./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 12:44:15,708 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 12:44:15,710 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 12:44:15,730 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 12:44:15,730 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 12:44:15,731 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 12:44:15,732 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 12:44:15,734 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 12:44:15,736 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 12:44:15,737 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 12:44:15,738 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 12:44:15,739 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 12:44:15,739 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 12:44:15,740 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 12:44:15,742 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 12:44:15,743 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 12:44:15,744 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 12:44:15,745 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 12:44:15,746 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 12:44:15,748 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 12:44:15,750 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 12:44:15,751 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 12:44:15,752 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 12:44:15,753 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 12:44:15,756 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 12:44:15,757 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 12:44:15,757 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 12:44:15,758 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 12:44:15,759 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 12:44:15,759 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 12:44:15,760 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 12:44:15,760 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 12:44:15,761 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 12:44:15,762 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 12:44:15,763 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 12:44:15,763 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 12:44:15,764 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 12:44:15,764 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 12:44:15,764 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 12:44:15,765 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 12:44:15,766 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 12:44:15,767 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 12:44:15,788 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 12:44:15,788 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 12:44:15,789 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 12:44:15,789 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 12:44:15,789 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 12:44:15,790 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 12:44:15,790 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 12:44:15,791 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 12:44:15,791 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 12:44:15,791 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 12:44:15,791 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 12:44:15,791 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 12:44:15,791 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 12:44:15,792 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 12:44:15,792 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 12:44:15,792 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 12:44:15,792 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 12:44:15,792 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 12:44:15,793 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 12:44:15,793 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 12:44:15,793 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 12:44:15,793 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 12:44:15,793 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 12:44:15,794 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 12:44:15,794 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 12:44:15,794 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 12:44:15,794 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 12:44:15,794 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 12:44:15,795 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 12:44:15,796 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 12:44:15,796 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 [2022-12-13 12:44:15,978 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 12:44:15,994 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 12:44:15,996 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 12:44:15,997 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 12:44:15,997 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 12:44:15,998 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-12-13 12:44:18,640 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 12:44:18,837 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 12:44:18,837 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-12-13 12:44:18,845 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/data/5586816f8/7eb30c624af84327a7c1dc9bc5689da7/FLAG2434873b1 [2022-12-13 12:44:18,855 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/data/5586816f8/7eb30c624af84327a7c1dc9bc5689da7 [2022-12-13 12:44:18,857 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 12:44:18,858 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 12:44:18,859 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 12:44:18,859 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 12:44:18,862 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 12:44:18,863 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 12:44:18" (1/1) ... [2022-12-13 12:44:18,863 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2250208c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:18, skipping insertion in model container [2022-12-13 12:44:18,864 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 12:44:18" (1/1) ... [2022-12-13 12:44:18,869 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 12:44:18,891 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 12:44:18,994 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-12-13 12:44:19,066 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 12:44:19,074 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 12:44:19,084 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-12-13 12:44:19,119 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 12:44:19,131 INFO L208 MainTranslator]: Completed translation [2022-12-13 12:44:19,131 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19 WrapperNode [2022-12-13 12:44:19,131 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 12:44:19,132 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 12:44:19,132 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 12:44:19,132 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 12:44:19,137 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,146 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,164 INFO L138 Inliner]: procedures = 58, calls = 103, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 223 [2022-12-13 12:44:19,164 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 12:44:19,165 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 12:44:19,165 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 12:44:19,165 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 12:44:19,172 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,172 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,173 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,174 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,177 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,179 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,181 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,182 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,183 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 12:44:19,184 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 12:44:19,184 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 12:44:19,184 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 12:44:19,185 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (1/1) ... [2022-12-13 12:44:19,190 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 12:44:19,199 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:44:19,210 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 12:44:19,212 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 12:44:19,247 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 12:44:19,247 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 12:44:19,247 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 12:44:19,247 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 12:44:19,248 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 12:44:19,248 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 12:44:19,248 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 12:44:19,248 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 12:44:19,248 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 12:44:19,248 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 12:44:19,248 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 12:44:19,249 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 12:44:19,249 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 12:44:19,249 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-13 12:44:19,249 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-13 12:44:19,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 12:44:19,249 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 12:44:19,249 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 12:44:19,250 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 12:44:19,250 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 12:44:19,325 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 12:44:19,327 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 12:44:19,579 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 12:44:19,587 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 12:44:19,587 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 12:44:19,589 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 12:44:19 BoogieIcfgContainer [2022-12-13 12:44:19,590 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 12:44:19,592 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 12:44:19,592 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 12:44:19,596 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 12:44:19,596 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 12:44:18" (1/3) ... [2022-12-13 12:44:19,597 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d0e974c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 12:44:19, skipping insertion in model container [2022-12-13 12:44:19,597 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:44:19" (2/3) ... [2022-12-13 12:44:19,597 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d0e974c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 12:44:19, skipping insertion in model container [2022-12-13 12:44:19,598 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 12:44:19" (3/3) ... [2022-12-13 12:44:19,599 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product59.cil.c [2022-12-13 12:44:19,615 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 12:44:19,616 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 12:44:19,662 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 12:44:19,674 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@42355389, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 12:44:19,674 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 12:44:19,678 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-12-13 12:44:19,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 12:44:19,694 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:19,694 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:19,695 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:19,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:19,700 INFO L85 PathProgramCache]: Analyzing trace with hash -13342285, now seen corresponding path program 1 times [2022-12-13 12:44:19,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:19,708 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452136637] [2022-12-13 12:44:19,708 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:19,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:19,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:19,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 12:44:19,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:19,839 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:44:19,840 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:19,840 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452136637] [2022-12-13 12:44:19,840 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452136637] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:19,840 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:19,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 12:44:19,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [347439325] [2022-12-13 12:44:19,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:19,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 12:44:19,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:19,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 12:44:19,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 12:44:19,870 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:19,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:19,896 INFO L93 Difference]: Finished difference Result 191 states and 260 transitions. [2022-12-13 12:44:19,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 12:44:19,898 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 12:44:19,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:19,904 INFO L225 Difference]: With dead ends: 191 [2022-12-13 12:44:19,905 INFO L226 Difference]: Without dead ends: 91 [2022-12-13 12:44:19,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 12:44:19,910 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:19,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:19,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-12-13 12:44:19,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-12-13 12:44:19,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.318840579710145) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 12:44:19,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2022-12-13 12:44:19,943 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 25 [2022-12-13 12:44:19,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:19,943 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2022-12-13 12:44:19,943 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:19,943 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2022-12-13 12:44:19,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 12:44:19,945 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:19,945 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:19,945 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 12:44:19,945 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:19,946 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:19,946 INFO L85 PathProgramCache]: Analyzing trace with hash -1348159518, now seen corresponding path program 1 times [2022-12-13 12:44:19,946 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:19,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1671681006] [2022-12-13 12:44:19,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:19,947 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:19,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 12:44:20,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:44:20,027 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:20,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1671681006] [2022-12-13 12:44:20,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1671681006] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:20,027 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:20,027 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:44:20,027 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644219105] [2022-12-13 12:44:20,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:20,028 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 12:44:20,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:20,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:44:20,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:44:20,029 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:20,042 INFO L93 Difference]: Finished difference Result 143 states and 185 transitions. [2022-12-13 12:44:20,042 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:44:20,042 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 12:44:20,042 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:20,043 INFO L225 Difference]: With dead ends: 143 [2022-12-13 12:44:20,043 INFO L226 Difference]: Without dead ends: 82 [2022-12-13 12:44:20,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:44:20,045 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 16 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:20,045 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 189 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:20,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-12-13 12:44:20,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-12-13 12:44:20,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 71 states have internal predecessors, (84), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-12-13 12:44:20,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-12-13 12:44:20,052 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 26 [2022-12-13 12:44:20,052 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:20,052 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-12-13 12:44:20,052 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,052 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-12-13 12:44:20,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-13 12:44:20,053 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:20,053 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:20,053 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 12:44:20,053 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:20,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:20,054 INFO L85 PathProgramCache]: Analyzing trace with hash 1571393351, now seen corresponding path program 1 times [2022-12-13 12:44:20,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:20,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [412716462] [2022-12-13 12:44:20,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:20,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:20,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:20,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,126 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:44:20,126 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:20,126 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [412716462] [2022-12-13 12:44:20,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [412716462] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:20,126 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:20,126 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:44:20,126 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [845086681] [2022-12-13 12:44:20,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:20,127 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 12:44:20,127 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:20,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:44:20,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:44:20,127 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,152 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:20,152 INFO L93 Difference]: Finished difference Result 229 states and 302 transitions. [2022-12-13 12:44:20,152 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:44:20,152 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-12-13 12:44:20,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:20,153 INFO L225 Difference]: With dead ends: 229 [2022-12-13 12:44:20,154 INFO L226 Difference]: Without dead ends: 155 [2022-12-13 12:44:20,154 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:44:20,155 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:20,155 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 226 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:20,156 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-12-13 12:44:20,169 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 152. [2022-12-13 12:44:20,169 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 115 states have (on average 1.3565217391304347) internal successors, (156), 130 states have internal predecessors, (156), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-12-13 12:44:20,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 200 transitions. [2022-12-13 12:44:20,171 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 200 transitions. Word has length 30 [2022-12-13 12:44:20,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:20,171 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 200 transitions. [2022-12-13 12:44:20,171 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,171 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 200 transitions. [2022-12-13 12:44:20,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-13 12:44:20,172 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:20,172 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:20,172 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 12:44:20,173 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:20,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:20,173 INFO L85 PathProgramCache]: Analyzing trace with hash 1136396561, now seen corresponding path program 1 times [2022-12-13 12:44:20,173 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:20,173 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [561478928] [2022-12-13 12:44:20,173 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:20,173 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:20,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 12:44:20,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,279 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:44:20,279 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:20,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [561478928] [2022-12-13 12:44:20,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [561478928] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:20,280 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:20,280 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:44:20,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712863205] [2022-12-13 12:44:20,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:20,280 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 12:44:20,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:20,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:44:20,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:44:20,282 INFO L87 Difference]: Start difference. First operand 152 states and 200 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:20,352 INFO L93 Difference]: Finished difference Result 392 states and 527 transitions. [2022-12-13 12:44:20,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 12:44:20,353 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-12-13 12:44:20,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:20,354 INFO L225 Difference]: With dead ends: 392 [2022-12-13 12:44:20,355 INFO L226 Difference]: Without dead ends: 248 [2022-12-13 12:44:20,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:44:20,356 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 64 mSDsluCounter, 283 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:20,357 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 391 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:20,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2022-12-13 12:44:20,377 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 235. [2022-12-13 12:44:20,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 235 states, 178 states have (on average 1.3146067415730338) internal successors, (234), 195 states have internal predecessors, (234), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2022-12-13 12:44:20,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 302 transitions. [2022-12-13 12:44:20,380 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 302 transitions. Word has length 34 [2022-12-13 12:44:20,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:20,381 INFO L495 AbstractCegarLoop]: Abstraction has 235 states and 302 transitions. [2022-12-13 12:44:20,381 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 12:44:20,381 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 302 transitions. [2022-12-13 12:44:20,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 12:44:20,383 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:20,383 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:20,383 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 12:44:20,383 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:20,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:20,384 INFO L85 PathProgramCache]: Analyzing trace with hash 571922311, now seen corresponding path program 1 times [2022-12-13 12:44:20,384 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:20,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [282486469] [2022-12-13 12:44:20,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:20,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:20,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:20,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:20,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 12:44:20,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,488 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 12:44:20,488 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:20,488 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [282486469] [2022-12-13 12:44:20,488 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [282486469] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:20,488 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:20,488 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 12:44:20,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1933694075] [2022-12-13 12:44:20,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:20,489 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 12:44:20,489 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:20,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:44:20,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:44:20,490 INFO L87 Difference]: Start difference. First operand 235 states and 302 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 12:44:20,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:20,644 INFO L93 Difference]: Finished difference Result 526 states and 695 transitions. [2022-12-13 12:44:20,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 12:44:20,644 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-12-13 12:44:20,645 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:20,647 INFO L225 Difference]: With dead ends: 526 [2022-12-13 12:44:20,647 INFO L226 Difference]: Without dead ends: 299 [2022-12-13 12:44:20,648 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 12:44:20,649 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 68 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:20,649 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 374 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 12:44:20,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2022-12-13 12:44:20,670 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 287. [2022-12-13 12:44:20,671 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 287 states, 220 states have (on average 1.290909090909091) internal successors, (284), 237 states have internal predecessors, (284), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2022-12-13 12:44:20,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 287 states to 287 states and 366 transitions. [2022-12-13 12:44:20,672 INFO L78 Accepts]: Start accepts. Automaton has 287 states and 366 transitions. Word has length 52 [2022-12-13 12:44:20,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:20,672 INFO L495 AbstractCegarLoop]: Abstraction has 287 states and 366 transitions. [2022-12-13 12:44:20,673 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 12:44:20,673 INFO L276 IsEmpty]: Start isEmpty. Operand 287 states and 366 transitions. [2022-12-13 12:44:20,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 12:44:20,675 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:20,675 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:20,675 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 12:44:20,675 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:20,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:20,676 INFO L85 PathProgramCache]: Analyzing trace with hash -1799816951, now seen corresponding path program 1 times [2022-12-13 12:44:20,676 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:20,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [333653880] [2022-12-13 12:44:20,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:20,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:20,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:20,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:20,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 12:44:20,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:20,769 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 12:44:20,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:20,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [333653880] [2022-12-13 12:44:20,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [333653880] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:20,769 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:20,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 12:44:20,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [827881396] [2022-12-13 12:44:20,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:20,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 12:44:20,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:20,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:44:20,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:44:20,771 INFO L87 Difference]: Start difference. First operand 287 states and 366 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 12:44:21,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:21,012 INFO L93 Difference]: Finished difference Result 596 states and 777 transitions. [2022-12-13 12:44:21,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 12:44:21,012 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2022-12-13 12:44:21,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:21,014 INFO L225 Difference]: With dead ends: 596 [2022-12-13 12:44:21,015 INFO L226 Difference]: Without dead ends: 317 [2022-12-13 12:44:21,016 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2022-12-13 12:44:21,017 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 230 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 193 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 237 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 257 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 193 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:21,018 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [237 Valid, 424 Invalid, 257 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 193 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 12:44:21,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 317 states. [2022-12-13 12:44:21,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 317 to 291. [2022-12-13 12:44:21,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 291 states, 224 states have (on average 1.2857142857142858) internal successors, (288), 241 states have internal predecessors, (288), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2022-12-13 12:44:21,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 291 states to 291 states and 370 transitions. [2022-12-13 12:44:21,046 INFO L78 Accepts]: Start accepts. Automaton has 291 states and 370 transitions. Word has length 52 [2022-12-13 12:44:21,047 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:21,047 INFO L495 AbstractCegarLoop]: Abstraction has 291 states and 370 transitions. [2022-12-13 12:44:21,047 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 12:44:21,047 INFO L276 IsEmpty]: Start isEmpty. Operand 291 states and 370 transitions. [2022-12-13 12:44:21,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 12:44:21,049 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:21,049 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:21,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 12:44:21,049 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:21,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:21,050 INFO L85 PathProgramCache]: Analyzing trace with hash -413613557, now seen corresponding path program 1 times [2022-12-13 12:44:21,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:21,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1434671205] [2022-12-13 12:44:21,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:21,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:21,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:21,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:21,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 12:44:21,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,132 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 12:44:21,133 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:21,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1434671205] [2022-12-13 12:44:21,133 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1434671205] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:21,133 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:21,133 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:44:21,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815030180] [2022-12-13 12:44:21,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:21,134 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 12:44:21,134 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:21,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:44:21,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:44:21,135 INFO L87 Difference]: Start difference. First operand 291 states and 370 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 12:44:21,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:21,335 INFO L93 Difference]: Finished difference Result 822 states and 1083 transitions. [2022-12-13 12:44:21,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 12:44:21,335 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 52 [2022-12-13 12:44:21,336 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:21,338 INFO L225 Difference]: With dead ends: 822 [2022-12-13 12:44:21,339 INFO L226 Difference]: Without dead ends: 539 [2022-12-13 12:44:21,340 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:44:21,341 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 221 mSDsluCounter, 185 mSDsCounter, 0 mSdLazyCounter, 155 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 227 SdHoareTripleChecker+Valid, 320 SdHoareTripleChecker+Invalid, 216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 155 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:21,341 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [227 Valid, 320 Invalid, 216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 155 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 12:44:21,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 539 states. [2022-12-13 12:44:21,384 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 539 to 532. [2022-12-13 12:44:21,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 532 states, 405 states have (on average 1.254320987654321) internal successors, (508), 431 states have internal predecessors, (508), 65 states have call successors, (65), 59 states have call predecessors, (65), 61 states have return successors, (103), 64 states have call predecessors, (103), 65 states have call successors, (103) [2022-12-13 12:44:21,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 532 states to 532 states and 676 transitions. [2022-12-13 12:44:21,390 INFO L78 Accepts]: Start accepts. Automaton has 532 states and 676 transitions. Word has length 52 [2022-12-13 12:44:21,390 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:21,390 INFO L495 AbstractCegarLoop]: Abstraction has 532 states and 676 transitions. [2022-12-13 12:44:21,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 12:44:21,391 INFO L276 IsEmpty]: Start isEmpty. Operand 532 states and 676 transitions. [2022-12-13 12:44:21,392 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-13 12:44:21,392 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:21,393 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:21,393 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 12:44:21,393 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:21,393 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:21,394 INFO L85 PathProgramCache]: Analyzing trace with hash 1362264357, now seen corresponding path program 1 times [2022-12-13 12:44:21,394 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:21,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487702713] [2022-12-13 12:44:21,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:21,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:21,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 12:44:21,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,450 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 12:44:21,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:21,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-12-13 12:44:21,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,465 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 12:44:21,465 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:21,465 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487702713] [2022-12-13 12:44:21,465 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487702713] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:21,465 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:44:21,465 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:44:21,466 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [784708635] [2022-12-13 12:44:21,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:21,466 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 12:44:21,466 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:21,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:44:21,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:44:21,467 INFO L87 Difference]: Start difference. First operand 532 states and 676 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 12:44:21,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:21,758 INFO L93 Difference]: Finished difference Result 1113 states and 1508 transitions. [2022-12-13 12:44:21,759 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 12:44:21,759 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-12-13 12:44:21,759 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:21,765 INFO L225 Difference]: With dead ends: 1113 [2022-12-13 12:44:21,765 INFO L226 Difference]: Without dead ends: 1111 [2022-12-13 12:44:21,766 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-13 12:44:21,767 INFO L413 NwaCegarLoop]: 82 mSDtfsCounter, 335 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 194 mSolverCounterSat, 119 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 313 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 119 IncrementalHoareTripleChecker+Valid, 194 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:21,767 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [339 Valid, 237 Invalid, 313 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [119 Valid, 194 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 12:44:21,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1111 states. [2022-12-13 12:44:21,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1111 to 1007. [2022-12-13 12:44:21,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1007 states, 766 states have (on average 1.2597911227154046) internal successors, (965), 825 states have internal predecessors, (965), 130 states have call successors, (130), 94 states have call predecessors, (130), 110 states have return successors, (275), 122 states have call predecessors, (275), 130 states have call successors, (275) [2022-12-13 12:44:21,855 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1007 states to 1007 states and 1370 transitions. [2022-12-13 12:44:21,855 INFO L78 Accepts]: Start accepts. Automaton has 1007 states and 1370 transitions. Word has length 56 [2022-12-13 12:44:21,855 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:21,855 INFO L495 AbstractCegarLoop]: Abstraction has 1007 states and 1370 transitions. [2022-12-13 12:44:21,856 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 12:44:21,856 INFO L276 IsEmpty]: Start isEmpty. Operand 1007 states and 1370 transitions. [2022-12-13 12:44:21,859 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2022-12-13 12:44:21,859 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:21,859 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:21,859 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 12:44:21,859 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:21,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:21,860 INFO L85 PathProgramCache]: Analyzing trace with hash -2138265107, now seen corresponding path program 1 times [2022-12-13 12:44:21,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:21,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896340355] [2022-12-13 12:44:21,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:21,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:21,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 12:44:21,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 12:44:21,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:21,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 12:44:21,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:22,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 12:44:22,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-12-13 12:44:22,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,101 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 15 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-13 12:44:22,101 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:22,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896340355] [2022-12-13 12:44:22,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [896340355] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 12:44:22,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1408573049] [2022-12-13 12:44:22,101 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:22,102 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 12:44:22,102 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:44:22,103 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 12:44:22,104 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 12:44:22,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,171 INFO L263 TraceCheckSpWp]: Trace formula consists of 318 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-13 12:44:22,177 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 12:44:22,197 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:44:22,197 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 12:44:22,197 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1408573049] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:22,197 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 12:44:22,197 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [13] total 13 [2022-12-13 12:44:22,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [540936626] [2022-12-13 12:44:22,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:22,198 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 12:44:22,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:22,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:44:22,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-12-13 12:44:22,199 INFO L87 Difference]: Start difference. First operand 1007 states and 1370 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-12-13 12:44:22,249 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:22,249 INFO L93 Difference]: Finished difference Result 1145 states and 1551 transitions. [2022-12-13 12:44:22,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:44:22,250 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 86 [2022-12-13 12:44:22,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:22,253 INFO L225 Difference]: With dead ends: 1145 [2022-12-13 12:44:22,253 INFO L226 Difference]: Without dead ends: 491 [2022-12-13 12:44:22,256 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 95 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-12-13 12:44:22,256 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 38 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:22,257 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 234 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:22,258 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 491 states. [2022-12-13 12:44:22,300 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 491 to 486. [2022-12-13 12:44:22,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 373 states have (on average 1.227882037533512) internal successors, (458), 398 states have internal predecessors, (458), 59 states have call successors, (59), 44 states have call predecessors, (59), 53 states have return successors, (129), 59 states have call predecessors, (129), 59 states have call successors, (129) [2022-12-13 12:44:22,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 646 transitions. [2022-12-13 12:44:22,306 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 646 transitions. Word has length 86 [2022-12-13 12:44:22,306 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:22,306 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 646 transitions. [2022-12-13 12:44:22,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2022-12-13 12:44:22,306 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 646 transitions. [2022-12-13 12:44:22,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-12-13 12:44:22,309 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:22,309 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:22,316 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 12:44:22,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 12:44:22,510 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:22,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:22,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1849667941, now seen corresponding path program 1 times [2022-12-13 12:44:22,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:22,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1242968053] [2022-12-13 12:44:22,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:22,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:22,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 12:44:22,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:22,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 12:44:22,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:22,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 12:44:22,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-12-13 12:44:22,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 12:44:22,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-12-13 12:44:22,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,650 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 8 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-12-13 12:44:22,650 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:22,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1242968053] [2022-12-13 12:44:22,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1242968053] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 12:44:22,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [711014529] [2022-12-13 12:44:22,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:22,651 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 12:44:22,651 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:44:22,652 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 12:44:22,653 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 12:44:22,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:22,718 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 5 conjunts are in the unsatisfiable core [2022-12-13 12:44:22,720 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 12:44:22,770 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-12-13 12:44:22,770 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 12:44:22,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [711014529] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:22,770 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 12:44:22,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-12-13 12:44:22,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846626887] [2022-12-13 12:44:22,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:22,771 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 12:44:22,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:22,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:44:22,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-12-13 12:44:22,772 INFO L87 Difference]: Start difference. First operand 486 states and 646 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-13 12:44:22,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:22,838 INFO L93 Difference]: Finished difference Result 950 states and 1315 transitions. [2022-12-13 12:44:22,838 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:44:22,839 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 97 [2022-12-13 12:44:22,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:22,842 INFO L225 Difference]: With dead ends: 950 [2022-12-13 12:44:22,842 INFO L226 Difference]: Without dead ends: 520 [2022-12-13 12:44:22,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=141, Unknown=0, NotChecked=0, Total=182 [2022-12-13 12:44:22,845 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 33 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:22,845 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 396 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:22,846 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 520 states. [2022-12-13 12:44:22,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 520 to 492. [2022-12-13 12:44:22,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 492 states, 379 states have (on average 1.2242744063324538) internal successors, (464), 404 states have internal predecessors, (464), 59 states have call successors, (59), 44 states have call predecessors, (59), 53 states have return successors, (129), 59 states have call predecessors, (129), 59 states have call successors, (129) [2022-12-13 12:44:22,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 492 states to 492 states and 652 transitions. [2022-12-13 12:44:22,890 INFO L78 Accepts]: Start accepts. Automaton has 492 states and 652 transitions. Word has length 97 [2022-12-13 12:44:22,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:22,891 INFO L495 AbstractCegarLoop]: Abstraction has 492 states and 652 transitions. [2022-12-13 12:44:22,891 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-13 12:44:22,891 INFO L276 IsEmpty]: Start isEmpty. Operand 492 states and 652 transitions. [2022-12-13 12:44:22,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-12-13 12:44:22,893 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:22,893 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:22,898 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 12:44:23,094 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-13 12:44:23,094 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:23,094 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:23,095 INFO L85 PathProgramCache]: Analyzing trace with hash 1983681447, now seen corresponding path program 1 times [2022-12-13 12:44:23,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:23,095 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [696246489] [2022-12-13 12:44:23,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:23,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:23,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 12:44:23,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:23,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,256 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 12:44:23,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:23,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 12:44:23,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-12-13 12:44:23,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 12:44:23,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-12-13 12:44:23,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,351 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 17 proven. 6 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-13 12:44:23,351 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:23,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [696246489] [2022-12-13 12:44:23,351 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [696246489] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 12:44:23,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1598218451] [2022-12-13 12:44:23,351 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:23,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 12:44:23,352 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:44:23,353 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 12:44:23,353 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-13 12:44:23,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,418 INFO L263 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-13 12:44:23,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 12:44:23,515 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 12:44:23,515 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 12:44:23,515 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1598218451] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:23,515 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 12:44:23,515 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [12] total 16 [2022-12-13 12:44:23,515 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [561767775] [2022-12-13 12:44:23,516 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:23,516 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 12:44:23,516 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:23,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:44:23,517 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=208, Unknown=0, NotChecked=0, Total=240 [2022-12-13 12:44:23,517 INFO L87 Difference]: Start difference. First operand 492 states and 652 transitions. Second operand has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 12:44:23,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:23,597 INFO L93 Difference]: Finished difference Result 808 states and 1066 transitions. [2022-12-13 12:44:23,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 12:44:23,598 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 97 [2022-12-13 12:44:23,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:23,599 INFO L225 Difference]: With dead ends: 808 [2022-12-13 12:44:23,599 INFO L226 Difference]: Without dead ends: 372 [2022-12-13 12:44:23,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 105 SyntacticMatches, 3 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-12-13 12:44:23,601 INFO L413 NwaCegarLoop]: 142 mSDtfsCounter, 124 mSDsluCounter, 320 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:23,601 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 462 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:23,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2022-12-13 12:44:23,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 343. [2022-12-13 12:44:23,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 264 states have (on average 1.1818181818181819) internal successors, (312), 281 states have internal predecessors, (312), 40 states have call successors, (40), 32 states have call predecessors, (40), 38 states have return successors, (66), 40 states have call predecessors, (66), 40 states have call successors, (66) [2022-12-13 12:44:23,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 418 transitions. [2022-12-13 12:44:23,620 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 418 transitions. Word has length 97 [2022-12-13 12:44:23,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:23,620 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 418 transitions. [2022-12-13 12:44:23,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 13.0) internal successors, (78), 6 states have internal predecessors, (78), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 12:44:23,620 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 418 transitions. [2022-12-13 12:44:23,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2022-12-13 12:44:23,621 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 12:44:23,621 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:23,626 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-13 12:44:23,822 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-13 12:44:23,822 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 12:44:23,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:44:23,822 INFO L85 PathProgramCache]: Analyzing trace with hash -1159090457, now seen corresponding path program 1 times [2022-12-13 12:44:23,823 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:44:23,823 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019938923] [2022-12-13 12:44:23,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:23,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:44:23,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 12:44:23,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 12:44:23,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 12:44:23,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:23,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 12:44:23,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-12-13 12:44:23,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 12:44:23,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2022-12-13 12:44:23,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:23,937 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 11 proven. 14 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-13 12:44:23,938 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:44:23,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019938923] [2022-12-13 12:44:23,938 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2019938923] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 12:44:23,938 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2029147422] [2022-12-13 12:44:23,938 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:44:23,938 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 12:44:23,938 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:44:23,939 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 12:44:23,940 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-13 12:44:24,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:44:24,010 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 3 conjunts are in the unsatisfiable core [2022-12-13 12:44:24,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 12:44:24,020 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:44:24,020 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 12:44:24,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2029147422] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:44:24,020 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 12:44:24,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 8 [2022-12-13 12:44:24,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1479750960] [2022-12-13 12:44:24,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:44:24,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 12:44:24,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:44:24,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:44:24,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-12-13 12:44:24,022 INFO L87 Difference]: Start difference. First operand 343 states and 418 transitions. Second operand has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-13 12:44:24,050 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:44:24,050 INFO L93 Difference]: Finished difference Result 533 states and 661 transitions. [2022-12-13 12:44:24,050 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:44:24,051 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 104 [2022-12-13 12:44:24,051 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 12:44:24,051 INFO L225 Difference]: With dead ends: 533 [2022-12-13 12:44:24,051 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 12:44:24,053 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-12-13 12:44:24,053 INFO L413 NwaCegarLoop]: 125 mSDtfsCounter, 49 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 12:44:24,053 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 194 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 12:44:24,054 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 12:44:24,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 12:44:24,054 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:44:24,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 12:44:24,054 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 104 [2022-12-13 12:44:24,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 12:44:24,054 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 12:44:24,055 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.333333333333332) internal successors, (76), 3 states have internal predecessors, (76), 2 states have call successors, (8), 2 states have call predecessors, (8), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-12-13 12:44:24,055 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 12:44:24,055 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 12:44:24,057 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 12:44:24,062 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-13 12:44:24,258 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-12-13 12:44:24,259 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 12:44:26,799 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2022-12-13 12:44:26,799 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 183 190) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (and (or .cse0 (not (<= 2 ~waterLevel~0))) (or .cse0 (not (= 1 ~systemActive~0))))) [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 183 190) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 98 104) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 98 104) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point L942-1(lines 938 949) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 938 949) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 938 949) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point L417-1(line 417) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 411 440) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point L436(lines 411 440) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point L432(line 432) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 411 440) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point L425-1(lines 425 429) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point L422(line 422) no Hoare annotation was computed. [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point L421-2(lines 421 435) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 950 958) the Hoare annotation is: true [2022-12-13 12:44:26,800 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 950 958) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 950 958) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L386-1(line 386) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L895 garLoopResultBuilder]: At program point L151(line 151) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not .cse2))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,801 INFO L895 garLoopResultBuilder]: At program point L151-1(lines 132 156) the Hoare annotation is: (let ((.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse0 (not .cse4)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse3 .cse4 (and .cse5 (<= 1 ~waterLevel~0)) .cse6) (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and .cse5 .cse7) .cse3 (not (<= 1 |old(~waterLevel~0)|)) (and (<= 2 ~waterLevel~0) .cse7))) (or .cse0 (not (= 0 ~systemActive~0))) (or .cse0 .cse1 .cse2 .cse3 .cse6)))) [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 279) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 279) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 1005 1013) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse2 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 74 97) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L78-1(lines 77 96) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 148) no Hoare annotation was computed. [2022-12-13 12:44:26,801 INFO L899 garLoopResultBuilder]: For program point L136(lines 136 153) no Hoare annotation was computed. [2022-12-13 12:44:26,802 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 402) no Hoare annotation was computed. [2022-12-13 12:44:26,802 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 405) no Hoare annotation was computed. [2022-12-13 12:44:26,802 INFO L895 garLoopResultBuilder]: At program point L388-1(lines 380 408) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0)) (.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse8)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not .cse7)) (.cse5 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (and (not .cse5) .cse3) .cse6) (or .cse0 .cse1 (not (= |old(~waterLevel~0)| 1)) .cse4 (and .cse5 .cse2 .cse7 (= ~waterLevel~0 1))) (or .cse0 (and .cse5 .cse2 .cse3) (not (= 0 ~systemActive~0))) (or .cse4 (and .cse5 .cse2 .cse7 (<= 1 ~waterLevel~0)) .cse8 .cse6)))) [2022-12-13 12:44:26,802 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-12-13 12:44:26,802 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not .cse2))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,802 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 74 97) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse7)) (.cse3 (= ~pumpRunning~0 0)) (.cse6 (not (= 0 ~systemActive~0))) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse4 .cse6) (or .cse0 (and .cse3 .cse5) .cse6) (or .cse2 .cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse8) (or .cse1 .cse4 .cse2 .cse8)))) [2022-12-13 12:44:26,802 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 399) no Hoare annotation was computed. [2022-12-13 12:44:26,802 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 266 284) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse2 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse2 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,802 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point L918-2(lines 914 925) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not .cse1))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2) (or .cse3 .cse4 .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse4 (= ~methAndRunningLastTime~0 0) .cse0 .cse2) (or .cse3 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not .cse2))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (not .cse2))) (and (or .cse0 (not (= |old(~methAndRunningLastTime~0)| 0)) .cse1 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= 1 ~waterLevel~0)) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-12-13 12:44:26,803 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 97) no Hoare annotation was computed. [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 202 210) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= |old(~pumpRunning~0)| 0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not .cse8)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse9 (and .cse6 .cse7 .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (and .cse6 .cse7 (<= 1 ~waterLevel~0)) .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse9 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5) (or .cse0 .cse1 .cse5 (and .cse2 (not .cse6) (<= 2 ~waterLevel~0) .cse10) (not (<= 1 |old(~waterLevel~0)|)) .cse9)))) [2022-12-13 12:44:26,803 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point L386(line 386) the Hoare annotation is: (let ((.cse8 (= |old(~pumpRunning~0)| 0)) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse9 .cse10)) (.cse0 (not .cse8)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse0 .cse6 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse7) (or .cse7 .cse8 (and .cse9 (<= 1 ~waterLevel~0)) .cse5) (or .cse0 .cse1 .cse6 .cse7 (not (<= 1 |old(~waterLevel~0)|)) (and (<= 2 ~waterLevel~0) .cse10)) (or .cse0 .cse1 .cse2 .cse7 .cse5)))) [2022-12-13 12:44:26,803 INFO L899 garLoopResultBuilder]: For program point L316(lines 316 320) no Hoare annotation was computed. [2022-12-13 12:44:26,803 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 472 482) the Hoare annotation is: true [2022-12-13 12:44:26,803 INFO L895 garLoopResultBuilder]: At program point L362(lines 313 363) the Hoare annotation is: false [2022-12-13 12:44:26,804 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 521 527) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 12:44:26,804 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 486 508) the Hoare annotation is: true [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L895 garLoopResultBuilder]: At program point L350-2(lines 344 357) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse2 (= 0 ~systemActive~0)))) [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 340) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L334-1(lines 334 340) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 465 471) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 12:44:26,804 INFO L895 garLoopResultBuilder]: At program point L359(lines 314 361) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-12-13 12:44:26,804 INFO L895 garLoopResultBuilder]: At program point L326(line 326) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 503) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point L496-2(lines 496 503) no Hoare annotation was computed. [2022-12-13 12:44:26,804 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 528 534) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 372 379) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L315(lines 314 361) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 357) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 285 299) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0)) [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point L336(line 336) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= ~methAndRunningLastTime~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (not .cse0) (<= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse3 .cse1 .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse3 .cse2 (= 0 ~systemActive~0)))) [2022-12-13 12:44:26,805 INFO L902 garLoopResultBuilder]: At program point L365(lines 304 369) the Hoare annotation is: true [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 535 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= 1 ~systemActive~0) .cse0) (and (<= 2 ~waterLevel~0) .cse0))) [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 260) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L256-2(lines 256 260) no Hoare annotation was computed. [2022-12-13 12:44:26,805 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,805 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 122) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point L110(lines 110 127) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 106 130) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 991 1004) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 247 265) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and .cse0 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point L125-1(lines 106 130) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 106 130) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point L173-2(lines 166 182) the Hoare annotation is: (or (not (= ~waterLevel~0 1)) (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 191 201) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 157 164) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (not (= ~pumpRunning~0 0)) (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,806 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0))) [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2022-12-13 12:44:26,806 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-12-13 12:44:26,807 INFO L899 garLoopResultBuilder]: For program point L930-1(lines 926 937) no Hoare annotation was computed. [2022-12-13 12:44:26,807 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 926 937) no Hoare annotation was computed. [2022-12-13 12:44:26,807 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 926 937) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0))) (let ((.cse0 (not .cse4)) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (= 0 ~systemActive~0))) (or .cse0 .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse2) (or .cse4 .cse3 .cse1 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-12-13 12:44:26,809 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:44:26,811 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 12:44:26,827 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 12:44:26 BoogieIcfgContainer [2022-12-13 12:44:26,827 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 12:44:26,827 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 12:44:26,827 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 12:44:26,828 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 12:44:26,828 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 12:44:19" (3/4) ... [2022-12-13 12:44:26,830 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 12:44:26,835 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 12:44:26,840 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2022-12-13 12:44:26,841 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 12:44:26,841 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 12:44:26,841 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 12:44:26,841 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 12:44:26,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-13 12:44:26,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-12-13 12:44:26,859 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 == systemActive) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && 1 <= waterLevel)) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel))) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && (((!(1 == systemActive) || ((pumpRunning == 0 && \result == 0) && 1 <= waterLevel)) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((methAndRunningLastTime == 0 && !(pumpRunning == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-12-13 12:44:26,860 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (!(pumpRunning == 0) && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-12-13 12:44:26,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-13 12:44:26,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-12-13 12:44:26,861 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) [2022-12-13 12:44:26,877 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 12:44:26,877 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 12:44:26,878 INFO L158 Benchmark]: Toolchain (without parser) took 8019.54ms. Allocated memory was 127.9MB in the beginning and 155.2MB in the end (delta: 27.3MB). Free memory was 97.4MB in the beginning and 64.8MB in the end (delta: 32.6MB). Peak memory consumption was 60.4MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,878 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 127.9MB. Free memory is still 71.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 12:44:26,878 INFO L158 Benchmark]: CACSL2BoogieTranslator took 272.66ms. Allocated memory is still 127.9MB. Free memory was 96.9MB in the beginning and 78.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,878 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.07ms. Allocated memory is still 127.9MB. Free memory was 78.1MB in the beginning and 75.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,879 INFO L158 Benchmark]: Boogie Preprocessor took 19.10ms. Allocated memory is still 127.9MB. Free memory was 75.6MB in the beginning and 74.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,879 INFO L158 Benchmark]: RCFGBuilder took 405.61ms. Allocated memory is still 127.9MB. Free memory was 74.0MB in the beginning and 57.2MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,879 INFO L158 Benchmark]: TraceAbstraction took 7234.72ms. Allocated memory was 127.9MB in the beginning and 155.2MB in the end (delta: 27.3MB). Free memory was 56.3MB in the beginning and 71.1MB in the end (delta: -14.8MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,879 INFO L158 Benchmark]: Witness Printer took 49.81ms. Allocated memory is still 155.2MB. Free memory was 71.1MB in the beginning and 64.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 12:44:26,881 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 127.9MB. Free memory is still 71.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 272.66ms. Allocated memory is still 127.9MB. Free memory was 96.9MB in the beginning and 78.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.07ms. Allocated memory is still 127.9MB. Free memory was 78.1MB in the beginning and 75.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 19.10ms. Allocated memory is still 127.9MB. Free memory was 75.6MB in the beginning and 74.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 405.61ms. Allocated memory is still 127.9MB. Free memory was 74.0MB in the beginning and 57.2MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 7234.72ms. Allocated memory was 127.9MB in the beginning and 155.2MB in the end (delta: 27.3MB). Free memory was 56.3MB in the beginning and 71.1MB in the end (delta: -14.8MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. * Witness Printer took 49.81ms. Allocated memory is still 155.2MB. Free memory was 71.1MB in the beginning and 64.8MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 7.2s, OverallIterations: 12, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1287 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1263 mSDsluCounter, 3574 SdHoareTripleChecker+Invalid, 0.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2183 mSDsCounter, 296 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 772 IncrementalHoareTripleChecker+Invalid, 1068 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 296 mSolverCounterUnsat, 1391 mSDtfsCounter, 772 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 570 GetRequests, 482 SyntacticMatches, 5 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 95 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1007occurred in iteration=8, InterpolantAutomatonStates: 65, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 227 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 1525 PreInvPairs, 1655 NumberOfFragments, 1505 HoareAnnotationTreeSize, 1525 FomulaSimplifications, 412 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 46 FomulaSimplificationsInter, 7701 FormulaSimplificationTreeSizeReductionInter, 2.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 1095 NumberOfCodeBlocks, 1095 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 1079 ConstructedInterpolants, 0 QuantifiedInterpolants, 1995 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1372 ConjunctsInSsa, 22 ConjunctsInUnsatCore, 16 InterpolantComputations, 12 PerfectInterpolantSequences, 274/308 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) && (((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == 0 && 1 <= waterLevel)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || (2 <= waterLevel && \old(waterLevel) == waterLevel))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (!(pumpRunning == 0) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((!(1 == systemActive) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && 1 <= waterLevel)) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (!(pumpRunning == 0) && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || \old(pumpRunning) == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || methAndRunningLastTime == 0) || !(1 == systemActive)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && (((!(1 == systemActive) || ((pumpRunning == 0 && \result == 0) && 1 <= waterLevel)) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((methAndRunningLastTime == 0 && !(pumpRunning == 0)) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || \old(pumpRunning) == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 472]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && splverifierCounter == 0) && 0 == systemActive - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || \old(pumpRunning) == 0) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((((!(pumpRunning == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0) - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 166]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methAndRunningLastTime == 0) RESULT: Ultimate proved your program to be correct! [2022-12-13 12:44:26,900 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5d09309a-4539-46c1-8d52-ef31c304e752/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE