./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 17:22:30,895 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 17:22:30,897 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 17:22:30,914 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 17:22:30,915 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 17:22:30,916 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 17:22:30,918 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 17:22:30,919 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 17:22:30,921 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 17:22:30,922 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 17:22:30,923 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 17:22:30,924 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 17:22:30,925 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 17:22:30,926 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 17:22:30,927 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 17:22:30,929 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 17:22:30,930 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 17:22:30,931 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 17:22:30,932 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 17:22:30,934 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 17:22:30,935 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 17:22:30,937 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 17:22:30,938 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 17:22:30,939 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 17:22:30,942 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 17:22:30,943 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 17:22:30,943 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 17:22:30,944 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 17:22:30,945 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 17:22:30,946 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 17:22:30,946 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 17:22:30,947 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 17:22:30,948 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 17:22:30,949 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 17:22:30,950 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 17:22:30,951 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 17:22:30,951 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 17:22:30,952 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 17:22:30,952 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 17:22:30,953 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 17:22:30,954 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 17:22:30,955 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 17:22:30,977 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 17:22:30,977 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 17:22:30,977 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 17:22:30,978 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 17:22:30,978 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 17:22:30,979 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 17:22:30,979 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 17:22:30,980 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 17:22:30,980 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 17:22:30,980 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 17:22:30,981 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 17:22:30,981 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 17:22:30,981 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 17:22:30,982 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 17:22:30,982 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 17:22:30,982 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 17:22:30,983 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 17:22:30,983 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 17:22:30,983 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 17:22:30,983 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 17:22:30,984 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 17:22:30,984 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 17:22:30,984 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 17:22:30,985 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 17:22:30,985 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 17:22:30,985 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 17:22:30,986 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 17:22:30,986 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 17:22:30,986 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 17:22:30,987 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 17:22:30,987 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 17:22:30,987 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 17:22:30,987 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 17:22:30,988 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 17:22:30,988 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2022-11-25 17:22:31,323 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 17:22:31,348 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 17:22:31,352 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 17:22:31,354 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 17:22:31,354 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 17:22:31,356 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2022-11-25 17:22:34,403 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 17:22:34,627 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 17:22:34,628 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2022-11-25 17:22:34,642 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/data/a0b822726/5da286a7a36e46eeb63e38ccb65c331d/FLAGef658f5d6 [2022-11-25 17:22:34,667 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/data/a0b822726/5da286a7a36e46eeb63e38ccb65c331d [2022-11-25 17:22:34,683 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 17:22:34,684 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 17:22:34,686 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 17:22:34,686 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 17:22:34,690 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 17:22:34,691 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 05:22:34" (1/1) ... [2022-11-25 17:22:34,692 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@eec499b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:34, skipping insertion in model container [2022-11-25 17:22:34,693 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 05:22:34" (1/1) ... [2022-11-25 17:22:34,701 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 17:22:34,742 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 17:22:34,964 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2022-11-25 17:22:35,028 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 17:22:35,043 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 17:22:35,120 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2022-11-25 17:22:35,170 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 17:22:35,190 INFO L208 MainTranslator]: Completed translation [2022-11-25 17:22:35,190 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35 WrapperNode [2022-11-25 17:22:35,190 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 17:22:35,192 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 17:22:35,192 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 17:22:35,192 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 17:22:35,200 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,215 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,247 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 214 [2022-11-25 17:22:35,248 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 17:22:35,249 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 17:22:35,249 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 17:22:35,249 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 17:22:35,259 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,260 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,278 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,278 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,283 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,301 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,302 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,304 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,320 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 17:22:35,322 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 17:22:35,322 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 17:22:35,322 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 17:22:35,323 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (1/1) ... [2022-11-25 17:22:35,330 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 17:22:35,366 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 17:22:35,381 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 17:22:35,418 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 17:22:35,446 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 17:22:35,446 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 17:22:35,446 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 17:22:35,446 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 17:22:35,447 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 17:22:35,447 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 17:22:35,447 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 17:22:35,447 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 17:22:35,447 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 17:22:35,448 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 17:22:35,448 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-25 17:22:35,448 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-25 17:22:35,448 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-25 17:22:35,449 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-25 17:22:35,449 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-25 17:22:35,450 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-25 17:22:35,450 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-25 17:22:35,450 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 17:22:35,450 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 17:22:35,451 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 17:22:35,451 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 17:22:35,451 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 17:22:35,574 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 17:22:35,576 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 17:22:36,026 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 17:22:36,036 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 17:22:36,036 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 17:22:36,042 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:22:36 BoogieIcfgContainer [2022-11-25 17:22:36,042 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 17:22:36,046 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 17:22:36,046 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 17:22:36,050 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 17:22:36,050 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 05:22:34" (1/3) ... [2022-11-25 17:22:36,051 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c709efb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 05:22:36, skipping insertion in model container [2022-11-25 17:22:36,052 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 05:22:35" (2/3) ... [2022-11-25 17:22:36,052 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1c709efb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 05:22:36, skipping insertion in model container [2022-11-25 17:22:36,052 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:22:36" (3/3) ... [2022-11-25 17:22:36,054 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2022-11-25 17:22:36,074 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 17:22:36,075 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 17:22:36,144 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 17:22:36,151 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2d452dae, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 17:22:36,151 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 17:22:36,155 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-25 17:22:36,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-25 17:22:36,166 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:36,167 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:36,168 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:36,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:36,174 INFO L85 PathProgramCache]: Analyzing trace with hash -484637396, now seen corresponding path program 1 times [2022-11-25 17:22:36,185 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:36,185 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853889787] [2022-11-25 17:22:36,186 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:36,186 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:36,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-25 17:22:36,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 17:22:36,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,391 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:36,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:36,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853889787] [2022-11-25 17:22:36,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853889787] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:36,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:36,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 17:22:36,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354841153] [2022-11-25 17:22:36,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:36,402 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 17:22:36,403 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:36,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 17:22:36,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 17:22:36,449 INFO L87 Difference]: Start difference. First operand has 106 states, 79 states have (on average 1.3544303797468353) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 17:22:36,544 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:36,546 INFO L93 Difference]: Finished difference Result 203 states and 272 transitions. [2022-11-25 17:22:36,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 17:22:36,549 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-25 17:22:36,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:36,561 INFO L225 Difference]: With dead ends: 203 [2022-11-25 17:22:36,561 INFO L226 Difference]: Without dead ends: 97 [2022-11-25 17:22:36,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 17:22:36,579 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:36,580 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 17:22:36,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-25 17:22:36,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-11-25 17:22:36,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 72 states have (on average 1.2916666666666667) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-25 17:22:36,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 124 transitions. [2022-11-25 17:22:36,662 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 124 transitions. Word has length 32 [2022-11-25 17:22:36,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:36,663 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 124 transitions. [2022-11-25 17:22:36,663 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 17:22:36,664 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 124 transitions. [2022-11-25 17:22:36,672 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-11-25 17:22:36,673 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:36,674 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:36,674 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 17:22:36,675 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:36,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:36,678 INFO L85 PathProgramCache]: Analyzing trace with hash -1885221865, now seen corresponding path program 1 times [2022-11-25 17:22:36,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:36,679 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [378067396] [2022-11-25 17:22:36,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:36,680 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:36,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-25 17:22:36,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-25 17:22:36,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:36,852 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:36,852 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:36,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [378067396] [2022-11-25 17:22:36,853 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [378067396] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:36,853 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:36,853 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 17:22:36,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894250002] [2022-11-25 17:22:36,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:36,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 17:22:36,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:36,857 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 17:22:36,857 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 17:22:36,858 INFO L87 Difference]: Start difference. First operand 97 states and 124 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 17:22:36,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:36,882 INFO L93 Difference]: Finished difference Result 154 states and 196 transitions. [2022-11-25 17:22:36,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 17:22:36,883 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2022-11-25 17:22:36,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:36,885 INFO L225 Difference]: With dead ends: 154 [2022-11-25 17:22:36,885 INFO L226 Difference]: Without dead ends: 88 [2022-11-25 17:22:36,886 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 17:22:36,888 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 17 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:36,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 17:22:36,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-11-25 17:22:36,953 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-11-25 17:22:36,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 66 states have (on average 1.303030303030303) internal successors, (86), 74 states have internal predecessors, (86), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-25 17:22:36,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 112 transitions. [2022-11-25 17:22:36,955 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 112 transitions. Word has length 33 [2022-11-25 17:22:36,955 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:36,956 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 112 transitions. [2022-11-25 17:22:36,956 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-25 17:22:36,956 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 112 transitions. [2022-11-25 17:22:36,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-25 17:22:36,957 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:36,957 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:36,958 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 17:22:36,958 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:36,962 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:36,963 INFO L85 PathProgramCache]: Analyzing trace with hash 2024045384, now seen corresponding path program 1 times [2022-11-25 17:22:36,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:36,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560023226] [2022-11-25 17:22:36,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:36,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:37,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 17:22:37,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-25 17:22:37,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,252 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:37,253 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:37,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560023226] [2022-11-25 17:22:37,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [560023226] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:37,253 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:37,253 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 17:22:37,254 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277543319] [2022-11-25 17:22:37,254 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:37,254 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 17:22:37,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:37,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 17:22:37,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:22:37,256 INFO L87 Difference]: Start difference. First operand 88 states and 112 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 17:22:37,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:37,397 INFO L93 Difference]: Finished difference Result 215 states and 278 transitions. [2022-11-25 17:22:37,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 17:22:37,398 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2022-11-25 17:22:37,398 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:37,403 INFO L225 Difference]: With dead ends: 215 [2022-11-25 17:22:37,403 INFO L226 Difference]: Without dead ends: 135 [2022-11-25 17:22:37,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 17:22:37,406 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 173 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:37,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 380 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 17:22:37,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135 states. [2022-11-25 17:22:37,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135 to 132. [2022-11-25 17:22:37,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 132 states, 99 states have (on average 1.3232323232323233) internal successors, (131), 110 states have internal predecessors, (131), 19 states have call successors, (19), 13 states have call predecessors, (19), 13 states have return successors, (20), 15 states have call predecessors, (20), 19 states have call successors, (20) [2022-11-25 17:22:37,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 132 states to 132 states and 170 transitions. [2022-11-25 17:22:37,444 INFO L78 Accepts]: Start accepts. Automaton has 132 states and 170 transitions. Word has length 38 [2022-11-25 17:22:37,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:37,445 INFO L495 AbstractCegarLoop]: Abstraction has 132 states and 170 transitions. [2022-11-25 17:22:37,445 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 17:22:37,445 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 170 transitions. [2022-11-25 17:22:37,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-25 17:22:37,449 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:37,450 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:37,450 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 17:22:37,450 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:37,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:37,451 INFO L85 PathProgramCache]: Analyzing trace with hash 1147378310, now seen corresponding path program 1 times [2022-11-25 17:22:37,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:37,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1074727610] [2022-11-25 17:22:37,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:37,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:37,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-25 17:22:37,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-25 17:22:37,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,602 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-25 17:22:37,603 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:37,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1074727610] [2022-11-25 17:22:37,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1074727610] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:37,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:37,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 17:22:37,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1418612031] [2022-11-25 17:22:37,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:37,605 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 17:22:37,605 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:37,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 17:22:37,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 17:22:37,606 INFO L87 Difference]: Start difference. First operand 132 states and 170 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 17:22:37,818 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:37,818 INFO L93 Difference]: Finished difference Result 309 states and 407 transitions. [2022-11-25 17:22:37,819 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-25 17:22:37,819 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-11-25 17:22:37,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:37,821 INFO L225 Difference]: With dead ends: 309 [2022-11-25 17:22:37,822 INFO L226 Difference]: Without dead ends: 185 [2022-11-25 17:22:37,823 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-25 17:22:37,825 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 83 mSDsluCounter, 390 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 510 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:37,826 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 510 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 17:22:37,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2022-11-25 17:22:37,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 175. [2022-11-25 17:22:37,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 175 states, 132 states have (on average 1.2575757575757576) internal successors, (166), 143 states have internal predecessors, (166), 23 states have call successors, (23), 19 states have call predecessors, (23), 19 states have return successors, (29), 22 states have call predecessors, (29), 23 states have call successors, (29) [2022-11-25 17:22:37,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 218 transitions. [2022-11-25 17:22:37,854 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 218 transitions. Word has length 41 [2022-11-25 17:22:37,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:37,855 INFO L495 AbstractCegarLoop]: Abstraction has 175 states and 218 transitions. [2022-11-25 17:22:37,855 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 1 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-25 17:22:37,856 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 218 transitions. [2022-11-25 17:22:37,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-25 17:22:37,857 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:37,857 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:37,857 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 17:22:37,858 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:37,858 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:37,858 INFO L85 PathProgramCache]: Analyzing trace with hash 1262122641, now seen corresponding path program 1 times [2022-11-25 17:22:37,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:37,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [396976445] [2022-11-25 17:22:37,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:37,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:37,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-25 17:22:37,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-25 17:22:37,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:37,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-11-25 17:22:37,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:37,950 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:37,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:37,953 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [396976445] [2022-11-25 17:22:37,954 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [396976445] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:37,955 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:37,955 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 17:22:37,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [391781884] [2022-11-25 17:22:37,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:37,958 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 17:22:37,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:37,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 17:22:37,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 17:22:37,961 INFO L87 Difference]: Start difference. First operand 175 states and 218 transitions. Second operand has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 17:22:38,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:38,174 INFO L93 Difference]: Finished difference Result 369 states and 460 transitions. [2022-11-25 17:22:38,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 17:22:38,175 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 63 [2022-11-25 17:22:38,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:38,185 INFO L225 Difference]: With dead ends: 369 [2022-11-25 17:22:38,185 INFO L226 Difference]: Without dead ends: 202 [2022-11-25 17:22:38,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:22:38,196 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 96 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 256 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:38,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 256 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 17:22:38,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2022-11-25 17:22:38,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 198. [2022-11-25 17:22:38,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 198 states, 150 states have (on average 1.2466666666666666) internal successors, (187), 161 states have internal predecessors, (187), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-11-25 17:22:38,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 244 transitions. [2022-11-25 17:22:38,246 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 244 transitions. Word has length 63 [2022-11-25 17:22:38,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:38,247 INFO L495 AbstractCegarLoop]: Abstraction has 198 states and 244 transitions. [2022-11-25 17:22:38,247 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.0) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 17:22:38,247 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 244 transitions. [2022-11-25 17:22:38,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-25 17:22:38,248 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:38,248 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:38,248 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 17:22:38,249 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:38,249 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:38,249 INFO L85 PathProgramCache]: Analyzing trace with hash 1864989139, now seen corresponding path program 1 times [2022-11-25 17:22:38,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:38,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16041993] [2022-11-25 17:22:38,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:38,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:38,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 17:22:38,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 17:22:38,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:38,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-25 17:22:38,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,371 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:38,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:38,372 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16041993] [2022-11-25 17:22:38,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [16041993] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:38,372 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:38,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 17:22:38,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [889445240] [2022-11-25 17:22:38,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:38,373 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 17:22:38,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:38,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 17:22:38,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 17:22:38,374 INFO L87 Difference]: Start difference. First operand 198 states and 244 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 17:22:38,584 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:38,585 INFO L93 Difference]: Finished difference Result 398 states and 501 transitions. [2022-11-25 17:22:38,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:22:38,585 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-11-25 17:22:38,586 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:38,587 INFO L225 Difference]: With dead ends: 398 [2022-11-25 17:22:38,588 INFO L226 Difference]: Without dead ends: 208 [2022-11-25 17:22:38,589 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 17:22:38,590 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 69 mSDsluCounter, 301 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:38,590 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 392 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 17:22:38,591 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 208 states. [2022-11-25 17:22:38,613 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 208 to 201. [2022-11-25 17:22:38,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 201 states, 153 states have (on average 1.2418300653594772) internal successors, (190), 164 states have internal predecessors, (190), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-11-25 17:22:38,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 201 states to 201 states and 247 transitions. [2022-11-25 17:22:38,615 INFO L78 Accepts]: Start accepts. Automaton has 201 states and 247 transitions. Word has length 60 [2022-11-25 17:22:38,615 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:38,616 INFO L495 AbstractCegarLoop]: Abstraction has 201 states and 247 transitions. [2022-11-25 17:22:38,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 17:22:38,616 INFO L276 IsEmpty]: Start isEmpty. Operand 201 states and 247 transitions. [2022-11-25 17:22:38,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-25 17:22:38,617 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:38,617 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:38,617 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 17:22:38,618 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:38,618 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:38,618 INFO L85 PathProgramCache]: Analyzing trace with hash -506750123, now seen corresponding path program 1 times [2022-11-25 17:22:38,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:38,619 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [926258766] [2022-11-25 17:22:38,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:38,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:38,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 17:22:38,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 17:22:38,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:38,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-25 17:22:38,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:38,746 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:38,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:38,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [926258766] [2022-11-25 17:22:38,747 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [926258766] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:38,747 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:38,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 17:22:38,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1367472347] [2022-11-25 17:22:38,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:38,748 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 17:22:38,748 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:38,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 17:22:38,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-25 17:22:38,749 INFO L87 Difference]: Start difference. First operand 201 states and 247 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 17:22:38,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:38,991 INFO L93 Difference]: Finished difference Result 404 states and 506 transitions. [2022-11-25 17:22:38,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:22:38,992 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 60 [2022-11-25 17:22:38,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:38,995 INFO L225 Difference]: With dead ends: 404 [2022-11-25 17:22:38,995 INFO L226 Difference]: Without dead ends: 211 [2022-11-25 17:22:38,996 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=65, Unknown=0, NotChecked=0, Total=90 [2022-11-25 17:22:39,004 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 116 mSDsluCounter, 335 mSDsCounter, 0 mSdLazyCounter, 178 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 178 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:39,005 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 424 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 178 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 17:22:39,008 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-11-25 17:22:39,053 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 203. [2022-11-25 17:22:39,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 203 states, 155 states have (on average 1.238709677419355) internal successors, (192), 166 states have internal predecessors, (192), 25 states have call successors, (25), 19 states have call predecessors, (25), 22 states have return successors, (32), 26 states have call predecessors, (32), 25 states have call successors, (32) [2022-11-25 17:22:39,056 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 203 states to 203 states and 249 transitions. [2022-11-25 17:22:39,056 INFO L78 Accepts]: Start accepts. Automaton has 203 states and 249 transitions. Word has length 60 [2022-11-25 17:22:39,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:39,058 INFO L495 AbstractCegarLoop]: Abstraction has 203 states and 249 transitions. [2022-11-25 17:22:39,059 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 17:22:39,059 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 249 transitions. [2022-11-25 17:22:39,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-25 17:22:39,061 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:39,061 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:39,061 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 17:22:39,062 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:39,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:39,062 INFO L85 PathProgramCache]: Analyzing trace with hash 879453271, now seen corresponding path program 1 times [2022-11-25 17:22:39,063 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:39,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [869622743] [2022-11-25 17:22:39,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:39,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:39,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-25 17:22:39,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-25 17:22:39,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:39,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-25 17:22:39,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,248 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:39,248 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:39,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [869622743] [2022-11-25 17:22:39,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [869622743] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:39,249 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:39,249 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 17:22:39,249 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2134251019] [2022-11-25 17:22:39,249 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:39,250 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 17:22:39,250 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:39,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 17:22:39,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 17:22:39,251 INFO L87 Difference]: Start difference. First operand 203 states and 249 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 17:22:39,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:39,594 INFO L93 Difference]: Finished difference Result 611 states and 776 transitions. [2022-11-25 17:22:39,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 17:22:39,595 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2022-11-25 17:22:39,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:39,600 INFO L225 Difference]: With dead ends: 611 [2022-11-25 17:22:39,601 INFO L226 Difference]: Without dead ends: 416 [2022-11-25 17:22:39,602 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 17:22:39,603 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 236 mSDsluCounter, 190 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 333 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:39,606 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 333 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 17:22:39,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 416 states. [2022-11-25 17:22:39,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 416 to 414. [2022-11-25 17:22:39,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 414 states, 315 states have (on average 1.2158730158730158) internal successors, (383), 334 states have internal predecessors, (383), 54 states have call successors, (54), 44 states have call predecessors, (54), 44 states have return successors, (74), 53 states have call predecessors, (74), 54 states have call successors, (74) [2022-11-25 17:22:39,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 414 states to 414 states and 511 transitions. [2022-11-25 17:22:39,663 INFO L78 Accepts]: Start accepts. Automaton has 414 states and 511 transitions. Word has length 60 [2022-11-25 17:22:39,663 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:39,663 INFO L495 AbstractCegarLoop]: Abstraction has 414 states and 511 transitions. [2022-11-25 17:22:39,664 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 4 states have internal predecessors, (49), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-25 17:22:39,664 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 511 transitions. [2022-11-25 17:22:39,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-25 17:22:39,665 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:39,665 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:39,665 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 17:22:39,665 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:39,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:39,666 INFO L85 PathProgramCache]: Analyzing trace with hash -269338319, now seen corresponding path program 1 times [2022-11-25 17:22:39,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:39,666 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1780820856] [2022-11-25 17:22:39,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:39,667 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:39,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 17:22:39,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-25 17:22:39,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2022-11-25 17:22:39,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:39,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,946 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-11-25 17:22:39,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:39,948 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 17:22:39,949 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:39,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1780820856] [2022-11-25 17:22:39,949 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1780820856] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 17:22:39,949 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 17:22:39,950 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-25 17:22:39,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [666908833] [2022-11-25 17:22:39,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 17:22:39,951 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-25 17:22:39,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:39,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-25 17:22:39,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-25 17:22:39,952 INFO L87 Difference]: Start difference. First operand 414 states and 511 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-25 17:22:41,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:41,006 INFO L93 Difference]: Finished difference Result 1086 states and 1392 transitions. [2022-11-25 17:22:41,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-25 17:22:41,007 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 64 [2022-11-25 17:22:41,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:41,012 INFO L225 Difference]: With dead ends: 1086 [2022-11-25 17:22:41,012 INFO L226 Difference]: Without dead ends: 768 [2022-11-25 17:22:41,014 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 45 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2022-11-25 17:22:41,015 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 734 mSDsluCounter, 446 mSDsCounter, 0 mSdLazyCounter, 624 mSolverCounterSat, 279 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 742 SdHoareTripleChecker+Valid, 556 SdHoareTripleChecker+Invalid, 903 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 279 IncrementalHoareTripleChecker+Valid, 624 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:41,016 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [742 Valid, 556 Invalid, 903 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [279 Valid, 624 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-25 17:22:41,017 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 768 states. [2022-11-25 17:22:41,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 768 to 610. [2022-11-25 17:22:41,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 610 states, 463 states have (on average 1.205183585313175) internal successors, (558), 494 states have internal predecessors, (558), 79 states have call successors, (79), 60 states have call predecessors, (79), 67 states have return successors, (112), 77 states have call predecessors, (112), 79 states have call successors, (112) [2022-11-25 17:22:41,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 610 states to 610 states and 749 transitions. [2022-11-25 17:22:41,107 INFO L78 Accepts]: Start accepts. Automaton has 610 states and 749 transitions. Word has length 64 [2022-11-25 17:22:41,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:41,107 INFO L495 AbstractCegarLoop]: Abstraction has 610 states and 749 transitions. [2022-11-25 17:22:41,107 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 8 states have internal predecessors, (51), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-25 17:22:41,107 INFO L276 IsEmpty]: Start isEmpty. Operand 610 states and 749 transitions. [2022-11-25 17:22:41,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-25 17:22:41,109 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 17:22:41,109 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:41,110 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 17:22:41,110 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 17:22:41,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 17:22:41,110 INFO L85 PathProgramCache]: Analyzing trace with hash 1748536662, now seen corresponding path program 1 times [2022-11-25 17:22:41,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 17:22:41,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452320892] [2022-11-25 17:22:41,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:41,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 17:22:41,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 17:22:41,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-25 17:22:41,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-25 17:22:41,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-25 17:22:41,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 17:22:41,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2022-11-25 17:22:41,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2022-11-25 17:22:41,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-25 17:22:41,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 17:22:41,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-11-25 17:22:41,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,334 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-25 17:22:41,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 17:22:41,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452320892] [2022-11-25 17:22:41,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452320892] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 17:22:41,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1517692517] [2022-11-25 17:22:41,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 17:22:41,335 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 17:22:41,335 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 17:22:41,342 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 17:22:41,372 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 17:22:41,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 17:22:41,511 INFO L263 TraceCheckSpWp]: Trace formula consists of 363 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-25 17:22:41,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 17:22:41,712 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 29 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 17:22:41,712 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 17:22:41,918 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-25 17:22:41,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1517692517] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 17:22:41,919 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 17:22:41,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2022-11-25 17:22:41,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119258874] [2022-11-25 17:22:41,919 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 17:22:41,920 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-11-25 17:22:41,920 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 17:22:41,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-11-25 17:22:41,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2022-11-25 17:22:41,921 INFO L87 Difference]: Start difference. First operand 610 states and 749 transitions. Second operand has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-11-25 17:22:43,625 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 17:22:43,626 INFO L93 Difference]: Finished difference Result 1340 states and 1699 transitions. [2022-11-25 17:22:43,626 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-11-25 17:22:43,627 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) Word has length 108 [2022-11-25 17:22:43,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 17:22:43,628 INFO L225 Difference]: With dead ends: 1340 [2022-11-25 17:22:43,628 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 17:22:43,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 285 GetRequests, 241 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 407 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2022-11-25 17:22:43,634 INFO L413 NwaCegarLoop]: 178 mSDtfsCounter, 463 mSDsluCounter, 1360 mSDsCounter, 0 mSdLazyCounter, 1393 mSolverCounterSat, 217 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 464 SdHoareTripleChecker+Valid, 1538 SdHoareTripleChecker+Invalid, 1610 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 217 IncrementalHoareTripleChecker+Valid, 1393 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-25 17:22:43,636 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [464 Valid, 1538 Invalid, 1610 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [217 Valid, 1393 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-25 17:22:43,636 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 17:22:43,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 17:22:43,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 17:22:43,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 17:22:43,638 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2022-11-25 17:22:43,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 17:22:43,638 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 17:22:43,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.875) internal successors, (126), 11 states have internal predecessors, (126), 5 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 5 states have call successors, (20) [2022-11-25 17:22:43,639 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 17:22:43,639 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 17:22:43,642 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 17:22:43,656 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-25 17:22:43,849 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 17:22:43,851 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 17:22:49,320 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 17:22:49,320 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-11-25 17:22:49,320 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2022-11-25 17:22:49,320 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2022-11-25 17:22:49,321 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2022-11-25 17:22:49,321 INFO L902 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 758 769) the Hoare annotation is: true [2022-11-25 17:22:49,321 INFO L899 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2022-11-25 17:22:49,321 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2022-11-25 17:22:49,321 INFO L902 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2022-11-25 17:22:49,321 INFO L899 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2022-11-25 17:22:49,321 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2022-11-25 17:22:49,321 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 827 856) the Hoare annotation is: true [2022-11-25 17:22:49,322 INFO L902 garLoopResultBuilder]: At program point L852(lines 827 856) the Hoare annotation is: true [2022-11-25 17:22:49,322 INFO L899 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2022-11-25 17:22:49,322 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2022-11-25 17:22:49,322 INFO L902 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2022-11-25 17:22:49,322 INFO L899 garLoopResultBuilder]: For program point L838(line 838) no Hoare annotation was computed. [2022-11-25 17:22:49,322 INFO L902 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2022-11-25 17:22:49,323 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2) (let ((.cse5 (<= ~waterLevel~0 2))) (or .cse3 (and .cse4 .cse5 .cse6) .cse7 .cse1 (and .cse8 .cse5 .cse6) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse3 (and .cse8 .cse9 .cse6) .cse7 .cse1 .cse2 (and .cse4 .cse9 .cse6))) (or .cse0 (and .cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2022-11-25 17:22:49,323 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2022-11-25 17:22:49,323 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (not .cse2)) (or .cse3 .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1))) [2022-11-25 17:22:49,323 INFO L895 garLoopResultBuilder]: At program point L593-1(lines 574 598) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= 0 ~systemActive~0)) (.cse1 (not (<= |old(~waterLevel~0)| 2))) (.cse3 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 (not .cse2)) (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse3 .cse4) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse4) .cse1)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse3 .cse6 .cse7) .cse2 .cse1 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse2 .cse1 (not (<= 2 |old(~waterLevel~0)|)) (and .cse3 .cse9 .cse7))))) [2022-11-25 17:22:49,323 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2022-11-25 17:22:49,324 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 513 539) no Hoare annotation was computed. [2022-11-25 17:22:49,324 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2022-11-25 17:22:49,324 INFO L899 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2022-11-25 17:22:49,324 INFO L895 garLoopResultBuilder]: At program point L738-2(lines 734 745) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 17:22:49,324 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2022-11-25 17:22:49,325 INFO L895 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 .cse2 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse2 .cse0 (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2022-11-25 17:22:49,325 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2022-11-25 17:22:49,326 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2022-11-25 17:22:49,326 INFO L895 garLoopResultBuilder]: At program point L954-1(lines 946 974) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 0)) (.cse9 (<= 1 ~switchedOnBeforeTS~0))) (and (or .cse0 .cse1 .cse2 (not .cse3)) (or .cse0 (and (<= |timeShift_getWaterLevel_#res#1| 2) (< 1 |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1|) (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse2 .cse4) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse5) (and .cse6 .cse5) .cse2)) (let ((.cse8 (<= ~waterLevel~0 2))) (or .cse7 (and .cse1 .cse8 .cse9) .cse3 .cse2 (and .cse6 .cse8 .cse9) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse10 (= ~waterLevel~0 1))) (or .cse7 (and .cse6 .cse10 .cse9) .cse3 .cse2 .cse4 (and .cse1 .cse10 .cse9))))) [2022-11-25 17:22:49,326 INFO L899 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2022-11-25 17:22:49,326 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 513 539) the Hoare annotation is: (let ((.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2) (or .cse3 .cse4 .cse2 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 .cse2 .cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-25 17:22:49,327 INFO L895 garLoopResultBuilder]: At program point L943(lines 936 945) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse3)))) [2022-11-25 17:22:49,327 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 17:22:49,327 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2022-11-25 17:22:49,327 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2022-11-25 17:22:49,328 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 17:22:49,328 INFO L895 garLoopResultBuilder]: At program point L807(lines 802 810) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse7 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse10 (not (<= 2 |old(~waterLevel~0)|)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 (and .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2 (not .cse3)) .cse4)) (let ((.cse6 (<= ~waterLevel~0 2))) (or .cse5 (and .cse1 .cse6 .cse7) .cse3 .cse4 (and .cse8 .cse6 .cse7) (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (let ((.cse9 (= ~waterLevel~0 1))) (or .cse5 (and .cse8 .cse9 .cse7) .cse3 .cse4 .cse10 (and .cse1 .cse9 .cse7))) (or .cse0 .cse4 (and (<= |timeShift_getWaterLevel_#res#1| 2) (<= 2 |timeShift_getWaterLevel_#res#1|)) .cse10))) [2022-11-25 17:22:49,328 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse0 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or .cse1 (and .cse2 (= ~waterLevel~0 1) .cse3) .cse4 .cse0 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse4 .cse0 (and .cse2 (<= ~waterLevel~0 2) .cse3) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-25 17:22:49,328 INFO L899 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2022-11-25 17:22:49,329 INFO L895 garLoopResultBuilder]: At program point L1006(lines 1001 1009) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 17:22:49,329 INFO L902 garLoopResultBuilder]: At program point L494(lines 431 498) the Hoare annotation is: true [2022-11-25 17:22:49,329 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2022-11-25 17:22:49,329 INFO L899 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2022-11-25 17:22:49,329 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,329 INFO L895 garLoopResultBuilder]: At program point L998(lines 994 1000) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 17:22:49,330 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,330 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 17:22:49,330 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 17:22:49,330 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 17:22:49,330 INFO L895 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2022-11-25 17:22:49,330 INFO L895 garLoopResultBuilder]: At program point L933(lines 928 935) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 17:22:49,331 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 17:22:49,331 INFO L895 garLoopResultBuilder]: At program point L991(lines 987 993) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 17:22:49,331 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2022-11-25 17:22:49,331 INFO L895 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,331 INFO L899 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2022-11-25 17:22:49,331 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2022-11-25 17:22:49,332 INFO L895 garLoopResultBuilder]: At program point L727(lines 722 729) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,332 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2022-11-25 17:22:49,332 INFO L895 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,332 INFO L895 garLoopResultBuilder]: At program point L719(lines 707 721) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0)) [2022-11-25 17:22:49,332 INFO L899 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2022-11-25 17:22:49,333 INFO L895 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5))) [2022-11-25 17:22:49,333 INFO L899 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2022-11-25 17:22:49,333 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2022-11-25 17:22:49,333 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2022-11-25 17:22:49,333 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2022-11-25 17:22:49,333 INFO L902 garLoopResultBuilder]: At program point L897(lines 889 899) the Hoare annotation is: true [2022-11-25 17:22:49,333 INFO L899 garLoopResultBuilder]: For program point L443(lines 443 447) no Hoare annotation was computed. [2022-11-25 17:22:49,334 INFO L902 garLoopResultBuilder]: At program point L922(lines 903 925) the Hoare annotation is: true [2022-11-25 17:22:49,334 INFO L895 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-25 17:22:49,334 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2022-11-25 17:22:49,334 INFO L899 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2022-11-25 17:22:49,334 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 746 757) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse2 (= 0 ~systemActive~0)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3))) [2022-11-25 17:22:49,335 INFO L895 garLoopResultBuilder]: At program point L820(lines 811 824) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse2) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2022-11-25 17:22:49,335 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)) .cse0 .cse1))) [2022-11-25 17:22:49,335 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2022-11-25 17:22:49,335 INFO L899 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2022-11-25 17:22:49,335 INFO L899 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2022-11-25 17:22:49,336 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) .cse1))) [2022-11-25 17:22:49,336 INFO L895 garLoopResultBuilder]: At program point L614-2(lines 607 623) the Hoare annotation is: (let ((.cse1 (not (<= ~waterLevel~0 2))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse0 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse0) .cse1 (and (= ~pumpRunning~0 0) .cse0) .cse2)) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 17:22:49,336 INFO L899 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2022-11-25 17:22:49,337 INFO L895 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) .cse2 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1)))) [2022-11-25 17:22:49,337 INFO L895 garLoopResultBuilder]: At program point L604(lines 599 606) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1))) [2022-11-25 17:22:49,337 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2022-11-25 17:22:49,337 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2022-11-25 17:22:49,337 INFO L895 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-25 17:22:49,338 INFO L899 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2022-11-25 17:22:49,338 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 548 572) the Hoare annotation is: (let ((.cse0 (not (<= ~waterLevel~0 2))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse0 .cse1 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1))) [2022-11-25 17:22:49,338 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2022-11-25 17:22:49,338 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2022-11-25 17:22:49,338 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2022-11-25 17:22:49,339 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 643 651) the Hoare annotation is: true [2022-11-25 17:22:49,339 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 643 651) no Hoare annotation was computed. [2022-11-25 17:22:49,339 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 632 642) the Hoare annotation is: true [2022-11-25 17:22:49,339 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2022-11-25 17:22:49,339 INFO L902 garLoopResultBuilder]: At program point L775(lines 770 778) the Hoare annotation is: true [2022-11-25 17:22:49,340 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 632 642) no Hoare annotation was computed. [2022-11-25 17:22:49,343 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 17:22:49,346 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 17:22:49,375 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 05:22:49 BoogieIcfgContainer [2022-11-25 17:22:49,375 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 17:22:49,376 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 17:22:49,376 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 17:22:49,376 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 17:22:49,377 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 05:22:36" (3/4) ... [2022-11-25 17:22:49,380 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 17:22:49,387 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-25 17:22:49,388 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 17:22:49,388 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 17:22:49,388 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 17:22:49,388 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 17:22:49,389 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 17:22:49,389 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-25 17:22:49,389 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-25 17:22:49,389 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-25 17:22:49,396 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-25 17:22:49,397 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 17:22:49,397 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 17:22:49,398 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 17:22:49,398 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 17:22:49,425 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 17:22:49,425 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 17:22:49,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-25 17:22:49,426 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-11-25 17:22:49,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) [2022-11-25 17:22:49,427 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 17:22:49,428 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) [2022-11-25 17:22:49,428 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-25 17:22:49,429 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-25 17:22:49,429 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-25 17:22:49,429 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive [2022-11-25 17:22:49,430 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) [2022-11-25 17:22:49,430 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-11-25 17:22:49,431 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) [2022-11-25 17:22:49,431 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) [2022-11-25 17:22:49,431 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) [2022-11-25 17:22:49,454 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 17:22:49,454 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 17:22:49,455 INFO L158 Benchmark]: Toolchain (without parser) took 14770.45ms. Allocated memory was 167.8MB in the beginning and 213.9MB in the end (delta: 46.1MB). Free memory was 124.7MB in the beginning and 151.0MB in the end (delta: -26.3MB). Peak memory consumption was 23.0MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,455 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 115.3MB. Free memory was 83.6MB in the beginning and 83.6MB in the end (delta: 59.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 17:22:49,456 INFO L158 Benchmark]: CACSL2BoogieTranslator took 505.03ms. Allocated memory is still 167.8MB. Free memory was 124.7MB in the beginning and 105.3MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,456 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.42ms. Allocated memory is still 167.8MB. Free memory was 105.3MB in the beginning and 103.2MB in the end (delta: 2.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,456 INFO L158 Benchmark]: Boogie Preprocessor took 72.12ms. Allocated memory is still 167.8MB. Free memory was 103.2MB in the beginning and 101.7MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 17:22:49,457 INFO L158 Benchmark]: RCFGBuilder took 720.93ms. Allocated memory is still 167.8MB. Free memory was 101.7MB in the beginning and 84.3MB in the end (delta: 17.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,457 INFO L158 Benchmark]: TraceAbstraction took 13329.20ms. Allocated memory was 167.8MB in the beginning and 213.9MB in the end (delta: 46.1MB). Free memory was 83.8MB in the beginning and 157.3MB in the end (delta: -73.4MB). Peak memory consumption was 77.5MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,458 INFO L158 Benchmark]: Witness Printer took 78.36ms. Allocated memory is still 213.9MB. Free memory was 157.3MB in the beginning and 151.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 17:22:49,459 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 115.3MB. Free memory was 83.6MB in the beginning and 83.6MB in the end (delta: 59.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 505.03ms. Allocated memory is still 167.8MB. Free memory was 124.7MB in the beginning and 105.3MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.42ms. Allocated memory is still 167.8MB. Free memory was 105.3MB in the beginning and 103.2MB in the end (delta: 2.1MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 72.12ms. Allocated memory is still 167.8MB. Free memory was 103.2MB in the beginning and 101.7MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 720.93ms. Allocated memory is still 167.8MB. Free memory was 101.7MB in the beginning and 84.3MB in the end (delta: 17.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 13329.20ms. Allocated memory was 167.8MB in the beginning and 213.9MB in the end (delta: 46.1MB). Free memory was 83.8MB in the beginning and 157.3MB in the end (delta: -73.4MB). Peak memory consumption was 77.5MB. Max. memory is 16.1GB. * Witness Printer took 78.36ms. Allocated memory is still 213.9MB. Free memory was 157.3MB in the beginning and 151.0MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.2s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2030 SdHoareTripleChecker+Valid, 2.6s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1987 mSDsluCounter, 4722 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3505 mSDsCounter, 673 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2685 IncrementalHoareTripleChecker+Invalid, 3358 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 673 mSolverCounterUnsat, 1217 mSDtfsCounter, 2685 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 438 GetRequests, 324 SyntacticMatches, 4 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 700 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=610occurred in iteration=9, InterpolantAutomatonStates: 106, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 192 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1420 PreInvPairs, 1737 NumberOfFragments, 1909 HoareAnnotationTreeSize, 1420 FomulaSimplifications, 2147 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 49 FomulaSimplificationsInter, 11365 FormulaSimplificationTreeSizeReductionInter, 4.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 667 NumberOfCodeBlocks, 667 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 763 ConstructedInterpolants, 0 QuantifiedInterpolants, 1407 SizeOfPredicates, 3 NumberOfNonLiveVariables, 363 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 115/141 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 994]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 0 == systemActive - InvariantResult [Line: 599]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || 0 == systemActive) - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) <= 2)) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) || (\result <= 2 && 2 <= \result)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 607]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 722]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || (((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive))) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || ((tmp___0 == 0 && pumpRunning == 0) && \result == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 928]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 903]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && tmp == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(\old(waterLevel) <= 2)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((!(1 <= \old(pumpRunning)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(\old(waterLevel) <= 2)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || (((\result <= 2 && 1 < tmp) && tmp <= 2) && 2 <= \result)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 2) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(1 <= \old(pumpRunning)) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 770]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: (((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 <= \old(pumpRunning))) || 0 == systemActive) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 1001]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 811]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(waterLevel <= 2)) || 0 == systemActive) || !(1 <= switchedOnBeforeTS)) && ((((!(\old(pumpRunning) == 0) || (1 <= \result && pumpRunning == 0)) || !(waterLevel <= 2)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && 1 <= switchedOnBeforeTS) && !(0 == systemActive)) || ((((pumpRunning == 0 && \result == 1) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2)) || ((((((1 <= pumpRunning && \result == 1) && 2 <= waterLevel) && tmp == 1) && splverifierCounter == 0) && waterLevel <= 2) && !(0 == systemActive)) RESULT: Ultimate proved your program to be correct! [2022-11-25 17:22:49,496 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8517c1b1-e578-466a-9a7e-e6ddac3f49b8/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE