, 4027 FormulaSimplificationTreeSizeReduction, 1.0s HoareSimplificationTime, 44 FomulaSimplificationsInter, 22675 FormulaSimplificationTreeSizeReductionInter, 4.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.5s InterpolantComputationTime, 1288 NumberOfCodeBlocks, 1288 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1554 ConstructedInterpolants, 0 QuantifiedInterpolants, 3212 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1265 ConjunctsInSsa, 25 ConjunctsInUnsatCore, 18 InterpolantComputations, 11 PerfectInterpolantSequences, 660/778 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1))) || (((1 <= tmp && 1 <= \result) && 1 <= tmp___0) && (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \old(waterLevel) <= waterLevel + 1) || (((\result == 0 && pumpRunning == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)))) || !(\old(methAndRunningLastTime) == 0)) || ((methaneLevelCritical == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((((pumpRunning == 0 && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || 0 == systemActive)) && ((((((methaneLevelCritical == 0 && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime)) - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || (methaneLevelCritical == 0 && 2 <= waterLevel)) || 0 == systemActive) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical == tmp) && \result == methaneLevelCritical)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || tmp == 0) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || (((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((1 <= tmp && \result == 0) && pumpRunning == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 1000]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) && ((!(\old(methAndRunningLastTime) == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 733]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || \old(waterLevel) <= 1) || (\old(waterLevel) == waterLevel && \old(methAndRunningLastTime) == methAndRunningLastTime))) && (((!(\old(methAndRunningLastTime) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || (pumpRunning == \old(pumpRunning) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive))))) || (((1 <= tmp && 1 <= \result) && ((((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0) && \old(waterLevel) <= waterLevel + 1) && !(0 == systemActive)))) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1)) || 0 == systemActive) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((((((((1 <= tmp && \result == 0) && pumpRunning == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == 0 && 2 <= waterLevel) && (methaneLevelCritical == 0 || \result == methaneLevelCritical))) || 0 == systemActive) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 893]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 539]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 797]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || ((((((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && tmp == 0) && 1 <= \result) && \old(waterLevel) <= waterLevel + 1) && 1 <= tmp___0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: (((((methAndRunningLastTime == 0 && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && waterLevel == 1) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((!(\old(methAndRunningLastTime) == 0) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= \old(waterLevel))) || 0 == systemActive) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0) RESULT: Ultimate proved your program to be correct! [2022-11-25 15:34:22,545 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8fa96778-3cb1-4f45-a067-5c63286740cc/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE