./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 18:16:34,984 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 18:16:34,987 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 18:16:35,029 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 18:16:35,029 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 18:16:35,031 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 18:16:35,032 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 18:16:35,034 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 18:16:35,045 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 18:16:35,047 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 18:16:35,048 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 18:16:35,049 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 18:16:35,050 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 18:16:35,051 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 18:16:35,052 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 18:16:35,053 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 18:16:35,054 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 18:16:35,055 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 18:16:35,057 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 18:16:35,063 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 18:16:35,069 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 18:16:35,075 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 18:16:35,076 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 18:16:35,077 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 18:16:35,080 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 18:16:35,080 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 18:16:35,081 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 18:16:35,082 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 18:16:35,082 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 18:16:35,083 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 18:16:35,083 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 18:16:35,084 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 18:16:35,085 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 18:16:35,086 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 18:16:35,087 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 18:16:35,087 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 18:16:35,088 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 18:16:35,088 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 18:16:35,088 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 18:16:35,089 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 18:16:35,090 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 18:16:35,092 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 18:16:35,121 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 18:16:35,121 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 18:16:35,122 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 18:16:35,122 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 18:16:35,123 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 18:16:35,123 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 18:16:35,124 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 18:16:35,124 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 18:16:35,124 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 18:16:35,143 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 18:16:35,143 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 18:16:35,144 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 18:16:35,144 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 18:16:35,144 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 18:16:35,144 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 18:16:35,144 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 18:16:35,145 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 18:16:35,145 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 18:16:35,145 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 18:16:35,145 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 18:16:35,145 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 18:16:35,146 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 18:16:35,146 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 18:16:35,146 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 18:16:35,146 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:16:35,146 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 18:16:35,147 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 18:16:35,147 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 18:16:35,147 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 18:16:35,147 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 18:16:35,147 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 18:16:35,148 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 18:16:35,148 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 18:16:35,148 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 18:16:35,148 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68c6d60a43782147acd714b0904a144255717c2aa47fb6b6f8991672a1483369 [2022-11-25 18:16:35,436 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 18:16:35,459 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 18:16:35,461 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 18:16:35,463 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 18:16:35,463 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 18:16:35,465 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-11-25 18:16:38,523 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 18:16:38,831 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 18:16:38,832 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c [2022-11-25 18:16:38,843 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/data/e5116c0f3/52189dd3c521470499cbf9cc3c70d337/FLAG2d38e8a38 [2022-11-25 18:16:38,858 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/data/e5116c0f3/52189dd3c521470499cbf9cc3c70d337 [2022-11-25 18:16:38,861 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 18:16:38,863 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 18:16:38,865 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 18:16:38,865 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 18:16:38,869 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 18:16:38,870 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:16:38" (1/1) ... [2022-11-25 18:16:38,871 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3dfa14e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:38, skipping insertion in model container [2022-11-25 18:16:38,871 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:16:38" (1/1) ... [2022-11-25 18:16:38,879 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 18:16:38,926 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 18:16:39,092 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-11-25 18:16:39,206 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:16:39,218 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 18:16:39,233 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/sv-benchmarks/c/product-lines/minepump_spec5_product38.cil.c[1605,1618] [2022-11-25 18:16:39,291 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:16:39,310 INFO L208 MainTranslator]: Completed translation [2022-11-25 18:16:39,310 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39 WrapperNode [2022-11-25 18:16:39,310 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 18:16:39,312 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 18:16:39,312 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 18:16:39,312 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 18:16:39,319 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,333 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,359 INFO L138 Inliner]: procedures = 56, calls = 101, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 203 [2022-11-25 18:16:39,360 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 18:16:39,360 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 18:16:39,361 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 18:16:39,361 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 18:16:39,371 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,371 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,373 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,374 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,380 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,386 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,387 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,388 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,391 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 18:16:39,392 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 18:16:39,392 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 18:16:39,392 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 18:16:39,393 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (1/1) ... [2022-11-25 18:16:39,416 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 18:16:39,428 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:16:39,456 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 18:16:39,483 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 18:16:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 18:16:39,505 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 18:16:39,506 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 18:16:39,506 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 18:16:39,507 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 18:16:39,507 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 18:16:39,509 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 18:16:39,509 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:16:39,509 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:16:39,509 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 18:16:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 18:16:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-25 18:16:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-25 18:16:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 18:16:39,510 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 18:16:39,510 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 18:16:39,511 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 18:16:39,511 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 18:16:39,613 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 18:16:39,615 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 18:16:40,012 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 18:16:40,021 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 18:16:40,021 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 18:16:40,023 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:16:40 BoogieIcfgContainer [2022-11-25 18:16:40,023 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 18:16:40,027 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 18:16:40,027 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 18:16:40,030 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 18:16:40,031 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 06:16:38" (1/3) ... [2022-11-25 18:16:40,032 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c3915a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:16:40, skipping insertion in model container [2022-11-25 18:16:40,032 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:16:39" (2/3) ... [2022-11-25 18:16:40,032 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4c3915a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 06:16:40, skipping insertion in model container [2022-11-25 18:16:40,032 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:16:40" (3/3) ... [2022-11-25 18:16:40,034 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product38.cil.c [2022-11-25 18:16:40,056 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 18:16:40,056 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 18:16:40,115 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 18:16:40,123 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@136f4d8f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 18:16:40,123 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 18:16:40,131 INFO L276 IsEmpty]: Start isEmpty. Operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-25 18:16:40,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-25 18:16:40,143 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:40,143 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:40,144 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:40,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:40,149 INFO L85 PathProgramCache]: Analyzing trace with hash 849031785, now seen corresponding path program 1 times [2022-11-25 18:16:40,160 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:40,161 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1256844938] [2022-11-25 18:16:40,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:40,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:40,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-25 18:16:40,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 18:16:40,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,430 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:40,431 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:40,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1256844938] [2022-11-25 18:16:40,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1256844938] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:40,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:40,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 18:16:40,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [42180311] [2022-11-25 18:16:40,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:40,443 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 18:16:40,443 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:40,492 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 18:16:40,494 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:16:40,497 INFO L87 Difference]: Start difference. First operand has 91 states, 70 states have (on average 1.3714285714285714) internal successors, (96), 78 states have internal predecessors, (96), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 18:16:40,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:40,592 INFO L93 Difference]: Finished difference Result 173 states and 234 transitions. [2022-11-25 18:16:40,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 18:16:40,598 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-25 18:16:40,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:40,607 INFO L225 Difference]: With dead ends: 173 [2022-11-25 18:16:40,607 INFO L226 Difference]: Without dead ends: 82 [2022-11-25 18:16:40,612 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 18:16:40,617 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 114 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:40,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 114 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:16:40,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-25 18:16:40,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-11-25 18:16:40,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3015873015873016) internal successors, (82), 70 states have internal predecessors, (82), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-25 18:16:40,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2022-11-25 18:16:40,715 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 32 [2022-11-25 18:16:40,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:40,717 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2022-11-25 18:16:40,717 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 18:16:40,717 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2022-11-25 18:16:40,725 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-25 18:16:40,725 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:40,726 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:40,726 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 18:16:40,727 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:40,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:40,729 INFO L85 PathProgramCache]: Analyzing trace with hash 79054015, now seen corresponding path program 1 times [2022-11-25 18:16:40,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:40,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960076895] [2022-11-25 18:16:40,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:40,731 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:40,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 18:16:40,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 18:16:40,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:40,938 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:40,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:40,947 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960076895] [2022-11-25 18:16:40,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960076895] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:40,949 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:40,949 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:16:40,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1528326027] [2022-11-25 18:16:40,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:40,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 18:16:40,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:40,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:16:40,955 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:16:40,955 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 18:16:40,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:40,978 INFO L93 Difference]: Finished difference Result 128 states and 164 transitions. [2022-11-25 18:16:40,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:16:40,979 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-25 18:16:40,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:40,980 INFO L225 Difference]: With dead ends: 128 [2022-11-25 18:16:40,980 INFO L226 Difference]: Without dead ends: 73 [2022-11-25 18:16:40,981 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:16:40,983 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 13 mSDsluCounter, 75 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:40,984 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 167 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:16:40,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-25 18:16:40,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-25 18:16:40,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.3157894736842106) internal successors, (75), 64 states have internal predecessors, (75), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-25 18:16:40,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 93 transitions. [2022-11-25 18:16:40,995 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 93 transitions. Word has length 33 [2022-11-25 18:16:40,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:40,995 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 93 transitions. [2022-11-25 18:16:40,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 18:16:40,996 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 93 transitions. [2022-11-25 18:16:40,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 18:16:40,997 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:40,997 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:40,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 18:16:40,998 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:40,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:40,999 INFO L85 PathProgramCache]: Analyzing trace with hash 321911882, now seen corresponding path program 1 times [2022-11-25 18:16:40,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:40,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [75674515] [2022-11-25 18:16:40,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:41,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:41,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:41,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-25 18:16:41,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,268 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:41,269 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:41,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [75674515] [2022-11-25 18:16:41,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [75674515] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:41,269 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:41,270 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:16:41,270 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81107526] [2022-11-25 18:16:41,270 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:41,276 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 18:16:41,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:41,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:16:41,278 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:16:41,278 INFO L87 Difference]: Start difference. First operand 73 states and 93 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 18:16:41,374 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:41,374 INFO L93 Difference]: Finished difference Result 138 states and 179 transitions. [2022-11-25 18:16:41,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:16:41,375 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-25 18:16:41,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:41,377 INFO L225 Difference]: With dead ends: 138 [2022-11-25 18:16:41,377 INFO L226 Difference]: Without dead ends: 73 [2022-11-25 18:16:41,378 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:16:41,379 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 116 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:41,380 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 224 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:16:41,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2022-11-25 18:16:41,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2022-11-25 18:16:41,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 57 states have (on average 1.2982456140350878) internal successors, (74), 64 states have internal predecessors, (74), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-25 18:16:41,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 92 transitions. [2022-11-25 18:16:41,397 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 92 transitions. Word has length 38 [2022-11-25 18:16:41,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:41,399 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 92 transitions. [2022-11-25 18:16:41,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 18:16:41,399 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 92 transitions. [2022-11-25 18:16:41,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-25 18:16:41,414 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:41,415 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:41,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 18:16:41,415 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:41,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:41,416 INFO L85 PathProgramCache]: Analyzing trace with hash 1433797075, now seen corresponding path program 1 times [2022-11-25 18:16:41,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:41,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [496233176] [2022-11-25 18:16:41,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:41,417 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:41,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:41,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-25 18:16:41,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,522 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:41,527 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:41,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [496233176] [2022-11-25 18:16:41,527 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [496233176] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:41,528 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:41,529 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:16:41,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2056856526] [2022-11-25 18:16:41,530 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:41,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 18:16:41,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:41,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:16:41,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:16:41,532 INFO L87 Difference]: Start difference. First operand 73 states and 92 transitions. Second operand has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 18:16:41,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:41,593 INFO L93 Difference]: Finished difference Result 186 states and 241 transitions. [2022-11-25 18:16:41,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:16:41,594 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-11-25 18:16:41,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:41,596 INFO L225 Difference]: With dead ends: 186 [2022-11-25 18:16:41,596 INFO L226 Difference]: Without dead ends: 121 [2022-11-25 18:16:41,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:16:41,598 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 75 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:41,599 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 175 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 18:16:41,600 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2022-11-25 18:16:41,627 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 119. [2022-11-25 18:16:41,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 119 states, 92 states have (on average 1.2826086956521738) internal successors, (118), 99 states have internal predecessors, (118), 14 states have call successors, (14), 12 states have call predecessors, (14), 12 states have return successors, (18), 14 states have call predecessors, (18), 14 states have call successors, (18) [2022-11-25 18:16:41,629 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 150 transitions. [2022-11-25 18:16:41,629 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 150 transitions. Word has length 44 [2022-11-25 18:16:41,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:41,630 INFO L495 AbstractCegarLoop]: Abstraction has 119 states and 150 transitions. [2022-11-25 18:16:41,630 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 12.333333333333334) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 18:16:41,630 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 150 transitions. [2022-11-25 18:16:41,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-25 18:16:41,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:41,632 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:41,632 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 18:16:41,632 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:41,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:41,633 INFO L85 PathProgramCache]: Analyzing trace with hash -464428248, now seen corresponding path program 1 times [2022-11-25 18:16:41,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:41,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [434202491] [2022-11-25 18:16:41,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:41,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:41,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:41,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 18:16:41,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:16:41,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:41,759 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:41,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:41,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [434202491] [2022-11-25 18:16:41,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [434202491] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:41,760 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:41,760 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:16:41,760 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183047147] [2022-11-25 18:16:41,761 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:41,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 18:16:41,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:41,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:16:41,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:16:41,762 INFO L87 Difference]: Start difference. First operand 119 states and 150 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:41,967 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:41,968 INFO L93 Difference]: Finished difference Result 262 states and 338 transitions. [2022-11-25 18:16:41,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 18:16:41,969 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-11-25 18:16:41,969 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:41,971 INFO L225 Difference]: With dead ends: 262 [2022-11-25 18:16:41,971 INFO L226 Difference]: Without dead ends: 151 [2022-11-25 18:16:41,972 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 18:16:41,973 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 63 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 117 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 372 SdHoareTripleChecker+Invalid, 136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 117 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:41,974 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 372 Invalid, 136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 117 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 18:16:41,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-11-25 18:16:42,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 146. [2022-11-25 18:16:42,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 114 states have (on average 1.280701754385965) internal successors, (146), 121 states have internal predecessors, (146), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-11-25 18:16:42,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 185 transitions. [2022-11-25 18:16:42,040 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 185 transitions. Word has length 52 [2022-11-25 18:16:42,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:42,041 INFO L495 AbstractCegarLoop]: Abstraction has 146 states and 185 transitions. [2022-11-25 18:16:42,041 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:42,041 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 185 transitions. [2022-11-25 18:16:42,043 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-25 18:16:42,070 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:42,071 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:42,071 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 18:16:42,071 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:42,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:42,072 INFO L85 PathProgramCache]: Analyzing trace with hash 2141595306, now seen corresponding path program 1 times [2022-11-25 18:16:42,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:42,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1670152407] [2022-11-25 18:16:42,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:42,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:42,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:42,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,196 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 18:16:42,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:16:42,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,236 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:42,236 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:42,236 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1670152407] [2022-11-25 18:16:42,237 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1670152407] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:42,237 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:42,237 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:16:42,237 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484719727] [2022-11-25 18:16:42,237 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:42,238 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 18:16:42,239 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:42,240 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:16:42,240 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:16:42,240 INFO L87 Difference]: Start difference. First operand 146 states and 185 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:42,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:42,389 INFO L93 Difference]: Finished difference Result 294 states and 382 transitions. [2022-11-25 18:16:42,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:16:42,390 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-11-25 18:16:42,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:42,395 INFO L225 Difference]: With dead ends: 294 [2022-11-25 18:16:42,395 INFO L226 Difference]: Without dead ends: 156 [2022-11-25 18:16:42,397 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:16:42,407 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 65 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:42,408 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 291 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 18:16:42,408 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 156 states. [2022-11-25 18:16:42,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 156 to 148. [2022-11-25 18:16:42,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 116 states have (on average 1.2758620689655173) internal successors, (148), 123 states have internal predecessors, (148), 16 states have call successors, (16), 12 states have call predecessors, (16), 15 states have return successors, (23), 17 states have call predecessors, (23), 16 states have call successors, (23) [2022-11-25 18:16:42,443 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 187 transitions. [2022-11-25 18:16:42,443 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 187 transitions. Word has length 52 [2022-11-25 18:16:42,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:42,445 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 187 transitions. [2022-11-25 18:16:42,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:42,445 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 187 transitions. [2022-11-25 18:16:42,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-25 18:16:42,449 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:42,450 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:42,450 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 18:16:42,450 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:42,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:42,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1730670164, now seen corresponding path program 1 times [2022-11-25 18:16:42,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:42,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926598572] [2022-11-25 18:16:42,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:42,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:42,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:42,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 18:16:42,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-25 18:16:42,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:42,643 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:42,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:42,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926598572] [2022-11-25 18:16:42,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926598572] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:42,644 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:42,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:16:42,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1623478057] [2022-11-25 18:16:42,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:42,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 18:16:42,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:42,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:16:42,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:16:42,646 INFO L87 Difference]: Start difference. First operand 148 states and 187 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:42,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:42,952 INFO L93 Difference]: Finished difference Result 428 states and 559 transitions. [2022-11-25 18:16:42,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 18:16:42,953 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-11-25 18:16:42,953 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:42,959 INFO L225 Difference]: With dead ends: 428 [2022-11-25 18:16:42,959 INFO L226 Difference]: Without dead ends: 288 [2022-11-25 18:16:42,961 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:16:42,963 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 211 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 161 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 304 SdHoareTripleChecker+Invalid, 220 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 161 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:42,964 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 304 Invalid, 220 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 18:16:42,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 288 states. [2022-11-25 18:16:43,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 288 to 280. [2022-11-25 18:16:43,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 216 states have (on average 1.25) internal successors, (270), 227 states have internal predecessors, (270), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-11-25 18:16:43,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 357 transitions. [2022-11-25 18:16:43,025 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 357 transitions. Word has length 52 [2022-11-25 18:16:43,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:43,027 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 357 transitions. [2022-11-25 18:16:43,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 18:16:43,029 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 357 transitions. [2022-11-25 18:16:43,030 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-25 18:16:43,030 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:43,030 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:43,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 18:16:43,030 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:43,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:43,031 INFO L85 PathProgramCache]: Analyzing trace with hash 742025993, now seen corresponding path program 1 times [2022-11-25 18:16:43,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:43,031 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316485711] [2022-11-25 18:16:43,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:43,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:43,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 18:16:43,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 18:16:43,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 18:16:43,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-25 18:16:43,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,178 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 18:16:43,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:43,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316485711] [2022-11-25 18:16:43,179 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316485711] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:43,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:43,179 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:16:43,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1533092338] [2022-11-25 18:16:43,180 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:43,180 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 18:16:43,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:43,181 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 18:16:43,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:16:43,181 INFO L87 Difference]: Start difference. First operand 280 states and 357 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 18:16:43,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:43,503 INFO L93 Difference]: Finished difference Result 568 states and 737 transitions. [2022-11-25 18:16:43,503 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-25 18:16:43,504 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-25 18:16:43,504 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:43,507 INFO L225 Difference]: With dead ends: 568 [2022-11-25 18:16:43,507 INFO L226 Difference]: Without dead ends: 296 [2022-11-25 18:16:43,508 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-25 18:16:43,509 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 128 mSDsluCounter, 334 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 420 SdHoareTripleChecker+Invalid, 233 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:43,513 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 420 Invalid, 233 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 18:16:43,515 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-11-25 18:16:43,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 276. [2022-11-25 18:16:43,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 276 states, 212 states have (on average 1.2169811320754718) internal successors, (258), 223 states have internal predecessors, (258), 34 states have call successors, (34), 28 states have call predecessors, (34), 29 states have return successors, (53), 34 states have call predecessors, (53), 34 states have call successors, (53) [2022-11-25 18:16:43,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 276 states to 276 states and 345 transitions. [2022-11-25 18:16:43,556 INFO L78 Accepts]: Start accepts. Automaton has 276 states and 345 transitions. Word has length 54 [2022-11-25 18:16:43,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:43,556 INFO L495 AbstractCegarLoop]: Abstraction has 276 states and 345 transitions. [2022-11-25 18:16:43,556 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 18:16:43,557 INFO L276 IsEmpty]: Start isEmpty. Operand 276 states and 345 transitions. [2022-11-25 18:16:43,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-25 18:16:43,557 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:43,558 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:43,558 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 18:16:43,558 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:43,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:43,558 INFO L85 PathProgramCache]: Analyzing trace with hash -731489466, now seen corresponding path program 1 times [2022-11-25 18:16:43,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:43,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1132258147] [2022-11-25 18:16:43,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:43,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:43,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 18:16:43,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 18:16:43,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 18:16:43,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-25 18:16:43,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:43,815 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 18:16:43,815 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:43,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1132258147] [2022-11-25 18:16:43,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1132258147] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:16:43,816 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:16:43,816 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-25 18:16:43,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246858716] [2022-11-25 18:16:43,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:16:43,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-25 18:16:43,817 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:43,817 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-25 18:16:43,818 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-25 18:16:43,818 INFO L87 Difference]: Start difference. First operand 276 states and 345 transitions. Second operand has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 18:16:44,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:44,884 INFO L93 Difference]: Finished difference Result 873 states and 1145 transitions. [2022-11-25 18:16:44,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 18:16:44,885 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-11-25 18:16:44,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:44,890 INFO L225 Difference]: With dead ends: 873 [2022-11-25 18:16:44,890 INFO L226 Difference]: Without dead ends: 656 [2022-11-25 18:16:44,892 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 10 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=215, Invalid=907, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 18:16:44,895 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 464 mSDsluCounter, 684 mSDsCounter, 0 mSdLazyCounter, 763 mSolverCounterSat, 173 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 471 SdHoareTripleChecker+Valid, 812 SdHoareTripleChecker+Invalid, 936 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 173 IncrementalHoareTripleChecker+Valid, 763 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:44,896 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [471 Valid, 812 Invalid, 936 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [173 Valid, 763 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-25 18:16:44,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 656 states. [2022-11-25 18:16:44,973 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 656 to 533. [2022-11-25 18:16:44,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 533 states, 410 states have (on average 1.2146341463414634) internal successors, (498), 434 states have internal predecessors, (498), 65 states have call successors, (65), 49 states have call predecessors, (65), 57 states have return successors, (104), 67 states have call predecessors, (104), 65 states have call successors, (104) [2022-11-25 18:16:44,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 533 states to 533 states and 667 transitions. [2022-11-25 18:16:44,979 INFO L78 Accepts]: Start accepts. Automaton has 533 states and 667 transitions. Word has length 56 [2022-11-25 18:16:44,979 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:44,980 INFO L495 AbstractCegarLoop]: Abstraction has 533 states and 667 transitions. [2022-11-25 18:16:44,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.5) internal successors, (45), 8 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 18:16:44,980 INFO L276 IsEmpty]: Start isEmpty. Operand 533 states and 667 transitions. [2022-11-25 18:16:44,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-25 18:16:44,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:44,982 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:44,982 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 18:16:44,982 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:44,982 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:44,983 INFO L85 PathProgramCache]: Analyzing trace with hash -981985599, now seen corresponding path program 1 times [2022-11-25 18:16:44,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:44,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1585756056] [2022-11-25 18:16:44,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:44,983 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:45,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 18:16:45,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 18:16:45,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:16:45,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 18:16:45,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2022-11-25 18:16:45,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-25 18:16:45,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:16:45,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-25 18:16:45,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,273 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-25 18:16:45,273 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:45,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1585756056] [2022-11-25 18:16:45,274 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1585756056] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 18:16:45,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [720925025] [2022-11-25 18:16:45,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:45,274 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 18:16:45,274 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:16:45,278 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 18:16:45,302 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 18:16:45,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:45,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 334 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-25 18:16:45,411 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 18:16:45,594 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:16:45,595 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 18:16:45,818 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-25 18:16:45,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [720925025] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 18:16:45,819 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 18:16:45,819 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-11-25 18:16:45,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659641277] [2022-11-25 18:16:45,819 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 18:16:45,820 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-25 18:16:45,820 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:45,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-25 18:16:45,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-11-25 18:16:45,821 INFO L87 Difference]: Start difference. First operand 533 states and 667 transitions. Second operand has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-11-25 18:16:47,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:47,242 INFO L93 Difference]: Finished difference Result 1171 states and 1508 transitions. [2022-11-25 18:16:47,242 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-11-25 18:16:47,243 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 96 [2022-11-25 18:16:47,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:47,247 INFO L225 Difference]: With dead ends: 1171 [2022-11-25 18:16:47,247 INFO L226 Difference]: Without dead ends: 695 [2022-11-25 18:16:47,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 215 SyntacticMatches, 4 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 508 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=361, Invalid=1709, Unknown=0, NotChecked=0, Total=2070 [2022-11-25 18:16:47,251 INFO L413 NwaCegarLoop]: 181 mSDtfsCounter, 416 mSDsluCounter, 1114 mSDsCounter, 0 mSdLazyCounter, 921 mSolverCounterSat, 175 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 417 SdHoareTripleChecker+Valid, 1295 SdHoareTripleChecker+Invalid, 1096 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 921 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:47,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [417 Valid, 1295 Invalid, 1096 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 921 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 18:16:47,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 695 states. [2022-11-25 18:16:47,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 695 to 598. [2022-11-25 18:16:47,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 598 states, 454 states have (on average 1.2026431718061674) internal successors, (546), 486 states have internal predecessors, (546), 75 states have call successors, (75), 63 states have call predecessors, (75), 68 states have return successors, (100), 70 states have call predecessors, (100), 75 states have call successors, (100) [2022-11-25 18:16:47,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 598 states to 598 states and 721 transitions. [2022-11-25 18:16:47,353 INFO L78 Accepts]: Start accepts. Automaton has 598 states and 721 transitions. Word has length 96 [2022-11-25 18:16:47,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:47,353 INFO L495 AbstractCegarLoop]: Abstraction has 598 states and 721 transitions. [2022-11-25 18:16:47,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.4375) internal successors, (119), 11 states have internal predecessors, (119), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2022-11-25 18:16:47,354 INFO L276 IsEmpty]: Start isEmpty. Operand 598 states and 721 transitions. [2022-11-25 18:16:47,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 169 [2022-11-25 18:16:47,356 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 18:16:47,357 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:47,369 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 18:16:47,563 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 18:16:47,563 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 18:16:47,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:16:47,564 INFO L85 PathProgramCache]: Analyzing trace with hash -1684606529, now seen corresponding path program 1 times [2022-11-25 18:16:47,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:16:47,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477546321] [2022-11-25 18:16:47,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:47,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:16:47,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 18:16:47,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 18:16:47,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,804 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:16:47,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 18:16:47,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-25 18:16:47,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:16:47,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 18:16:47,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 18:16:47,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-11-25 18:16:47,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 18:16:47,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2022-11-25 18:16:47,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 144 [2022-11-25 18:16:47,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-11-25 18:16:47,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:47,942 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 92 proven. 28 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-11-25 18:16:47,943 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:16:47,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1477546321] [2022-11-25 18:16:47,943 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1477546321] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 18:16:47,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1915492581] [2022-11-25 18:16:47,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:16:47,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 18:16:47,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:16:47,945 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 18:16:47,971 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 18:16:48,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:16:48,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 529 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-25 18:16:48,111 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 18:16:48,450 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 138 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2022-11-25 18:16:48,452 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 18:16:49,009 INFO L134 CoverageAnalysis]: Checked inductivity of 190 backedges. 81 proven. 39 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2022-11-25 18:16:49,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1915492581] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 18:16:49,009 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 18:16:49,009 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 11] total 25 [2022-11-25 18:16:49,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1338317875] [2022-11-25 18:16:49,010 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 18:16:49,011 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-11-25 18:16:49,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:16:49,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-11-25 18:16:49,012 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2022-11-25 18:16:49,012 INFO L87 Difference]: Start difference. First operand 598 states and 721 transitions. Second operand has 25 states, 25 states have (on average 8.0) internal successors, (200), 22 states have internal predecessors, (200), 10 states have call successors, (28), 8 states have call predecessors, (28), 9 states have return successors, (27), 9 states have call predecessors, (27), 10 states have call successors, (27) [2022-11-25 18:16:50,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:16:50,348 INFO L93 Difference]: Finished difference Result 1242 states and 1546 transitions. [2022-11-25 18:16:50,362 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-25 18:16:50,363 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.0) internal successors, (200), 22 states have internal predecessors, (200), 10 states have call successors, (28), 8 states have call predecessors, (28), 9 states have return successors, (27), 9 states have call predecessors, (27), 10 states have call successors, (27) Word has length 168 [2022-11-25 18:16:50,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 18:16:50,363 INFO L225 Difference]: With dead ends: 1242 [2022-11-25 18:16:50,363 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 18:16:50,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 402 GetRequests, 351 SyntacticMatches, 5 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 448 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=481, Invalid=1775, Unknown=0, NotChecked=0, Total=2256 [2022-11-25 18:16:50,367 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 645 mSDsluCounter, 753 mSDsCounter, 0 mSdLazyCounter, 1157 mSolverCounterSat, 246 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 648 SdHoareTripleChecker+Valid, 850 SdHoareTripleChecker+Invalid, 1403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 246 IncrementalHoareTripleChecker+Valid, 1157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-25 18:16:50,367 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [648 Valid, 850 Invalid, 1403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [246 Valid, 1157 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-25 18:16:50,368 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 18:16:50,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 18:16:50,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:16:50,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 18:16:50,369 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 168 [2022-11-25 18:16:50,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 18:16:50,369 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 18:16:50,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.0) internal successors, (200), 22 states have internal predecessors, (200), 10 states have call successors, (28), 8 states have call predecessors, (28), 9 states have return successors, (27), 9 states have call predecessors, (27), 10 states have call successors, (27) [2022-11-25 18:16:50,369 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 18:16:50,369 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 18:16:50,372 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 18:16:50,404 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 18:16:50,578 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 18:16:50,580 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 18:16:58,122 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 713 719) no Hoare annotation was computed. [2022-11-25 18:16:58,122 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 713 719) the Hoare annotation is: true [2022-11-25 18:16:58,122 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 612 623) the Hoare annotation is: true [2022-11-25 18:16:58,122 INFO L899 garLoopResultBuilder]: For program point L616-1(lines 612 623) no Hoare annotation was computed. [2022-11-25 18:16:58,123 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 612 623) no Hoare annotation was computed. [2022-11-25 18:16:58,123 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse1 .cse2) (or .cse3 .cse1 .cse2 (and .cse4 (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse3 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2022-11-25 18:16:58,124 INFO L895 garLoopResultBuilder]: At program point L766-1(lines 747 771) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= ~waterLevel~0 1)) (.cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse5 .cse13 .cse14 .cse7)) (.cse10 (and .cse8 .cse13 .cse14 .cse7)) (.cse11 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse12 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse8 .cse2)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2) (not (= |old(~waterLevel~0)| 2)) .cse3) (let ((.cse6 (= ~waterLevel~0 1))) (or .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse6 .cse7) .cse3 (not (<= |old(~waterLevel~0)| 2)) (and .cse8 .cse6 .cse7))) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse9 .cse3 .cse10 .cse11) (or .cse12 (and .cse5 .cse2 .cse7) .cse4 .cse9 (and .cse8 .cse2 .cse7) .cse3 .cse10 .cse11) (or .cse12 .cse0 .cse1 .cse3)))) [2022-11-25 18:16:58,124 INFO L895 garLoopResultBuilder]: At program point L795(lines 788 798) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and .cse2 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse4 .cse5 .cse0 .cse6) (or .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6)))) [2022-11-25 18:16:58,124 INFO L899 garLoopResultBuilder]: For program point L700-1(lines 700 706) no Hoare annotation was computed. [2022-11-25 18:16:58,125 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 686 712) no Hoare annotation was computed. [2022-11-25 18:16:58,125 INFO L895 garLoopResultBuilder]: At program point L181(line 181) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse1 .cse2 .cse8) (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4) (or .cse6 .cse4 .cse5 (and .cse7 .cse2 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 18:16:58,125 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-11-25 18:16:58,125 INFO L899 garLoopResultBuilder]: For program point L181-1(line 181) no Hoare annotation was computed. [2022-11-25 18:16:58,125 INFO L899 garLoopResultBuilder]: For program point L693-2(lines 689 711) no Hoare annotation was computed. [2022-11-25 18:16:58,126 INFO L899 garLoopResultBuilder]: For program point L755(lines 755 763) no Hoare annotation was computed. [2022-11-25 18:16:58,126 INFO L899 garLoopResultBuilder]: For program point L751(lines 751 768) no Hoare annotation was computed. [2022-11-25 18:16:58,126 INFO L899 garLoopResultBuilder]: For program point L198(lines 198 208) no Hoare annotation was computed. [2022-11-25 18:16:58,126 INFO L899 garLoopResultBuilder]: For program point L194(lines 194 211) no Hoare annotation was computed. [2022-11-25 18:16:58,127 INFO L895 garLoopResultBuilder]: At program point L194-1(lines 186 214) the Hoare annotation is: (let ((.cse8 (<= 1 ~pumpRunning~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (= ~pumpRunning~0 0)) (.cse9 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse10 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse2 (and .cse15 .cse9 .cse10 .cse11)) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (and .cse8 .cse13 .cse9 .cse16 .cse17 .cse10 .cse14)) (.cse1 (= 0 ~systemActive~0)) (.cse12 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse6 (and .cse15 .cse9 .cse16 .cse17 .cse10 .cse14))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse6) (or (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4 .cse1 .cse7 .cse6) (or .cse0 (and .cse8 .cse9 .cse10 .cse11) .cse5 .cse1 .cse2) (or .cse3 (not (< 1 |old(~waterLevel~0)|)) .cse1 (= ~waterLevel~0 1) .cse12) (or (and .cse13 .cse9 .cse10 .cse11 .cse14) (and .cse15 .cse9 .cse10 .cse11 .cse14) .cse3 .cse4 .cse1 .cse12 .cse7 .cse6)))) [2022-11-25 18:16:58,127 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-25 18:16:58,127 INFO L895 garLoopResultBuilder]: At program point L661(lines 656 664) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse11 .cse0 .cse1 .cse16 .cse17 .cse3)) (.cse13 (and .cse7 .cse1 .cse16 .cse17 .cse3)) (.cse14 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= 0 ~systemActive~0))) (and (let ((.cse2 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 (not (< 1 |old(~waterLevel~0)|)) .cse5 .cse6 (and .cse7 .cse1 .cse2 .cse3))) (let ((.cse8 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse7 .cse8 .cse9) .cse10 (and .cse11 .cse8 .cse9) .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|)))) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse12 .cse13 .cse5 .cse14) (or .cse15 .cse4 .cse12 .cse13 (and .cse7 .cse1 .cse9 .cse3) (and .cse0 .cse1 .cse9 .cse3) .cse5 .cse14) (or .cse15 .cse10 (and .cse7 .cse1 .cse9) .cse5)))) [2022-11-25 18:16:58,128 INFO L895 garLoopResultBuilder]: At program point L785(lines 780 787) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse3 (and .cse5 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse0 (= ~waterLevel~0 1) .cse1) (or .cse2 (not (= |old(~waterLevel~0)| 2)) .cse0 .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse0 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 (and .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6) .cse0 .cse3 .cse4)))) [2022-11-25 18:16:58,128 INFO L899 garLoopResultBuilder]: For program point L199(lines 199 205) no Hoare annotation was computed. [2022-11-25 18:16:58,128 INFO L895 garLoopResultBuilder]: At program point L761(line 761) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and .cse2 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse4 .cse5 .cse0 .cse6) (or .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6)))) [2022-11-25 18:16:58,129 INFO L895 garLoopResultBuilder]: At program point L183(lines 176 185) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse3) .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2)))) [2022-11-25 18:16:58,129 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse0 .cse1) (or .cse2 .cse0 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 18:16:58,129 INFO L895 garLoopResultBuilder]: At program point L629(lines 624 632) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and .cse2 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse4 .cse5 .cse0 .cse6) (or .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6)))) [2022-11-25 18:16:58,129 INFO L899 garLoopResultBuilder]: For program point L592(lines 592 596) no Hoare annotation was computed. [2022-11-25 18:16:58,130 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 686 712) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3) .cse4 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 (not (< 1 |old(~waterLevel~0)|)) (and .cse7 .cse2 (< 1 ~waterLevel~0) .cse3) .cse4 .cse5) (or (and .cse1 .cse2 .cse8) (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse4) (or .cse6 .cse4 .cse5 (and .cse7 .cse2 .cse8) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 18:16:58,130 INFO L895 garLoopResultBuilder]: At program point L592-2(lines 588 599) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (and .cse2 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse3)) (.cse0 (= 0 ~systemActive~0)) (.cse6 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse4 .cse5 .cse0 .cse6) (or .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse0 .cse1) (or (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 .cse0 .cse6)))) [2022-11-25 18:16:58,130 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 686 712) no Hoare annotation was computed. [2022-11-25 18:16:58,131 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-25 18:16:58,131 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse10 (= ~pumpRunning~0 0)) (.cse6 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse12 (<= ~waterLevel~0 1)) (.cse13 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~1#1| ~waterLevel~0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (and .cse10 .cse6 .cse12 .cse13 .cse7 .cse9 (not .cse3))) (.cse2 (and (<= 1 ~pumpRunning~0) .cse5 .cse6 .cse12 .cse13 .cse7 .cse9)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 2)) .cse3) (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse6 .cse7 .cse8 .cse9) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (< 1 |old(~waterLevel~0)|)) .cse3 (= ~waterLevel~0 1) .cse11) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse10 .cse6 .cse12 .cse7 .cse8) .cse3 .cse11)))) [2022-11-25 18:16:58,131 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-11-25 18:16:58,131 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 61 90) no Hoare annotation was computed. [2022-11-25 18:16:58,132 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 61 90) the Hoare annotation is: true [2022-11-25 18:16:58,132 INFO L902 garLoopResultBuilder]: At program point L86(lines 61 90) the Hoare annotation is: true [2022-11-25 18:16:58,132 INFO L899 garLoopResultBuilder]: For program point L82(line 82) no Hoare annotation was computed. [2022-11-25 18:16:58,132 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-11-25 18:16:58,132 INFO L902 garLoopResultBuilder]: At program point L75-1(lines 75 79) the Hoare annotation is: true [2022-11-25 18:16:58,132 INFO L899 garLoopResultBuilder]: For program point L72(line 72) no Hoare annotation was computed. [2022-11-25 18:16:58,132 INFO L902 garLoopResultBuilder]: At program point L71-2(lines 71 85) the Hoare annotation is: true [2022-11-25 18:16:58,133 INFO L902 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: true [2022-11-25 18:16:58,133 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2022-11-25 18:16:58,133 INFO L899 garLoopResultBuilder]: For program point L927(lines 927 933) no Hoare annotation was computed. [2022-11-25 18:16:58,133 INFO L895 garLoopResultBuilder]: At program point L894(lines 890 896) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 18:16:58,133 INFO L899 garLoopResultBuilder]: For program point L927-1(lines 927 933) no Hoare annotation was computed. [2022-11-25 18:16:58,133 INFO L895 garLoopResultBuilder]: At program point L122(lines 118 124) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 18:16:58,134 INFO L899 garLoopResultBuilder]: For program point L151(lines 151 158) no Hoare annotation was computed. [2022-11-25 18:16:58,134 INFO L899 garLoopResultBuilder]: For program point L919(lines 919 923) no Hoare annotation was computed. [2022-11-25 18:16:58,134 INFO L899 garLoopResultBuilder]: For program point L151-2(lines 151 158) no Hoare annotation was computed. [2022-11-25 18:16:58,134 INFO L902 garLoopResultBuilder]: At program point L135(lines 127 137) the Hoare annotation is: true [2022-11-25 18:16:58,134 INFO L895 garLoopResultBuilder]: At program point L965(lines 916 966) the Hoare annotation is: false [2022-11-25 18:16:58,134 INFO L902 garLoopResultBuilder]: At program point L160(lines 141 163) the Hoare annotation is: true [2022-11-25 18:16:58,135 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 18:16:58,135 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 18:16:58,135 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 18:16:58,135 INFO L895 garLoopResultBuilder]: At program point L887(lines 883 889) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 18:16:58,135 INFO L895 garLoopResultBuilder]: At program point L173(lines 168 175) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 18:16:58,135 INFO L899 garLoopResultBuilder]: For program point L937(lines 937 943) no Hoare annotation was computed. [2022-11-25 18:16:58,136 INFO L899 garLoopResultBuilder]: For program point L937-1(lines 937 943) no Hoare annotation was computed. [2022-11-25 18:16:58,136 INFO L895 garLoopResultBuilder]: At program point L962(lines 917 964) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse7 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse7 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2022-11-25 18:16:58,136 INFO L895 garLoopResultBuilder]: At program point L929(line 929) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse7 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 .cse7 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse7 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2022-11-25 18:16:58,136 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 18:16:58,137 INFO L895 garLoopResultBuilder]: At program point L868(lines 863 870) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2022-11-25 18:16:58,137 INFO L899 garLoopResultBuilder]: For program point L955(lines 955 959) no Hoare annotation was computed. [2022-11-25 18:16:58,137 INFO L895 garLoopResultBuilder]: At program point L955-2(lines 947 960) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2022-11-25 18:16:58,137 INFO L899 garLoopResultBuilder]: For program point L918(lines 917 964) no Hoare annotation was computed. [2022-11-25 18:16:58,137 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 960) no Hoare annotation was computed. [2022-11-25 18:16:58,138 INFO L895 garLoopResultBuilder]: At program point L939(line 939) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2022-11-25 18:16:58,138 INFO L902 garLoopResultBuilder]: At program point L968(lines 907 972) the Hoare annotation is: true [2022-11-25 18:16:58,138 INFO L895 garLoopResultBuilder]: At program point L902(lines 897 905) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 18:16:58,138 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 721 745) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-25 18:16:58,139 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (.cse1 (not (<= ~waterLevel~0 1))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 18:16:58,139 INFO L899 garLoopResultBuilder]: For program point L669(lines 669 675) no Hoare annotation was computed. [2022-11-25 18:16:58,139 INFO L895 garLoopResultBuilder]: At program point L859(lines 844 862) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= 2 ~waterLevel~0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (not (<= ~waterLevel~0 2)) .cse1)) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 18:16:58,139 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 737) no Hoare annotation was computed. [2022-11-25 18:16:58,139 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 742) no Hoare annotation was computed. [2022-11-25 18:16:58,139 INFO L899 garLoopResultBuilder]: For program point L853(lines 853 857) no Hoare annotation was computed. [2022-11-25 18:16:58,140 INFO L899 garLoopResultBuilder]: For program point L853-2(lines 853 857) no Hoare annotation was computed. [2022-11-25 18:16:58,140 INFO L895 garLoopResultBuilder]: At program point L777(lines 772 779) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2)) .cse0) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 18:16:58,140 INFO L895 garLoopResultBuilder]: At program point L740(line 740) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) .cse0 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (<= ~waterLevel~0 2)) .cse0))) [2022-11-25 18:16:58,140 INFO L899 garLoopResultBuilder]: For program point L740-1(lines 721 745) no Hoare annotation was computed. [2022-11-25 18:16:58,141 INFO L895 garLoopResultBuilder]: At program point L674(lines 665 678) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) (not (<= ~waterLevel~0 2)) .cse2))) [2022-11-25 18:16:58,141 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 721 745) no Hoare annotation was computed. [2022-11-25 18:16:58,141 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 600 611) no Hoare annotation was computed. [2022-11-25 18:16:58,141 INFO L899 garLoopResultBuilder]: For program point L604-1(lines 600 611) no Hoare annotation was computed. [2022-11-25 18:16:58,141 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 600 611) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse2 (not (<= |old(~waterLevel~0)| 2))) (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1 .cse2))) [2022-11-25 18:16:58,141 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 799 807) no Hoare annotation was computed. [2022-11-25 18:16:58,142 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 799 807) the Hoare annotation is: true [2022-11-25 18:16:58,142 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 799 807) no Hoare annotation was computed. [2022-11-25 18:16:58,145 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:16:58,147 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 18:16:58,213 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 06:16:58 BoogieIcfgContainer [2022-11-25 18:16:58,213 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 18:16:58,214 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 18:16:58,214 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 18:16:58,214 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 18:16:58,215 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:16:40" (3/4) ... [2022-11-25 18:16:58,218 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 18:16:58,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 18:16:58,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 18:16:58,230 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 18:16:58,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 18:16:58,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 18:16:58,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 18:16:58,231 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-25 18:16:58,239 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-11-25 18:16:58,242 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 18:16:58,242 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 18:16:58,243 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:16:58,243 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 18:16:58,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 18:16:58,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 18:16:58,274 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 18:16:58,275 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2022-11-25 18:16:58,279 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) [2022-11-25 18:16:58,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 18:16:58,280 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) [2022-11-25 18:16:58,281 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) [2022-11-25 18:16:58,282 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-11-25 18:16:58,282 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 18:16:58,283 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) [2022-11-25 18:16:58,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 18:16:58,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 18:16:58,284 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-25 18:16:58,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 18:16:58,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-25 18:16:58,285 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-25 18:16:58,327 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 18:16:58,327 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 18:16:58,328 INFO L158 Benchmark]: Toolchain (without parser) took 19465.13ms. Allocated memory was 148.9MB in the beginning and 247.5MB in the end (delta: 98.6MB). Free memory was 116.2MB in the beginning and 82.2MB in the end (delta: 34.0MB). Peak memory consumption was 134.5MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,328 INFO L158 Benchmark]: CDTParser took 0.27ms. Allocated memory is still 148.9MB. Free memory is still 117.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 18:16:58,329 INFO L158 Benchmark]: CACSL2BoogieTranslator took 446.17ms. Allocated memory is still 148.9MB. Free memory was 116.1MB in the beginning and 97.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,329 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.28ms. Allocated memory is still 148.9MB. Free memory was 97.2MB in the beginning and 94.6MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,329 INFO L158 Benchmark]: Boogie Preprocessor took 30.60ms. Allocated memory is still 148.9MB. Free memory was 94.6MB in the beginning and 93.2MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 18:16:58,330 INFO L158 Benchmark]: RCFGBuilder took 631.93ms. Allocated memory is still 148.9MB. Free memory was 93.2MB in the beginning and 76.5MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,331 INFO L158 Benchmark]: TraceAbstraction took 18186.85ms. Allocated memory was 148.9MB in the beginning and 247.5MB in the end (delta: 98.6MB). Free memory was 75.8MB in the beginning and 87.5MB in the end (delta: -11.7MB). Peak memory consumption was 105.5MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,331 INFO L158 Benchmark]: Witness Printer took 113.60ms. Allocated memory is still 247.5MB. Free memory was 87.5MB in the beginning and 82.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-25 18:16:58,333 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27ms. Allocated memory is still 148.9MB. Free memory is still 117.3MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 446.17ms. Allocated memory is still 148.9MB. Free memory was 116.1MB in the beginning and 97.2MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.28ms. Allocated memory is still 148.9MB. Free memory was 97.2MB in the beginning and 94.6MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.60ms. Allocated memory is still 148.9MB. Free memory was 94.6MB in the beginning and 93.2MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 631.93ms. Allocated memory is still 148.9MB. Free memory was 93.2MB in the beginning and 76.5MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 18186.85ms. Allocated memory was 148.9MB in the beginning and 247.5MB in the end (delta: 98.6MB). Free memory was 75.8MB in the beginning and 87.5MB in the end (delta: -11.7MB). Peak memory consumption was 105.5MB. Max. memory is 16.1GB. * Witness Printer took 113.60ms. Allocated memory is still 247.5MB. Free memory was 87.5MB in the beginning and 82.2MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 91 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 18.0s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2230 SdHoareTripleChecker+Valid, 2.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2196 mSDsluCounter, 5024 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3820 mSDsCounter, 732 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3430 IncrementalHoareTripleChecker+Invalid, 4162 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 732 mSolverCounterUnsat, 1204 mSDtfsCounter, 3430 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 809 GetRequests, 639 SyntacticMatches, 10 SemanticMatches, 160 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1247 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=598occurred in iteration=10, InterpolantAutomatonStates: 141, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 11 MinimizatonAttempts, 263 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1392 PreInvPairs, 1665 NumberOfFragments, 2734 HoareAnnotationTreeSize, 1392 FomulaSimplifications, 2030 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 43 FomulaSimplificationsInter, 22119 FormulaSimplificationTreeSizeReductionInter, 6.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 3.3s InterpolantComputationTime, 941 NumberOfCodeBlocks, 941 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1190 ConstructedInterpolants, 0 QuantifiedInterpolants, 2450 SizeOfPredicates, 6 NumberOfNonLiveVariables, 863 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 602/699 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 588]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 788]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 176]: Loop Invariant Derived loop invariant: (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) == 2)) || 0 == systemActive) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 186]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS))) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || waterLevel == 1) || !(\old(waterLevel) <= 2))) && (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || ((((pumpRunning == 0 && waterLevel == \result) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || ((((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 61]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == \old(pumpRunning) && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || (((pumpRunning == 0 && waterLevel == \result) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && (((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || !(1 <= \old(pumpRunning))) || (((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((((pumpRunning == 0 && waterLevel == \result) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((pumpRunning == \old(pumpRunning) && waterLevel == \result) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) == 2)) || 0 == systemActive) && (((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || 0 == systemActive) - InvariantResult [Line: 917]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && !(0 == systemActive))) || (((((pumpRunning == 0 && 2 == waterLevel) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 772]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 863]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && waterLevel <= 1) && splverifierCounter == 0) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) - InvariantResult [Line: 897]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(waterLevel <= 1)) || 0 == systemActive) || \result == 1) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || 0 == systemActive) || !(\old(waterLevel) <= 2)) && (((((!(\old(waterLevel) <= 1) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 <= \old(pumpRunning)) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) == 1) || !(1 <= \old(pumpRunning))) || (((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 844]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && 2 == waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(waterLevel <= 2)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 1)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) RESULT: Ultimate proved your program to be correct! [2022-11-25 18:16:58,375 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c4aa45b9-e62c-43e5-8264-a7709f9c4376/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE