./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 18:40:56,493 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 18:40:56,495 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 18:40:56,513 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 18:40:56,513 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 18:40:56,514 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 18:40:56,516 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 18:40:56,517 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 18:40:56,519 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 18:40:56,520 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 18:40:56,520 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 18:40:56,521 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 18:40:56,522 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 18:40:56,523 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 18:40:56,524 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 18:40:56,525 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 18:40:56,526 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 18:40:56,526 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 18:40:56,528 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 18:40:56,530 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 18:40:56,531 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 18:40:56,532 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 18:40:56,533 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 18:40:56,534 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 18:40:56,538 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 18:40:56,538 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 18:40:56,538 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 18:40:56,539 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 18:40:56,539 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 18:40:56,540 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 18:40:56,540 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 18:40:56,541 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 18:40:56,542 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 18:40:56,542 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 18:40:56,543 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 18:40:56,544 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 18:40:56,544 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 18:40:56,544 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 18:40:56,545 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 18:40:56,545 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 18:40:56,546 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 18:40:56,547 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 18:40:56,566 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 18:40:56,566 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 18:40:56,567 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 18:40:56,567 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 18:40:56,568 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 18:40:56,568 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 18:40:56,568 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 18:40:56,568 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 18:40:56,569 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 18:40:56,569 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 18:40:56,569 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 18:40:56,569 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 18:40:56,569 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 18:40:56,569 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 18:40:56,570 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 18:40:56,571 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 18:40:56,571 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 18:40:56,571 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 18:40:56,571 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 18:40:56,571 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 18:40:56,572 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 18:40:56,573 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 18:40:56,573 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 18:40:56,573 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 837951bb35a66379a80a07f15314d2b43ee3f47728002b8b604897c09f36abe4 [2022-12-13 18:40:56,761 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 18:40:56,777 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 18:40:56,779 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 18:40:56,780 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 18:40:56,780 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 18:40:56,781 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-12-13 18:40:59,297 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 18:40:59,494 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 18:40:59,495 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2022-12-13 18:40:59,506 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/data/5a8e94c4f/4cc79fd84fda43b9a64cf940432fe20e/FLAG844bd545c [2022-12-13 18:40:59,885 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/data/5a8e94c4f/4cc79fd84fda43b9a64cf940432fe20e [2022-12-13 18:40:59,887 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 18:40:59,888 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 18:40:59,889 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 18:40:59,889 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 18:40:59,892 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 18:40:59,893 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 06:40:59" (1/1) ... [2022-12-13 18:40:59,893 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@23bddb03 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:40:59, skipping insertion in model container [2022-12-13 18:40:59,893 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 06:40:59" (1/1) ... [2022-12-13 18:40:59,899 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 18:40:59,934 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 18:41:00,143 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-12-13 18:41:00,147 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 18:41:00,157 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 18:41:00,218 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c[18588,18601] [2022-12-13 18:41:00,218 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 18:41:00,234 INFO L208 MainTranslator]: Completed translation [2022-12-13 18:41:00,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00 WrapperNode [2022-12-13 18:41:00,235 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 18:41:00,235 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 18:41:00,236 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 18:41:00,236 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 18:41:00,241 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,253 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,276 INFO L138 Inliner]: procedures = 55, calls = 99, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 207 [2022-12-13 18:41:00,277 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 18:41:00,277 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 18:41:00,278 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 18:41:00,278 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 18:41:00,285 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,286 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,288 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,288 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,292 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,296 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,297 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,298 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,300 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 18:41:00,301 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 18:41:00,301 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 18:41:00,301 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 18:41:00,302 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (1/1) ... [2022-12-13 18:41:00,308 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 18:41:00,319 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:41:00,328 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 18:41:00,330 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 18:41:00,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 18:41:00,358 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 18:41:00,358 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 18:41:00,358 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 18:41:00,358 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 18:41:00,358 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 18:41:00,358 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 18:41:00,358 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 18:41:00,358 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 18:41:00,358 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 18:41:00,359 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 18:41:00,359 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 18:41:00,359 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 18:41:00,359 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 18:41:00,359 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 18:41:00,359 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 18:41:00,359 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 18:41:00,359 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 18:41:00,419 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 18:41:00,421 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 18:41:00,617 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 18:41:00,625 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 18:41:00,625 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 18:41:00,627 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 06:41:00 BoogieIcfgContainer [2022-12-13 18:41:00,627 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 18:41:00,630 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 18:41:00,630 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 18:41:00,633 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 18:41:00,633 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 06:40:59" (1/3) ... [2022-12-13 18:41:00,633 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@479b202b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 06:41:00, skipping insertion in model container [2022-12-13 18:41:00,633 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:41:00" (2/3) ... [2022-12-13 18:41:00,634 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@479b202b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 06:41:00, skipping insertion in model container [2022-12-13 18:41:00,634 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 06:41:00" (3/3) ... [2022-12-13 18:41:00,635 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product49.cil.c [2022-12-13 18:41:00,649 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 18:41:00,649 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 18:41:00,686 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 18:41:00,690 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3483442f, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 18:41:00,690 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 18:41:00,694 INFO L276 IsEmpty]: Start isEmpty. Operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-13 18:41:00,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 18:41:00,701 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:00,702 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:00,702 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:00,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:00,706 INFO L85 PathProgramCache]: Analyzing trace with hash 644770988, now seen corresponding path program 1 times [2022-12-13 18:41:00,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:00,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [215858473] [2022-12-13 18:41:00,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:00,722 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:00,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:00,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-12-13 18:41:00,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:00,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:00,864 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:00,864 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [215858473] [2022-12-13 18:41:00,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [215858473] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:00,865 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:00,865 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 18:41:00,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [289102626] [2022-12-13 18:41:00,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:00,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 18:41:00,873 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:00,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 18:41:00,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 18:41:00,904 INFO L87 Difference]: Start difference. First operand has 88 states, 68 states have (on average 1.3970588235294117) internal successors, (95), 76 states have internal predecessors, (95), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:00,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:00,931 INFO L93 Difference]: Finished difference Result 168 states and 229 transitions. [2022-12-13 18:41:00,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 18:41:00,933 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 18:41:00,933 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:00,939 INFO L225 Difference]: With dead ends: 168 [2022-12-13 18:41:00,940 INFO L226 Difference]: Without dead ends: 79 [2022-12-13 18:41:00,942 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 18:41:00,945 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:00,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 18:41:00,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-12-13 18:41:00,974 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 79. [2022-12-13 18:41:00,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 68 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-13 18:41:00,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 102 transitions. [2022-12-13 18:41:00,979 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 102 transitions. Word has length 25 [2022-12-13 18:41:00,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:00,980 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 102 transitions. [2022-12-13 18:41:00,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:00,981 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 102 transitions. [2022-12-13 18:41:00,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 18:41:00,983 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:00,983 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:00,983 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 18:41:00,984 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:00,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:00,985 INFO L85 PathProgramCache]: Analyzing trace with hash 1977303075, now seen corresponding path program 1 times [2022-12-13 18:41:00,985 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:00,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1989782119] [2022-12-13 18:41:00,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:00,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 18:41:01,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,090 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1989782119] [2022-12-13 18:41:01,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1989782119] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,091 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:41:01,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1848318465] [2022-12-13 18:41:01,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,093 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 18:41:01,093 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:41:01,094 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:41:01,094 INFO L87 Difference]: Start difference. First operand 79 states and 102 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:01,111 INFO L93 Difference]: Finished difference Result 124 states and 160 transitions. [2022-12-13 18:41:01,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 18:41:01,112 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 18:41:01,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:01,113 INFO L225 Difference]: With dead ends: 124 [2022-12-13 18:41:01,114 INFO L226 Difference]: Without dead ends: 70 [2022-12-13 18:41:01,114 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:41:01,116 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 12 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:01,116 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 162 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 18:41:01,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-12-13 18:41:01,124 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-12-13 18:41:01,125 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3454545454545455) internal successors, (74), 62 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-12-13 18:41:01,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 90 transitions. [2022-12-13 18:41:01,126 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 90 transitions. Word has length 26 [2022-12-13 18:41:01,127 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:01,127 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 90 transitions. [2022-12-13 18:41:01,127 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,127 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 90 transitions. [2022-12-13 18:41:01,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-13 18:41:01,128 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:01,128 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:01,129 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 18:41:01,129 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:01,130 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:01,130 INFO L85 PathProgramCache]: Analyzing trace with hash 378859764, now seen corresponding path program 1 times [2022-12-13 18:41:01,130 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:01,130 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [798173464] [2022-12-13 18:41:01,130 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:01,130 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:01,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,250 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [798173464] [2022-12-13 18:41:01,250 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [798173464] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,250 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,250 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:41:01,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831471415] [2022-12-13 18:41:01,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 18:41:01,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:41:01,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:41:01,251 INFO L87 Difference]: Start difference. First operand 70 states and 90 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:01,331 INFO L93 Difference]: Finished difference Result 133 states and 174 transitions. [2022-12-13 18:41:01,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:41:01,331 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-12-13 18:41:01,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:01,333 INFO L225 Difference]: With dead ends: 133 [2022-12-13 18:41:01,333 INFO L226 Difference]: Without dead ends: 70 [2022-12-13 18:41:01,333 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-13 18:41:01,334 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 173 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 37 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 191 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 37 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:01,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 191 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 37 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 18:41:01,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-12-13 18:41:01,342 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2022-12-13 18:41:01,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 55 states have (on average 1.3272727272727274) internal successors, (73), 62 states have internal predecessors, (73), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2022-12-13 18:41:01,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 89 transitions. [2022-12-13 18:41:01,344 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 89 transitions. Word has length 30 [2022-12-13 18:41:01,344 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:01,344 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 89 transitions. [2022-12-13 18:41:01,345 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,345 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 89 transitions. [2022-12-13 18:41:01,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-13 18:41:01,346 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:01,346 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:01,346 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 18:41:01,346 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:01,347 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:01,347 INFO L85 PathProgramCache]: Analyzing trace with hash 533499176, now seen corresponding path program 1 times [2022-12-13 18:41:01,347 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:01,347 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [281596444] [2022-12-13 18:41:01,347 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:01,348 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-12-13 18:41:01,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,393 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,394 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [281596444] [2022-12-13 18:41:01,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [281596444] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,394 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:41:01,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270846931] [2022-12-13 18:41:01,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,395 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 18:41:01,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:41:01,396 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:41:01,396 INFO L87 Difference]: Start difference. First operand 70 states and 89 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:01,427 INFO L93 Difference]: Finished difference Result 177 states and 231 transitions. [2022-12-13 18:41:01,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 18:41:01,428 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2022-12-13 18:41:01,428 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:01,429 INFO L225 Difference]: With dead ends: 177 [2022-12-13 18:41:01,429 INFO L226 Difference]: Without dead ends: 114 [2022-12-13 18:41:01,430 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:41:01,431 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 69 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:01,432 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 172 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 18:41:01,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2022-12-13 18:41:01,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 112. [2022-12-13 18:41:01,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 87 states have (on average 1.3103448275862069) internal successors, (114), 94 states have internal predecessors, (114), 12 states have call successors, (12), 12 states have call predecessors, (12), 12 states have return successors, (16), 12 states have call predecessors, (16), 12 states have call successors, (16) [2022-12-13 18:41:01,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 142 transitions. [2022-12-13 18:41:01,447 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 142 transitions. Word has length 38 [2022-12-13 18:41:01,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:01,447 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 142 transitions. [2022-12-13 18:41:01,447 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 18:41:01,447 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 142 transitions. [2022-12-13 18:41:01,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-13 18:41:01,448 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:01,448 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:01,448 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 18:41:01,448 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:01,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:01,449 INFO L85 PathProgramCache]: Analyzing trace with hash -504847281, now seen corresponding path program 1 times [2022-12-13 18:41:01,449 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:01,449 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728235886] [2022-12-13 18:41:01,449 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:01,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:01,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-12-13 18:41:01,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,541 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728235886] [2022-12-13 18:41:01,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728235886] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,542 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,542 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:41:01,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130463456] [2022-12-13 18:41:01,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 18:41:01,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:41:01,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:41:01,544 INFO L87 Difference]: Start difference. First operand 112 states and 142 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:01,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:01,658 INFO L93 Difference]: Finished difference Result 251 states and 325 transitions. [2022-12-13 18:41:01,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:41:01,659 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-12-13 18:41:01,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:01,660 INFO L225 Difference]: With dead ends: 251 [2022-12-13 18:41:01,661 INFO L226 Difference]: Without dead ends: 146 [2022-12-13 18:41:01,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 18:41:01,662 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 62 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:01,663 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 363 Invalid, 139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:01,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-12-13 18:41:01,678 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 141. [2022-12-13 18:41:01,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 141 states, 111 states have (on average 1.2972972972972974) internal successors, (144), 118 states have internal predecessors, (144), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2022-12-13 18:41:01,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141 states to 141 states and 179 transitions. [2022-12-13 18:41:01,680 INFO L78 Accepts]: Start accepts. Automaton has 141 states and 179 transitions. Word has length 44 [2022-12-13 18:41:01,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:01,680 INFO L495 AbstractCegarLoop]: Abstraction has 141 states and 179 transitions. [2022-12-13 18:41:01,681 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:01,681 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states and 179 transitions. [2022-12-13 18:41:01,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-13 18:41:01,682 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:01,682 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:01,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 18:41:01,682 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:01,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:01,683 INFO L85 PathProgramCache]: Analyzing trace with hash -1322495731, now seen corresponding path program 1 times [2022-12-13 18:41:01,683 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:01,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [214435352] [2022-12-13 18:41:01,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:01,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:01,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-12-13 18:41:01,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,741 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,741 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [214435352] [2022-12-13 18:41:01,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [214435352] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,742 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,742 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:41:01,742 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613033417] [2022-12-13 18:41:01,742 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,742 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 18:41:01,742 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,743 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:41:01,743 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:41:01,743 INFO L87 Difference]: Start difference. First operand 141 states and 179 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:01,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:01,825 INFO L93 Difference]: Finished difference Result 285 states and 371 transitions. [2022-12-13 18:41:01,825 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:41:01,825 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-12-13 18:41:01,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:01,826 INFO L225 Difference]: With dead ends: 285 [2022-12-13 18:41:01,826 INFO L226 Difference]: Without dead ends: 151 [2022-12-13 18:41:01,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:41:01,827 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 65 mSDsluCounter, 198 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 68 SdHoareTripleChecker+Valid, 284 SdHoareTripleChecker+Invalid, 106 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:01,828 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [68 Valid, 284 Invalid, 106 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:01,828 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-12-13 18:41:01,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 143. [2022-12-13 18:41:01,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 143 states, 113 states have (on average 1.2920353982300885) internal successors, (146), 120 states have internal predecessors, (146), 14 states have call successors, (14), 12 states have call predecessors, (14), 15 states have return successors, (21), 15 states have call predecessors, (21), 14 states have call successors, (21) [2022-12-13 18:41:01,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 181 transitions. [2022-12-13 18:41:01,839 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 181 transitions. Word has length 44 [2022-12-13 18:41:01,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:01,840 INFO L495 AbstractCegarLoop]: Abstraction has 143 states and 181 transitions. [2022-12-13 18:41:01,840 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:01,840 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 181 transitions. [2022-12-13 18:41:01,840 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-13 18:41:01,841 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:01,841 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:01,841 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 18:41:01,841 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:01,841 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:01,841 INFO L85 PathProgramCache]: Analyzing trace with hash -1103641013, now seen corresponding path program 1 times [2022-12-13 18:41:01,841 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:01,841 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63233693] [2022-12-13 18:41:01,841 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:01,842 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:01,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:01,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-12-13 18:41:01,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:01,904 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:01,904 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:01,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63233693] [2022-12-13 18:41:01,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [63233693] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:01,905 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:01,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:41:01,905 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685163303] [2022-12-13 18:41:01,905 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:01,905 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 18:41:01,905 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:01,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:41:01,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:41:01,906 INFO L87 Difference]: Start difference. First operand 143 states and 181 transitions. Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:02,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:02,075 INFO L93 Difference]: Finished difference Result 406 states and 532 transitions. [2022-12-13 18:41:02,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:41:02,076 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 44 [2022-12-13 18:41:02,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:02,078 INFO L225 Difference]: With dead ends: 406 [2022-12-13 18:41:02,078 INFO L226 Difference]: Without dead ends: 270 [2022-12-13 18:41:02,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:41:02,080 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 206 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:02,080 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 292 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:02,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-12-13 18:41:02,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 262. [2022-12-13 18:41:02,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 203 states have (on average 1.270935960591133) internal successors, (258), 214 states have internal predecessors, (258), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2022-12-13 18:41:02,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 335 transitions. [2022-12-13 18:41:02,112 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 335 transitions. Word has length 44 [2022-12-13 18:41:02,112 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:02,112 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 335 transitions. [2022-12-13 18:41:02,112 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.8) internal successors, (39), 4 states have internal predecessors, (39), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 18:41:02,112 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 335 transitions. [2022-12-13 18:41:02,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-13 18:41:02,113 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:02,113 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:02,113 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 18:41:02,114 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:02,114 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:02,114 INFO L85 PathProgramCache]: Analyzing trace with hash 636133877, now seen corresponding path program 1 times [2022-12-13 18:41:02,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:02,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2147426759] [2022-12-13 18:41:02,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:02,115 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:02,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:02,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 18:41:02,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-12-13 18:41:02,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:02,205 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:02,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2147426759] [2022-12-13 18:41:02,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2147426759] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:02,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:02,206 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:41:02,206 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1220558731] [2022-12-13 18:41:02,206 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:02,206 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 18:41:02,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:02,207 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:41:02,207 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:41:02,207 INFO L87 Difference]: Start difference. First operand 262 states and 335 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 18:41:02,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:02,343 INFO L93 Difference]: Finished difference Result 520 states and 665 transitions. [2022-12-13 18:41:02,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:41:02,343 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-12-13 18:41:02,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:02,345 INFO L225 Difference]: With dead ends: 520 [2022-12-13 18:41:02,345 INFO L226 Difference]: Without dead ends: 265 [2022-12-13 18:41:02,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-13 18:41:02,347 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 112 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 144 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:02,348 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 327 Invalid, 167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 144 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:02,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 265 states. [2022-12-13 18:41:02,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 265 to 260. [2022-12-13 18:41:02,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 260 states, 201 states have (on average 1.263681592039801) internal successors, (254), 212 states have internal predecessors, (254), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (48), 29 states have call predecessors, (48), 29 states have call successors, (48) [2022-12-13 18:41:02,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 260 states to 260 states and 331 transitions. [2022-12-13 18:41:02,375 INFO L78 Accepts]: Start accepts. Automaton has 260 states and 331 transitions. Word has length 46 [2022-12-13 18:41:02,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:02,376 INFO L495 AbstractCegarLoop]: Abstraction has 260 states and 331 transitions. [2022-12-13 18:41:02,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 18:41:02,376 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 331 transitions. [2022-12-13 18:41:02,377 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-12-13 18:41:02,377 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:02,377 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:02,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 18:41:02,378 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:02,378 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:02,378 INFO L85 PathProgramCache]: Analyzing trace with hash 1068859185, now seen corresponding path program 1 times [2022-12-13 18:41:02,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:02,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734052797] [2022-12-13 18:41:02,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:02,378 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:02,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 18:41:02,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-12-13 18:41:02,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-12-13 18:41:02,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,460 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:02,460 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:02,460 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734052797] [2022-12-13 18:41:02,461 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734052797] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:02,461 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:02,461 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:41:02,461 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [622353990] [2022-12-13 18:41:02,461 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:02,461 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 18:41:02,461 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:02,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 18:41:02,462 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:41:02,462 INFO L87 Difference]: Start difference. First operand 260 states and 331 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 18:41:02,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:02,728 INFO L93 Difference]: Finished difference Result 516 states and 665 transitions. [2022-12-13 18:41:02,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-13 18:41:02,728 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 48 [2022-12-13 18:41:02,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:02,731 INFO L225 Difference]: With dead ends: 516 [2022-12-13 18:41:02,731 INFO L226 Difference]: Without dead ends: 309 [2022-12-13 18:41:02,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=87, Invalid=185, Unknown=0, NotChecked=0, Total=272 [2022-12-13 18:41:02,732 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 211 mSDsluCounter, 365 mSDsCounter, 0 mSdLazyCounter, 314 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 484 SdHoareTripleChecker+Invalid, 360 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 314 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:02,733 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 484 Invalid, 360 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 314 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 18:41:02,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 309 states. [2022-12-13 18:41:02,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 309 to 296. [2022-12-13 18:41:02,759 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 296 states, 231 states have (on average 1.2337662337662338) internal successors, (285), 245 states have internal predecessors, (285), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-12-13 18:41:02,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 361 transitions. [2022-12-13 18:41:02,761 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 361 transitions. Word has length 48 [2022-12-13 18:41:02,762 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:02,762 INFO L495 AbstractCegarLoop]: Abstraction has 296 states and 361 transitions. [2022-12-13 18:41:02,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 18:41:02,762 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 361 transitions. [2022-12-13 18:41:02,763 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-13 18:41:02,763 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:02,763 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:02,763 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 18:41:02,763 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:02,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:02,764 INFO L85 PathProgramCache]: Analyzing trace with hash 920704793, now seen corresponding path program 1 times [2022-12-13 18:41:02,764 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:02,764 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392951147] [2022-12-13 18:41:02,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:02,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:02,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 18:41:02,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-12-13 18:41:02,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 18:41:02,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-12-13 18:41:02,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:02,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:02,827 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:02,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392951147] [2022-12-13 18:41:02,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392951147] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:02,827 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:02,827 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:41:02,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85377660] [2022-12-13 18:41:02,827 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:02,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 18:41:02,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:02,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:41:02,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:41:02,828 INFO L87 Difference]: Start difference. First operand 296 states and 361 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 18:41:02,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:02,973 INFO L93 Difference]: Finished difference Result 538 states and 664 transitions. [2022-12-13 18:41:02,973 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-13 18:41:02,973 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-12-13 18:41:02,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:02,975 INFO L225 Difference]: With dead ends: 538 [2022-12-13 18:41:02,975 INFO L226 Difference]: Without dead ends: 297 [2022-12-13 18:41:02,976 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-12-13 18:41:02,977 INFO L413 NwaCegarLoop]: 66 mSDtfsCounter, 140 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 277 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:02,977 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 277 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:02,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-12-13 18:41:02,989 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 293. [2022-12-13 18:41:02,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 293 states, 228 states have (on average 1.2324561403508771) internal successors, (281), 242 states have internal predecessors, (281), 32 states have call successors, (32), 28 states have call predecessors, (32), 32 states have return successors, (44), 32 states have call predecessors, (44), 32 states have call successors, (44) [2022-12-13 18:41:02,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 293 states to 293 states and 357 transitions. [2022-12-13 18:41:02,991 INFO L78 Accepts]: Start accepts. Automaton has 293 states and 357 transitions. Word has length 50 [2022-12-13 18:41:02,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:02,991 INFO L495 AbstractCegarLoop]: Abstraction has 293 states and 357 transitions. [2022-12-13 18:41:02,991 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 18:41:02,991 INFO L276 IsEmpty]: Start isEmpty. Operand 293 states and 357 transitions. [2022-12-13 18:41:02,991 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-13 18:41:02,991 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:02,991 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:02,992 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-12-13 18:41:02,992 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:02,992 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:02,992 INFO L85 PathProgramCache]: Analyzing trace with hash 1139559511, now seen corresponding path program 1 times [2022-12-13 18:41:02,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:02,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [176366492] [2022-12-13 18:41:02,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:02,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:02,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,027 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 18:41:03,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-12-13 18:41:03,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 18:41:03,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-12-13 18:41:03,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:41:03,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:03,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [176366492] [2022-12-13 18:41:03,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [176366492] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:41:03,061 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:41:03,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:41:03,062 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347318749] [2022-12-13 18:41:03,062 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:41:03,062 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 18:41:03,062 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:03,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 18:41:03,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:41:03,062 INFO L87 Difference]: Start difference. First operand 293 states and 357 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 18:41:03,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:03,198 INFO L93 Difference]: Finished difference Result 509 states and 626 transitions. [2022-12-13 18:41:03,198 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 18:41:03,199 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-12-13 18:41:03,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:03,200 INFO L225 Difference]: With dead ends: 509 [2022-12-13 18:41:03,200 INFO L226 Difference]: Without dead ends: 271 [2022-12-13 18:41:03,200 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-12-13 18:41:03,201 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 132 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 219 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 219 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:03,201 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 363 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 219 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 18:41:03,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 271 states. [2022-12-13 18:41:03,211 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 271 to 267. [2022-12-13 18:41:03,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 267 states, 209 states have (on average 1.229665071770335) internal successors, (257), 222 states have internal predecessors, (257), 29 states have call successors, (29), 25 states have call predecessors, (29), 28 states have return successors, (37), 28 states have call predecessors, (37), 29 states have call successors, (37) [2022-12-13 18:41:03,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 323 transitions. [2022-12-13 18:41:03,212 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 323 transitions. Word has length 50 [2022-12-13 18:41:03,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:03,212 INFO L495 AbstractCegarLoop]: Abstraction has 267 states and 323 transitions. [2022-12-13 18:41:03,212 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 18:41:03,212 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 323 transitions. [2022-12-13 18:41:03,213 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2022-12-13 18:41:03,213 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 18:41:03,213 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:03,213 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-13 18:41:03,213 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 18:41:03,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:41:03,214 INFO L85 PathProgramCache]: Analyzing trace with hash 1869867840, now seen corresponding path program 1 times [2022-12-13 18:41:03,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:41:03,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257713860] [2022-12-13 18:41:03,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:03,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:41:03,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 18:41:03,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-12-13 18:41:03,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 18:41:03,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-12-13 18:41:03,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2022-12-13 18:41:03,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,283 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-13 18:41:03,283 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:41:03,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257713860] [2022-12-13 18:41:03,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1257713860] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 18:41:03,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1634501366] [2022-12-13 18:41:03,283 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:41:03,283 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 18:41:03,283 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:41:03,284 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 18:41:03,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 18:41:03,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:41:03,356 INFO L263 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 13 conjunts are in the unsatisfiable core [2022-12-13 18:41:03,361 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 18:41:03,518 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 3 proven. 12 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-13 18:41:03,518 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 18:41:03,739 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-13 18:41:03,740 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1634501366] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 18:41:03,740 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 18:41:03,740 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2022-12-13 18:41:03,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949981516] [2022-12-13 18:41:03,740 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 18:41:03,741 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-13 18:41:03,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:41:03,742 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-13 18:41:03,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2022-12-13 18:41:03,742 INFO L87 Difference]: Start difference. First operand 267 states and 323 transitions. Second operand has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2022-12-13 18:41:04,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:41:04,358 INFO L93 Difference]: Finished difference Result 546 states and 704 transitions. [2022-12-13 18:41:04,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-12-13 18:41:04,359 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) Word has length 79 [2022-12-13 18:41:04,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 18:41:04,359 INFO L225 Difference]: With dead ends: 546 [2022-12-13 18:41:04,359 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 18:41:04,362 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 166 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 390 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=628, Invalid=1442, Unknown=0, NotChecked=0, Total=2070 [2022-12-13 18:41:04,362 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 485 mSDsluCounter, 491 mSDsCounter, 0 mSdLazyCounter, 626 mSolverCounterSat, 182 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 487 SdHoareTripleChecker+Valid, 572 SdHoareTripleChecker+Invalid, 808 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 182 IncrementalHoareTripleChecker+Valid, 626 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-13 18:41:04,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [487 Valid, 572 Invalid, 808 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [182 Valid, 626 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-13 18:41:04,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 18:41:04,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 18:41:04,369 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:41:04,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 18:41:04,369 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2022-12-13 18:41:04,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 18:41:04,369 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 18:41:04,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.0) internal successors, (119), 13 states have internal predecessors, (119), 6 states have call successors, (17), 9 states have call predecessors, (17), 6 states have return successors, (15), 6 states have call predecessors, (15), 6 states have call successors, (15) [2022-12-13 18:41:04,369 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 18:41:04,370 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 18:41:04,372 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 18:41:04,377 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 18:41:04,573 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 18:41:04,576 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 18:41:06,631 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 88 94) no Hoare annotation was computed. [2022-12-13 18:41:06,631 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 88 94) the Hoare annotation is: true [2022-12-13 18:41:06,631 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 388 399) the Hoare annotation is: true [2022-12-13 18:41:06,631 INFO L899 garLoopResultBuilder]: For program point L392-1(lines 388 399) no Hoare annotation was computed. [2022-12-13 18:41:06,631 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 388 399) no Hoare annotation was computed. [2022-12-13 18:41:06,631 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 870 899) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point L895(lines 870 899) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point L891(line 891) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point L884(lines 884 888) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point L884-1(lines 884 888) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point L881(line 881) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point L880-2(lines 880 894) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point L876(line 876) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point L876-1(line 876) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 870 899) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 400 408) the Hoare annotation is: true [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 400 408) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 400 408) no Hoare annotation was computed. [2022-12-13 18:41:06,632 INFO L899 garLoopResultBuilder]: For program point L126(lines 126 143) no Hoare annotation was computed. [2022-12-13 18:41:06,633 INFO L899 garLoopResultBuilder]: For program point L337(lines 337 357) no Hoare annotation was computed. [2022-12-13 18:41:06,633 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 455 463) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,633 INFO L899 garLoopResultBuilder]: For program point L969(line 969) no Hoare annotation was computed. [2022-12-13 18:41:06,633 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 64 87) no Hoare annotation was computed. [2022-12-13 18:41:06,633 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 251) no Hoare annotation was computed. [2022-12-13 18:41:06,633 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 432 440) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 1)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= ~waterLevel~0 1)) (.cse3 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 (and (<= 2 ~waterLevel~0) .cse2 .cse6) .cse7)) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse5 (= |timeShift_getWaterLevel_#res#1| 1)) (let ((.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse5 (and .cse1 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse8 .cse3 .cse6) (not (= |old(~pumpRunning~0)| 1)) (and .cse0 .cse1 .cse8 .cse3) .cse7)))) [2022-12-13 18:41:06,634 INFO L899 garLoopResultBuilder]: For program point L247-2(lines 247 251) no Hoare annotation was computed. [2022-12-13 18:41:06,634 INFO L895 garLoopResultBuilder]: At program point L136(line 136) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (= |timeShift_processEnvironment_~tmp~1#1| 0) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,634 INFO L899 garLoopResultBuilder]: For program point L347(lines 347 353) no Hoare annotation was computed. [2022-12-13 18:41:06,634 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 356) no Hoare annotation was computed. [2022-12-13 18:41:06,634 INFO L895 garLoopResultBuilder]: At program point L343-1(lines 328 360) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= ~waterLevel~0 1)) (.cse3 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 1)) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse4 .cse0 .cse6) (not (= |old(~pumpRunning~0)| 0)) .cse3 (and (<= 2 ~waterLevel~0) .cse6 .cse2) .cse5)))) [2022-12-13 18:41:06,634 INFO L899 garLoopResultBuilder]: For program point L368(lines 368 372) no Hoare annotation was computed. [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point L335(line 335) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point L368-2(lines 364 375) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,635 INFO L899 garLoopResultBuilder]: For program point L335-1(line 335) no Hoare annotation was computed. [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point L141(line 141) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1))) [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point L141-1(lines 122 146) the Hoare annotation is: (let ((.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0)))) (and (let ((.cse0 (<= ~waterLevel~0 1)) (.cse1 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse0 (= |timeShift_processEnvironment_~tmp~1#1| 0) .cse1 .cse2) .cse3 (not (= |old(~pumpRunning~0)| 1)) (and .cse4 .cse0 .cse1) .cse5)) (or .cse6 .cse3 .cse5 (and .cse7 .cse2) (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 (and .cse4 .cse7) .cse3))) [2022-12-13 18:41:06,635 INFO L899 garLoopResultBuilder]: For program point L75-1(lines 75 81) no Hoare annotation was computed. [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 965 972) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,635 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 64 87) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) .cse2 (and .cse0 (= ~pumpRunning~0 1))))) [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 155 162) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 238 256) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1)) .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 64 87) no Hoare annotation was computed. [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 174 182) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (= |timeShift_isPumpRunning_#res#1| 1) (<= 2 ~waterLevel~0) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1)) .cse1))) [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 969) no Hoare annotation was computed. [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point L68-1(lines 67 86) no Hoare annotation was computed. [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point L130(lines 130 138) no Hoare annotation was computed. [2022-12-13 18:41:06,636 INFO L902 garLoopResultBuilder]: At program point L320(lines 261 324) the Hoare annotation is: true [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point L283(line 283) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-12-13 18:41:06,636 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 931 940) the Hoare annotation is: true [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 479 485) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 18:41:06,636 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 941 963) the Hoare annotation is: true [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 18:41:06,636 INFO L895 garLoopResultBuilder]: At program point L317(lines 270 318) the Hoare annotation is: false [2022-12-13 18:41:06,636 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L272(lines 271 316) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L301(lines 301 312) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 924 930) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0)) [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point L293(line 293) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point L314(lines 271 316) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1 .cse2 .cse3))) [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L281(lines 281 287) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 281 287) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L273(lines 273 277) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 486 492) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L951(lines 951 958) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L951-2(lines 951 958) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L307(lines 307 311) no Hoare annotation was computed. [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point L307-2(lines 301 312) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~9#1| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= ~pumpRunning~0 1)) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2022-12-13 18:41:06,637 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 493 501) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 18:41:06,637 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 297) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L291-1(lines 291 297) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 147 154) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~0#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|) (= ~pumpRunning~0 1)) (not (<= ~waterLevel~0 2))) (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1))))) [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) .cse1 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0))))) [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 96 120) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 112) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L100(lines 100 117) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L228(lines 228 232) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 441 454) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (<= ~waterLevel~0 1))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not .cse1)) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse2 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (not (<= ~waterLevel~0 2)) (and .cse2 .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)))))) [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L228-2(lines 228 232) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L445(lines 445 451) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 219 237) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse2 (<= ~waterLevel~0 1))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (<= 2 ~waterLevel~0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~2#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1|)) .cse1 (and .cse0 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) (not (<= ~waterLevel~0 2)))) (or .cse1 (not (= |old(~pumpRunning~0)| 1)) (not .cse2)))) [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 96 120) no Hoare annotation was computed. [2022-12-13 18:41:06,638 INFO L895 garLoopResultBuilder]: At program point L115(line 115) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 1)) (not (<= ~waterLevel~0 1)) (= ~pumpRunning~0 1)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))))) [2022-12-13 18:41:06,638 INFO L899 garLoopResultBuilder]: For program point L115-1(lines 96 120) no Hoare annotation was computed. [2022-12-13 18:41:06,639 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 376 387) no Hoare annotation was computed. [2022-12-13 18:41:06,639 INFO L899 garLoopResultBuilder]: For program point L380-1(lines 376 387) no Hoare annotation was computed. [2022-12-13 18:41:06,639 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 376 387) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (<= |old(~waterLevel~0)| 1)) (not (= ~pumpRunning~0 0)) .cse0 .cse1) (or .cse0 (not (= ~pumpRunning~0 1)) .cse1 (not (<= |old(~waterLevel~0)| 2))))) [2022-12-13 18:41:06,641 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:41:06,643 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 18:41:06,659 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 06:41:06 BoogieIcfgContainer [2022-12-13 18:41:06,659 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 18:41:06,660 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 18:41:06,660 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 18:41:06,660 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 18:41:06,660 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 06:41:00" (3/4) ... [2022-12-13 18:41:06,662 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 18:41:06,667 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 18:41:06,671 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-12-13 18:41:06,672 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 18:41:06,672 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 18:41:06,672 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 18:41:06,672 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 18:41:06,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-12-13 18:41:06,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive [2022-12-13 18:41:06,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == systemActive && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) [2022-12-13 18:41:06,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,689 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && waterLevel <= 1) && \result == 1)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,690 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((\result == 1 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && 2 <= waterLevel) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2022-12-13 18:41:06,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 1)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) [2022-12-13 18:41:06,691 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-12-13 18:41:06,703 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 18:41:06,703 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 18:41:06,704 INFO L158 Benchmark]: Toolchain (without parser) took 6815.87ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 98.0MB in the beginning and 105.5MB in the end (delta: -7.5MB). Peak memory consumption was 20.3MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,704 INFO L158 Benchmark]: CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 106.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 18:41:06,704 INFO L158 Benchmark]: CACSL2BoogieTranslator took 345.80ms. Allocated memory is still 134.2MB. Free memory was 98.0MB in the beginning and 79.6MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,704 INFO L158 Benchmark]: Boogie Procedure Inliner took 41.48ms. Allocated memory is still 134.2MB. Free memory was 79.2MB in the beginning and 77.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,704 INFO L158 Benchmark]: Boogie Preprocessor took 23.17ms. Allocated memory is still 134.2MB. Free memory was 77.1MB in the beginning and 75.7MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 18:41:06,705 INFO L158 Benchmark]: RCFGBuilder took 325.81ms. Allocated memory is still 134.2MB. Free memory was 75.7MB in the beginning and 58.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,705 INFO L158 Benchmark]: TraceAbstraction took 6029.53ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 58.2MB in the beginning and 111.8MB in the end (delta: -53.6MB). Peak memory consumption was 48.7MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,705 INFO L158 Benchmark]: Witness Printer took 43.77ms. Allocated memory is still 161.5MB. Free memory was 110.7MB in the beginning and 105.5MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-12-13 18:41:06,706 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19ms. Allocated memory is still 134.2MB. Free memory is still 106.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 345.80ms. Allocated memory is still 134.2MB. Free memory was 98.0MB in the beginning and 79.6MB in the end (delta: 18.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 41.48ms. Allocated memory is still 134.2MB. Free memory was 79.2MB in the beginning and 77.1MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 23.17ms. Allocated memory is still 134.2MB. Free memory was 77.1MB in the beginning and 75.7MB in the end (delta: 1.4MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 325.81ms. Allocated memory is still 134.2MB. Free memory was 75.7MB in the beginning and 58.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 6029.53ms. Allocated memory was 134.2MB in the beginning and 161.5MB in the end (delta: 27.3MB). Free memory was 58.2MB in the beginning and 111.8MB in the end (delta: -53.6MB). Peak memory consumption was 48.7MB. Max. memory is 16.1GB. * Witness Printer took 43.77ms. Allocated memory is still 161.5MB. Free memory was 110.7MB in the beginning and 105.5MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 969]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 88 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.0s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1695 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1667 mSDsluCounter, 3598 SdHoareTripleChecker+Invalid, 0.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2489 mSDsCounter, 426 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1898 IncrementalHoareTripleChecker+Invalid, 2324 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 426 mSolverCounterUnsat, 1109 mSDtfsCounter, 1898 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 356 GetRequests, 239 SyntacticMatches, 7 SemanticMatches, 110 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 425 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=296occurred in iteration=9, InterpolantAutomatonStates: 104, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 49 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 957 PreInvPairs, 1134 NumberOfFragments, 1162 HoareAnnotationTreeSize, 957 FomulaSimplifications, 66 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 40 FomulaSimplificationsInter, 5670 FormulaSimplificationTreeSizeReductionInter, 1.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 603 NumberOfCodeBlocks, 603 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 668 ConstructedInterpolants, 0 QuantifiedInterpolants, 1210 SizeOfPredicates, 4 NumberOfNonLiveVariables, 294 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 43/60 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 122]: Loop Invariant Derived loop invariant: ((((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) || !(2 <= \old(waterLevel)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == systemActive - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((2 <= waterLevel && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 <= tmp___0) && pumpRunning == 1)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) && \result <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || \result == 1)) && ((((!(1 == systemActive) || ((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((((1 == systemActive && \result == systemActive) && splverifierCounter == 0) && waterLevel <= 2) && tmp == systemActive) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == systemActive) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((\result == 1 && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && \result == 0)) || !(waterLevel <= 2)) || ((pumpRunning == 0 && waterLevel <= 1) && \result == 1)) - InvariantResult [Line: 328]: Loop Invariant Derived loop invariant: (((((((waterLevel <= 1 && tmp == 0) && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((2 <= waterLevel && \old(waterLevel) == waterLevel) && pumpRunning == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 261]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 155]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 219]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((((pumpRunning == 0 && 2 <= waterLevel) && tmp == 0) && 1 <= \result) && \result == 0) && 1 <= tmp___0)) || !(1 == systemActive)) || (((pumpRunning == 0 && waterLevel <= 1) && \result == 0) && tmp___0 == 0)) || !(waterLevel <= 2)) && ((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 364]: Loop Invariant Derived loop invariant: (((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(\old(waterLevel) <= 2)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-13 18:41:06,728 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_194eb41f-a27c-46f9-8545-9f291deee79d/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE