./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 21:43:08,804 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 21:43:08,805 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 21:43:08,818 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 21:43:08,818 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 21:43:08,819 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 21:43:08,820 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 21:43:08,821 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 21:43:08,822 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 21:43:08,822 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 21:43:08,823 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 21:43:08,824 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 21:43:08,824 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 21:43:08,825 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 21:43:08,825 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 21:43:08,826 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 21:43:08,827 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 21:43:08,827 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 21:43:08,829 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 21:43:08,830 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 21:43:08,831 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 21:43:08,832 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 21:43:08,832 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 21:43:08,833 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 21:43:08,835 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 21:43:08,836 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 21:43:08,836 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 21:43:08,836 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 21:43:08,837 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 21:43:08,837 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 21:43:08,838 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 21:43:08,838 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 21:43:08,839 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 21:43:08,839 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 21:43:08,840 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 21:43:08,840 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 21:43:08,841 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 21:43:08,841 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 21:43:08,841 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 21:43:08,842 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 21:43:08,842 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 21:43:08,843 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 21:43:08,857 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 21:43:08,857 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 21:43:08,857 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 21:43:08,857 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 21:43:08,858 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 21:43:08,858 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 21:43:08,858 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 21:43:08,858 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 21:43:08,859 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 21:43:08,859 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 21:43:08,860 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 21:43:08,860 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 21:43:08,861 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 21:43:08,861 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 21:43:08,862 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 21:43:08,862 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 21:43:08,862 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> debcf50bf3bb3961401c62ca4b7217ea7cc93038f750143121614e56b550164d [2022-12-13 21:43:09,022 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 21:43:09,041 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 21:43:09,044 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 21:43:09,045 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 21:43:09,046 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 21:43:09,047 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-12-13 21:43:11,644 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 21:43:11,844 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 21:43:11,844 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c [2022-12-13 21:43:11,853 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/data/f95ad3c47/a637f51201324de08d527df1d3c1e67c/FLAG10056e606 [2022-12-13 21:43:11,864 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/data/f95ad3c47/a637f51201324de08d527df1d3c1e67c [2022-12-13 21:43:11,866 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 21:43:11,867 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 21:43:11,868 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 21:43:11,868 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 21:43:11,872 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 21:43:11,872 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:43:11" (1/1) ... [2022-12-13 21:43:11,873 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28723b29 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:11, skipping insertion in model container [2022-12-13 21:43:11,873 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:43:11" (1/1) ... [2022-12-13 21:43:11,878 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 21:43:11,913 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 21:43:12,095 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-12-13 21:43:12,120 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:43:12,128 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 21:43:12,159 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/sv-benchmarks/c/product-lines/minepump_spec4_product58.cil.c[11718,11731] [2022-12-13 21:43:12,172 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:43:12,184 INFO L208 MainTranslator]: Completed translation [2022-12-13 21:43:12,185 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12 WrapperNode [2022-12-13 21:43:12,185 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 21:43:12,186 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 21:43:12,186 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 21:43:12,186 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 21:43:12,191 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,200 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,218 INFO L138 Inliner]: procedures = 57, calls = 101, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 227 [2022-12-13 21:43:12,219 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 21:43:12,219 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 21:43:12,219 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 21:43:12,219 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 21:43:12,226 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,226 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,228 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,228 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,232 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,235 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,236 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,237 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,238 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 21:43:12,239 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 21:43:12,239 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 21:43:12,239 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 21:43:12,240 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (1/1) ... [2022-12-13 21:43:12,245 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 21:43:12,254 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:43:12,265 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 21:43:12,267 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 21:43:12,301 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 21:43:12,301 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 21:43:12,302 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 21:43:12,302 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 21:43:12,302 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:43:12,302 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 21:43:12,302 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 21:43:12,302 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 21:43:12,303 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 21:43:12,303 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 21:43:12,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 21:43:12,367 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 21:43:12,368 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 21:43:12,583 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 21:43:12,589 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 21:43:12,589 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 21:43:12,592 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:43:12 BoogieIcfgContainer [2022-12-13 21:43:12,592 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 21:43:12,594 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 21:43:12,594 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 21:43:12,597 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 21:43:12,597 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 09:43:11" (1/3) ... [2022-12-13 21:43:12,597 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4517c6fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 09:43:12, skipping insertion in model container [2022-12-13 21:43:12,598 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:43:12" (2/3) ... [2022-12-13 21:43:12,598 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4517c6fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 09:43:12, skipping insertion in model container [2022-12-13 21:43:12,598 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:43:12" (3/3) ... [2022-12-13 21:43:12,599 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product58.cil.c [2022-12-13 21:43:12,614 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 21:43:12,614 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 21:43:12,652 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 21:43:12,657 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@21f95ef2, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 21:43:12,658 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 21:43:12,661 INFO L276 IsEmpty]: Start isEmpty. Operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2022-12-13 21:43:12,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-12-13 21:43:12,670 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:12,670 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:12,671 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:12,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:12,675 INFO L85 PathProgramCache]: Analyzing trace with hash -644164364, now seen corresponding path program 1 times [2022-12-13 21:43:12,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:12,683 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947023425] [2022-12-13 21:43:12,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:12,683 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:12,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:12,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:12,842 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:12,842 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947023425] [2022-12-13 21:43:12,842 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947023425] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:12,843 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:12,843 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:43:12,844 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118248252] [2022-12-13 21:43:12,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:12,848 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 21:43:12,848 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:12,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 21:43:12,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 21:43:12,876 INFO L87 Difference]: Start difference. First operand has 87 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:12,910 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:12,910 INFO L93 Difference]: Finished difference Result 166 states and 227 transitions. [2022-12-13 21:43:12,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 21:43:12,912 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-12-13 21:43:12,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:12,921 INFO L225 Difference]: With dead ends: 166 [2022-12-13 21:43:12,921 INFO L226 Difference]: Without dead ends: 78 [2022-12-13 21:43:12,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 21:43:12,928 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:12,929 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 110 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:43:12,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-12-13 21:43:12,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2022-12-13 21:43:12,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-12-13 21:43:12,974 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 101 transitions. [2022-12-13 21:43:12,975 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 101 transitions. Word has length 19 [2022-12-13 21:43:12,976 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:12,976 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 101 transitions. [2022-12-13 21:43:12,976 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 8.5) internal successors, (17), 2 states have internal predecessors, (17), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:12,976 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 101 transitions. [2022-12-13 21:43:12,977 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-13 21:43:12,977 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:12,978 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:12,978 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 21:43:12,978 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:12,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:12,979 INFO L85 PathProgramCache]: Analyzing trace with hash -1321297108, now seen corresponding path program 1 times [2022-12-13 21:43:12,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:12,979 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [246712401] [2022-12-13 21:43:12,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:12,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:12,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:13,049 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:13,050 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [246712401] [2022-12-13 21:43:13,050 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [246712401] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:13,050 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:13,050 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:43:13,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405045264] [2022-12-13 21:43:13,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:13,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 21:43:13,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:13,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:43:13,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:43:13,053 INFO L87 Difference]: Start difference. First operand 78 states and 101 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:13,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:13,067 INFO L93 Difference]: Finished difference Result 121 states and 157 transitions. [2022-12-13 21:43:13,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:43:13,068 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-13 21:43:13,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:13,069 INFO L225 Difference]: With dead ends: 121 [2022-12-13 21:43:13,069 INFO L226 Difference]: Without dead ends: 69 [2022-12-13 21:43:13,070 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:43:13,071 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 13 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 159 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:13,071 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 159 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:43:13,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-12-13 21:43:13,077 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-12-13 21:43:13,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-12-13 21:43:13,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 89 transitions. [2022-12-13 21:43:13,078 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 89 transitions. Word has length 20 [2022-12-13 21:43:13,078 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:13,079 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 89 transitions. [2022-12-13 21:43:13,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:13,079 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 89 transitions. [2022-12-13 21:43:13,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 21:43:13,080 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:13,080 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:13,080 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 21:43:13,080 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:13,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:13,081 INFO L85 PathProgramCache]: Analyzing trace with hash 2055869510, now seen corresponding path program 1 times [2022-12-13 21:43:13,081 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:13,081 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [479438785] [2022-12-13 21:43:13,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:13,082 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:13,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:13,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:13,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [479438785] [2022-12-13 21:43:13,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [479438785] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:13,151 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:13,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:43:13,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656121989] [2022-12-13 21:43:13,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:13,152 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 21:43:13,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:13,153 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:43:13,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:43:13,153 INFO L87 Difference]: Start difference. First operand 69 states and 89 transitions. Second operand has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:13,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:13,169 INFO L93 Difference]: Finished difference Result 131 states and 172 transitions. [2022-12-13 21:43:13,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:43:13,170 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-13 21:43:13,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:13,171 INFO L225 Difference]: With dead ends: 131 [2022-12-13 21:43:13,171 INFO L226 Difference]: Without dead ends: 69 [2022-12-13 21:43:13,172 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:43:13,173 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 69 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 87 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:13,173 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 87 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:43:13,174 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69 states. [2022-12-13 21:43:13,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69 to 69. [2022-12-13 21:43:13,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 5 states have call predecessors, (7), 7 states have call successors, (7) [2022-12-13 21:43:13,181 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 88 transitions. [2022-12-13 21:43:13,182 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 88 transitions. Word has length 25 [2022-12-13 21:43:13,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:13,182 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 88 transitions. [2022-12-13 21:43:13,182 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:13,182 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 88 transitions. [2022-12-13 21:43:13,183 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-13 21:43:13,183 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:13,183 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:13,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 21:43:13,184 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:13,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:13,184 INFO L85 PathProgramCache]: Analyzing trace with hash 86695610, now seen corresponding path program 1 times [2022-12-13 21:43:13,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:13,184 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344406576] [2022-12-13 21:43:13,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:13,185 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:13,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:13,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:13,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:13,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:13,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [344406576] [2022-12-13 21:43:13,285 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [344406576] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:13,285 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:13,285 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:43:13,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705200990] [2022-12-13 21:43:13,285 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:13,286 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 21:43:13,286 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:13,287 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:43:13,287 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:43:13,287 INFO L87 Difference]: Start difference. First operand 69 states and 88 transitions. Second operand has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:13,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:13,412 INFO L93 Difference]: Finished difference Result 195 states and 249 transitions. [2022-12-13 21:43:13,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:43:13,412 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2022-12-13 21:43:13,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:13,414 INFO L225 Difference]: With dead ends: 195 [2022-12-13 21:43:13,414 INFO L226 Difference]: Without dead ends: 133 [2022-12-13 21:43:13,415 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-12-13 21:43:13,416 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 159 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 81 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 245 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 81 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:13,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 245 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 81 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:13,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2022-12-13 21:43:13,428 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 127. [2022-12-13 21:43:13,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 127 states, 103 states have (on average 1.2718446601941749) internal successors, (131), 111 states have internal predecessors, (131), 10 states have call successors, (10), 10 states have call predecessors, (10), 13 states have return successors, (15), 11 states have call predecessors, (15), 10 states have call successors, (15) [2022-12-13 21:43:13,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 156 transitions. [2022-12-13 21:43:13,429 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 156 transitions. Word has length 35 [2022-12-13 21:43:13,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:13,429 INFO L495 AbstractCegarLoop]: Abstraction has 127 states and 156 transitions. [2022-12-13 21:43:13,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.0) internal successors, (30), 5 states have internal predecessors, (30), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:13,430 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 156 transitions. [2022-12-13 21:43:13,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-13 21:43:13,430 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:13,430 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:13,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 21:43:13,431 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:13,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:13,431 INFO L85 PathProgramCache]: Analyzing trace with hash 585874736, now seen corresponding path program 1 times [2022-12-13 21:43:13,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:13,432 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208877979] [2022-12-13 21:43:13,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:13,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:13,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:13,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 21:43:13,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:13,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:13,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208877979] [2022-12-13 21:43:13,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208877979] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:13,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:13,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:43:13,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1154067603] [2022-12-13 21:43:13,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:13,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:43:13,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:13,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:43:13,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:43:13,545 INFO L87 Difference]: Start difference. First operand 127 states and 156 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:13,728 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:13,728 INFO L93 Difference]: Finished difference Result 376 states and 485 transitions. [2022-12-13 21:43:13,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 21:43:13,729 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-12-13 21:43:13,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:13,731 INFO L225 Difference]: With dead ends: 376 [2022-12-13 21:43:13,731 INFO L226 Difference]: Without dead ends: 256 [2022-12-13 21:43:13,732 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=111, Unknown=0, NotChecked=0, Total=156 [2022-12-13 21:43:13,733 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 205 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 140 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 208 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 174 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 140 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:13,734 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [208 Valid, 332 Invalid, 174 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 140 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:13,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 256 states. [2022-12-13 21:43:13,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 256 to 208. [2022-12-13 21:43:13,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 208 states, 169 states have (on average 1.272189349112426) internal successors, (215), 180 states have internal predecessors, (215), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-12-13 21:43:13,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 208 states to 208 states and 261 transitions. [2022-12-13 21:43:13,762 INFO L78 Accepts]: Start accepts. Automaton has 208 states and 261 transitions. Word has length 41 [2022-12-13 21:43:13,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:13,763 INFO L495 AbstractCegarLoop]: Abstraction has 208 states and 261 transitions. [2022-12-13 21:43:13,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:13,763 INFO L276 IsEmpty]: Start isEmpty. Operand 208 states and 261 transitions. [2022-12-13 21:43:13,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-13 21:43:13,764 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:13,764 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:13,764 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 21:43:13,765 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:13,765 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:13,765 INFO L85 PathProgramCache]: Analyzing trace with hash -1714947854, now seen corresponding path program 1 times [2022-12-13 21:43:13,765 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:13,765 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768420367] [2022-12-13 21:43:13,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:13,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:13,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:13,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 21:43:13,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:13,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:13,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:13,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768420367] [2022-12-13 21:43:13,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768420367] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:13,855 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:13,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:43:13,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [456915190] [2022-12-13 21:43:13,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:13,855 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:43:13,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:13,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:43:13,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:43:13,856 INFO L87 Difference]: Start difference. First operand 208 states and 261 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:13,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:13,983 INFO L93 Difference]: Finished difference Result 407 states and 514 transitions. [2022-12-13 21:43:13,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 21:43:13,984 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 41 [2022-12-13 21:43:13,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:13,985 INFO L225 Difference]: With dead ends: 407 [2022-12-13 21:43:13,985 INFO L226 Difference]: Without dead ends: 206 [2022-12-13 21:43:13,986 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-12-13 21:43:13,986 INFO L413 NwaCegarLoop]: 68 mSDtfsCounter, 135 mSDsluCounter, 218 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:13,987 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 286 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:13,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 206 states. [2022-12-13 21:43:14,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 206 to 204. [2022-12-13 21:43:14,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 165 states have (on average 1.2545454545454546) internal successors, (207), 176 states have internal predecessors, (207), 18 states have call successors, (18), 18 states have call predecessors, (18), 20 states have return successors, (28), 18 states have call predecessors, (28), 18 states have call successors, (28) [2022-12-13 21:43:14,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 253 transitions. [2022-12-13 21:43:14,002 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 253 transitions. Word has length 41 [2022-12-13 21:43:14,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:14,002 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 253 transitions. [2022-12-13 21:43:14,002 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 2 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-12-13 21:43:14,002 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 253 transitions. [2022-12-13 21:43:14,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-13 21:43:14,003 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:14,003 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:14,004 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 21:43:14,004 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:14,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:14,004 INFO L85 PathProgramCache]: Analyzing trace with hash -318970168, now seen corresponding path program 1 times [2022-12-13 21:43:14,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:14,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042197503] [2022-12-13 21:43:14,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:14,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:14,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:14,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 21:43:14,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 21:43:14,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:14,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:14,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042197503] [2022-12-13 21:43:14,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042197503] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:14,088 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:14,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:43:14,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [760297522] [2022-12-13 21:43:14,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:14,089 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-13 21:43:14,089 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:14,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 21:43:14,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-13 21:43:14,089 INFO L87 Difference]: Start difference. First operand 204 states and 253 transitions. Second operand has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 21:43:14,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:14,319 INFO L93 Difference]: Finished difference Result 469 states and 581 transitions. [2022-12-13 21:43:14,320 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 21:43:14,320 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 45 [2022-12-13 21:43:14,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:14,322 INFO L225 Difference]: With dead ends: 469 [2022-12-13 21:43:14,322 INFO L226 Difference]: Without dead ends: 272 [2022-12-13 21:43:14,323 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2022-12-13 21:43:14,324 INFO L413 NwaCegarLoop]: 58 mSDtfsCounter, 241 mSDsluCounter, 244 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 244 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:14,324 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [244 Valid, 302 Invalid, 266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:14,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2022-12-13 21:43:14,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 242. [2022-12-13 21:43:14,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2424242424242424) internal successors, (246), 213 states have internal predecessors, (246), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2022-12-13 21:43:14,341 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 298 transitions. [2022-12-13 21:43:14,342 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 298 transitions. Word has length 45 [2022-12-13 21:43:14,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:14,342 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 298 transitions. [2022-12-13 21:43:14,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.75) internal successors, (38), 6 states have internal predecessors, (38), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 21:43:14,342 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 298 transitions. [2022-12-13 21:43:14,343 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-13 21:43:14,343 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:14,343 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:14,343 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 21:43:14,344 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:14,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:14,344 INFO L85 PathProgramCache]: Analyzing trace with hash -1598724404, now seen corresponding path program 1 times [2022-12-13 21:43:14,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:14,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208209224] [2022-12-13 21:43:14,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:14,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:14,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:14,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 21:43:14,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 21:43:14,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,432 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:14,432 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:14,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208209224] [2022-12-13 21:43:14,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208209224] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:14,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:14,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 21:43:14,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956376250] [2022-12-13 21:43:14,432 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:14,433 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 21:43:14,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:14,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:43:14,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:43:14,434 INFO L87 Difference]: Start difference. First operand 242 states and 298 transitions. Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 21:43:14,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:14,705 INFO L93 Difference]: Finished difference Result 266 states and 323 transitions. [2022-12-13 21:43:14,705 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-13 21:43:14,706 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 45 [2022-12-13 21:43:14,706 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:14,708 INFO L225 Difference]: With dead ends: 266 [2022-12-13 21:43:14,708 INFO L226 Difference]: Without dead ends: 264 [2022-12-13 21:43:14,709 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 70 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=274, Unknown=0, NotChecked=0, Total=380 [2022-12-13 21:43:14,709 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 194 mSDsluCounter, 309 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 195 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 298 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:14,710 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [195 Valid, 381 Invalid, 298 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 21:43:14,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 264 states. [2022-12-13 21:43:14,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 264 to 242. [2022-12-13 21:43:14,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 198 states have (on average 1.2272727272727273) internal successors, (243), 213 states have internal predecessors, (243), 19 states have call successors, (19), 18 states have call predecessors, (19), 24 states have return successors, (33), 19 states have call predecessors, (33), 19 states have call successors, (33) [2022-12-13 21:43:14,727 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 295 transitions. [2022-12-13 21:43:14,727 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 295 transitions. Word has length 45 [2022-12-13 21:43:14,728 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:14,728 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 295 transitions. [2022-12-13 21:43:14,728 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 5 states have internal predecessors, (38), 1 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 21:43:14,728 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 295 transitions. [2022-12-13 21:43:14,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-13 21:43:14,728 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:14,729 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:14,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 21:43:14,729 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:14,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:14,729 INFO L85 PathProgramCache]: Analyzing trace with hash -1519506341, now seen corresponding path program 1 times [2022-12-13 21:43:14,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:14,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1343316372] [2022-12-13 21:43:14,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:14,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:14,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:14,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 21:43:14,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:14,803 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:14,803 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:14,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1343316372] [2022-12-13 21:43:14,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1343316372] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:14,804 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:14,804 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 21:43:14,804 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1235120000] [2022-12-13 21:43:14,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:14,804 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 21:43:14,805 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:14,805 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:43:14,805 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:43:14,805 INFO L87 Difference]: Start difference. First operand 242 states and 295 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:15,074 INFO L93 Difference]: Finished difference Result 473 states and 601 transitions. [2022-12-13 21:43:15,074 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 21:43:15,074 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-12-13 21:43:15,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:15,077 INFO L225 Difference]: With dead ends: 473 [2022-12-13 21:43:15,077 INFO L226 Difference]: Without dead ends: 316 [2022-12-13 21:43:15,078 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=63, Invalid=119, Unknown=0, NotChecked=0, Total=182 [2022-12-13 21:43:15,079 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 173 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 319 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 174 SdHoareTripleChecker+Valid, 421 SdHoareTripleChecker+Invalid, 355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 319 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:15,079 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [174 Valid, 421 Invalid, 355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 319 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 21:43:15,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-12-13 21:43:15,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 311. [2022-12-13 21:43:15,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2244094488188977) internal successors, (311), 271 states have internal predecessors, (311), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2022-12-13 21:43:15,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 388 transitions. [2022-12-13 21:43:15,101 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 388 transitions. Word has length 47 [2022-12-13 21:43:15,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:15,101 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 388 transitions. [2022-12-13 21:43:15,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,102 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 388 transitions. [2022-12-13 21:43:15,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-13 21:43:15,102 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:15,102 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:15,102 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 21:43:15,103 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:15,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:15,103 INFO L85 PathProgramCache]: Analyzing trace with hash 1292286815, now seen corresponding path program 1 times [2022-12-13 21:43:15,103 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:15,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [670343945] [2022-12-13 21:43:15,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:15,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:15,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:15,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 21:43:15,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:15,178 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:15,178 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [670343945] [2022-12-13 21:43:15,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [670343945] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:15,178 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:15,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 21:43:15,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318037627] [2022-12-13 21:43:15,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:15,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 21:43:15,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:15,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:43:15,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:43:15,180 INFO L87 Difference]: Start difference. First operand 311 states and 388 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:15,355 INFO L93 Difference]: Finished difference Result 623 states and 787 transitions. [2022-12-13 21:43:15,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-13 21:43:15,355 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-12-13 21:43:15,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:15,358 INFO L225 Difference]: With dead ends: 623 [2022-12-13 21:43:15,358 INFO L226 Difference]: Without dead ends: 319 [2022-12-13 21:43:15,359 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-12-13 21:43:15,360 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 136 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 201 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 321 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 201 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:15,360 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 321 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 201 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:15,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 319 states. [2022-12-13 21:43:15,376 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 319 to 311. [2022-12-13 21:43:15,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 311 states, 254 states have (on average 1.2165354330708662) internal successors, (309), 271 states have internal predecessors, (309), 26 states have call successors, (26), 25 states have call predecessors, (26), 30 states have return successors, (51), 27 states have call predecessors, (51), 26 states have call successors, (51) [2022-12-13 21:43:15,377 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 311 states to 311 states and 386 transitions. [2022-12-13 21:43:15,378 INFO L78 Accepts]: Start accepts. Automaton has 311 states and 386 transitions. Word has length 47 [2022-12-13 21:43:15,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:15,378 INFO L495 AbstractCegarLoop]: Abstraction has 311 states and 386 transitions. [2022-12-13 21:43:15,378 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,378 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 386 transitions. [2022-12-13 21:43:15,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-13 21:43:15,379 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:15,379 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:15,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-12-13 21:43:15,379 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:15,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:15,379 INFO L85 PathProgramCache]: Analyzing trace with hash -701857891, now seen corresponding path program 1 times [2022-12-13 21:43:15,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:15,379 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285164137] [2022-12-13 21:43:15,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:15,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:15,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:15,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 21:43:15,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:15,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:15,433 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285164137] [2022-12-13 21:43:15,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [285164137] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:15,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:15,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:43:15,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [34048868] [2022-12-13 21:43:15,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:15,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:43:15,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:15,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:43:15,435 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:43:15,435 INFO L87 Difference]: Start difference. First operand 311 states and 386 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:15,575 INFO L93 Difference]: Finished difference Result 561 states and 704 transitions. [2022-12-13 21:43:15,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:43:15,576 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 47 [2022-12-13 21:43:15,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:15,578 INFO L225 Difference]: With dead ends: 561 [2022-12-13 21:43:15,578 INFO L226 Difference]: Without dead ends: 257 [2022-12-13 21:43:15,579 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-13 21:43:15,579 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 140 mSDsluCounter, 194 mSDsCounter, 0 mSdLazyCounter, 156 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 140 SdHoareTripleChecker+Valid, 255 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 156 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:15,579 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [140 Valid, 255 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 156 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:15,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2022-12-13 21:43:15,591 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 255. [2022-12-13 21:43:15,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 255 states, 206 states have (on average 1.2087378640776698) internal successors, (249), 219 states have internal predecessors, (249), 23 states have call successors, (23), 22 states have call predecessors, (23), 25 states have return successors, (40), 23 states have call predecessors, (40), 23 states have call successors, (40) [2022-12-13 21:43:15,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 255 states to 255 states and 312 transitions. [2022-12-13 21:43:15,593 INFO L78 Accepts]: Start accepts. Automaton has 255 states and 312 transitions. Word has length 47 [2022-12-13 21:43:15,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:15,593 INFO L495 AbstractCegarLoop]: Abstraction has 255 states and 312 transitions. [2022-12-13 21:43:15,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 1 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-12-13 21:43:15,593 INFO L276 IsEmpty]: Start isEmpty. Operand 255 states and 312 transitions. [2022-12-13 21:43:15,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2022-12-13 21:43:15,594 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:15,594 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:15,595 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-13 21:43:15,595 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:15,595 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:15,595 INFO L85 PathProgramCache]: Analyzing trace with hash 2145897221, now seen corresponding path program 1 times [2022-12-13 21:43:15,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:15,595 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1298214382] [2022-12-13 21:43:15,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:15,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:15,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:15,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:15,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:43:15,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,719 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-12-13 21:43:15,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:15,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,724 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 12 proven. 7 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-13 21:43:15,724 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:15,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1298214382] [2022-12-13 21:43:15,724 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1298214382] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 21:43:15,724 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [886472001] [2022-12-13 21:43:15,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:15,724 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:43:15,724 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:43:15,725 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 21:43:15,727 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 21:43:15,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:15,801 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 8 conjunts are in the unsatisfiable core [2022-12-13 21:43:15,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:43:15,901 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:43:15,902 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 21:43:16,012 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 13 proven. 6 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-13 21:43:16,012 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [886472001] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 21:43:16,012 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 21:43:16,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 9 [2022-12-13 21:43:16,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [522008964] [2022-12-13 21:43:16,012 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 21:43:16,013 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-13 21:43:16,013 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:16,014 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-13 21:43:16,014 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-13 21:43:16,014 INFO L87 Difference]: Start difference. First operand 255 states and 312 transitions. Second operand has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-13 21:43:16,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:16,364 INFO L93 Difference]: Finished difference Result 590 states and 758 transitions. [2022-12-13 21:43:16,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-13 21:43:16,364 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) Word has length 82 [2022-12-13 21:43:16,364 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:16,366 INFO L225 Difference]: With dead ends: 590 [2022-12-13 21:43:16,367 INFO L226 Difference]: Without dead ends: 383 [2022-12-13 21:43:16,368 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 200 GetRequests, 170 SyntacticMatches, 8 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 114 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=163, Invalid=389, Unknown=0, NotChecked=0, Total=552 [2022-12-13 21:43:16,368 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 231 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 404 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 235 SdHoareTripleChecker+Valid, 519 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 404 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:16,369 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [235 Valid, 519 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 404 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 21:43:16,370 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 383 states. [2022-12-13 21:43:16,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 383 to 350. [2022-12-13 21:43:16,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 350 states, 280 states have (on average 1.2107142857142856) internal successors, (339), 298 states have internal predecessors, (339), 33 states have call successors, (33), 32 states have call predecessors, (33), 36 states have return successors, (60), 31 states have call predecessors, (60), 33 states have call successors, (60) [2022-12-13 21:43:16,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 350 states to 350 states and 432 transitions. [2022-12-13 21:43:16,399 INFO L78 Accepts]: Start accepts. Automaton has 350 states and 432 transitions. Word has length 82 [2022-12-13 21:43:16,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:16,399 INFO L495 AbstractCegarLoop]: Abstraction has 350 states and 432 transitions. [2022-12-13 21:43:16,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 8.555555555555555) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (12), 6 states have call predecessors, (12), 3 states have return successors, (7), 3 states have call predecessors, (7), 2 states have call successors, (7) [2022-12-13 21:43:16,399 INFO L276 IsEmpty]: Start isEmpty. Operand 350 states and 432 transitions. [2022-12-13 21:43:16,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-12-13 21:43:16,400 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:16,400 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:16,406 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 21:43:16,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-12-13 21:43:16,601 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:16,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:16,602 INFO L85 PathProgramCache]: Analyzing trace with hash 1100274715, now seen corresponding path program 2 times [2022-12-13 21:43:16,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:16,602 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [944242074] [2022-12-13 21:43:16,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:16,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:16,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,705 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:16,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:16,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:43:16,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-12-13 21:43:16,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 21:43:16,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:16,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-12-13 21:43:16,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:16,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:16,819 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 54 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-13 21:43:16,820 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:16,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [944242074] [2022-12-13 21:43:16,820 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [944242074] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 21:43:16,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [633681298] [2022-12-13 21:43:16,820 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-12-13 21:43:16,820 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:43:16,820 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:43:16,821 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 21:43:16,822 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 21:43:16,904 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-12-13 21:43:16,905 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-13 21:43:16,906 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 10 conjunts are in the unsatisfiable core [2022-12-13 21:43:16,909 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:43:17,009 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 64 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 21:43:17,009 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 21:43:17,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [633681298] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:17,010 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 21:43:17,010 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-12-13 21:43:17,010 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [65907225] [2022-12-13 21:43:17,010 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:17,010 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:43:17,011 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:17,011 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:43:17,011 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=32, Invalid=150, Unknown=0, NotChecked=0, Total=182 [2022-12-13 21:43:17,012 INFO L87 Difference]: Start difference. First operand 350 states and 432 transitions. Second operand has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 21:43:17,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:17,250 INFO L93 Difference]: Finished difference Result 931 states and 1192 transitions. [2022-12-13 21:43:17,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-13 21:43:17,251 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 117 [2022-12-13 21:43:17,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:17,253 INFO L225 Difference]: With dead ends: 931 [2022-12-13 21:43:17,253 INFO L226 Difference]: Without dead ends: 628 [2022-12-13 21:43:17,254 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 130 SyntacticMatches, 2 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=63, Invalid=279, Unknown=0, NotChecked=0, Total=342 [2022-12-13 21:43:17,255 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 182 mSDsluCounter, 417 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 557 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:17,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 557 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:17,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 628 states. [2022-12-13 21:43:17,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 628 to 567. [2022-12-13 21:43:17,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 567 states, 454 states have (on average 1.2048458149779735) internal successors, (547), 479 states have internal predecessors, (547), 54 states have call successors, (54), 53 states have call predecessors, (54), 58 states have return successors, (95), 50 states have call predecessors, (95), 54 states have call successors, (95) [2022-12-13 21:43:17,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 567 states to 567 states and 696 transitions. [2022-12-13 21:43:17,295 INFO L78 Accepts]: Start accepts. Automaton has 567 states and 696 transitions. Word has length 117 [2022-12-13 21:43:17,295 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:17,295 INFO L495 AbstractCegarLoop]: Abstraction has 567 states and 696 transitions. [2022-12-13 21:43:17,295 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 15.166666666666666) internal successors, (91), 6 states have internal predecessors, (91), 3 states have call successors, (8), 4 states have call predecessors, (8), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 21:43:17,295 INFO L276 IsEmpty]: Start isEmpty. Operand 567 states and 696 transitions. [2022-12-13 21:43:17,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2022-12-13 21:43:17,296 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:43:17,296 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:17,301 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 21:43:17,497 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-13 21:43:17,497 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:43:17,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:43:17,497 INFO L85 PathProgramCache]: Analyzing trace with hash 1976293721, now seen corresponding path program 1 times [2022-12-13 21:43:17,498 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:43:17,498 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [37501528] [2022-12-13 21:43:17,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:43:17,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:43:17,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-12-13 21:43:17,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 21:43:17,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:43:17,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-12-13 21:43:17,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-12-13 21:43:17,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:17,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-12-13 21:43:17,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:43:17,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:43:17,596 INFO L134 CoverageAnalysis]: Checked inductivity of 77 backedges. 44 proven. 0 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2022-12-13 21:43:17,596 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:43:17,596 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [37501528] [2022-12-13 21:43:17,596 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [37501528] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:43:17,596 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:43:17,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 21:43:17,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535206211] [2022-12-13 21:43:17,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:43:17,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-13 21:43:17,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:43:17,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 21:43:17,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-12-13 21:43:17,598 INFO L87 Difference]: Start difference. First operand 567 states and 696 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-13 21:43:17,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:43:17,740 INFO L93 Difference]: Finished difference Result 777 states and 943 transitions. [2022-12-13 21:43:17,740 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 21:43:17,740 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 117 [2022-12-13 21:43:17,740 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:43:17,741 INFO L225 Difference]: With dead ends: 777 [2022-12-13 21:43:17,741 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 21:43:17,742 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-12-13 21:43:17,742 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 153 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 206 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 231 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 206 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:43:17,742 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 254 Invalid, 231 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 206 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:43:17,742 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 21:43:17,743 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 21:43:17,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:43:17,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 21:43:17,743 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 117 [2022-12-13 21:43:17,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:43:17,743 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 21:43:17,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 5 states have internal predecessors, (82), 2 states have call successors, (6), 5 states have call predecessors, (6), 2 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-12-13 21:43:17,743 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 21:43:17,743 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 21:43:17,745 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 21:43:17,745 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-12-13 21:43:17,747 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 21:43:19,162 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 731 737) no Hoare annotation was computed. [2022-12-13 21:43:19,162 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 731 737) the Hoare annotation is: true [2022-12-13 21:43:19,162 INFO L899 garLoopResultBuilder]: For program point L491-1(lines 487 498) no Hoare annotation was computed. [2022-12-13 21:43:19,162 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 487 498) the Hoare annotation is: true [2022-12-13 21:43:19,162 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 487 498) no Hoare annotation was computed. [2022-12-13 21:43:19,163 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 554 562) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,163 INFO L895 garLoopResultBuilder]: At program point L779(line 779) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,163 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 707 730) no Hoare annotation was computed. [2022-12-13 21:43:19,163 INFO L899 garLoopResultBuilder]: For program point L449(line 449) no Hoare annotation was computed. [2022-12-13 21:43:19,164 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 531 539) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 .cse2 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (and (= |old(~waterLevel~0)| ~waterLevel~0) (<= 2 |timeShift_getWaterLevel_#res#1|)) (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 (not (= |old(~waterLevel~0)| 1)) .cse0 (and .cse2 (= ~waterLevel~0 1) (= |timeShift_getWaterLevel_#res#1| 1))))) [2022-12-13 21:43:19,164 INFO L895 garLoopResultBuilder]: At program point L784(line 784) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) (= |old(~waterLevel~0)| ~waterLevel~0)) (or .cse0 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,164 INFO L895 garLoopResultBuilder]: At program point L784-1(lines 765 789) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse2 (not .cse4)) (.cse3 (and (<= 2 ~waterLevel~0) .cse4 .cse1))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and .cse0 .cse1) .cse2 .cse3 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-12-13 21:43:19,164 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 718 724) no Hoare annotation was computed. [2022-12-13 21:43:19,164 INFO L899 garLoopResultBuilder]: For program point L908(lines 908 912) no Hoare annotation was computed. [2022-12-13 21:43:19,164 INFO L899 garLoopResultBuilder]: For program point L908-2(lines 908 912) no Hoare annotation was computed. [2022-12-13 21:43:19,164 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-12-13 21:43:19,164 INFO L895 garLoopResultBuilder]: At program point L467-2(lines 463 474) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,165 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 445 452) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,165 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 707 730) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |old(~waterLevel~0)| ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~waterLevel~0)| 1)) .cse0 (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1))))) [2022-12-13 21:43:19,165 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 710 729) no Hoare annotation was computed. [2022-12-13 21:43:19,165 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 781) no Hoare annotation was computed. [2022-12-13 21:43:19,165 INFO L899 garLoopResultBuilder]: For program point L769(lines 769 786) no Hoare annotation was computed. [2022-12-13 21:43:19,165 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 816 823) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,165 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 899 917) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point L427(lines 427 440) no Hoare annotation was computed. [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 707 730) no Hoare annotation was computed. [2022-12-13 21:43:19,166 INFO L895 garLoopResultBuilder]: At program point L427-1(lines 419 443) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse6)) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (and (<= 2 ~waterLevel~0) .cse6 .cse2 (<= 2 |timeShift_getWaterLevel_#res#1|) (<= 2 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse4) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (and (= |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1| 1) (= |timeShift_getWaterLevel_#res#1| 1))) (or .cse0 .cse3 .cse4 .cse5) (or .cse3 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) (<= 1 |timeShift___utac_acc__Specification4_spec__1_~tmp~3#1|) (= |timeShift_isLowWaterLevel_~tmp~9#1| 0) (<= 1 ~waterLevel~0) (<= 1 |timeShift_getWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|)) .cse4 .cse5)))) [2022-12-13 21:43:19,166 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 835 843) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|))) (or .cse0 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 449) no Hoare annotation was computed. [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point L577(line 577) no Hoare annotation was computed. [2022-12-13 21:43:19,166 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 566 595) no Hoare annotation was computed. [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point L576-2(lines 576 590) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point L572(line 572) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L899 garLoopResultBuilder]: For program point L572-1(line 572) no Hoare annotation was computed. [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point L591(lines 566 595) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L899 garLoopResultBuilder]: For program point L587(line 587) no Hoare annotation was computed. [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 566 595) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L899 garLoopResultBuilder]: For program point L580(lines 580 584) no Hoare annotation was computed. [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point L580-1(lines 580 584) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 918 925) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-12-13 21:43:19,167 INFO L895 garLoopResultBuilder]: At program point L985(lines 936 986) the Hoare annotation is: false [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 629 638) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 677 683) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 21:43:19,167 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 642 664) the Hoare annotation is: true [2022-12-13 21:43:19,167 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L957(lines 957 963) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L957-1(lines 957 963) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point L982(lines 937 984) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point L949(line 949) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L652(lines 652 659) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L652-2(lines 652 659) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 621 627) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L975(lines 975 979) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point L975-2(lines 967 980) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L938(lines 937 984) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 684 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 21:43:19,168 INFO L899 garLoopResultBuilder]: For program point L967(lines 967 980) no Hoare annotation was computed. [2022-12-13 21:43:19,168 INFO L895 garLoopResultBuilder]: At program point L959(line 959) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1) (and (= ~pumpRunning~0 0) .cse0 .cse1 (<= 1 ~waterLevel~0)))) [2022-12-13 21:43:19,168 INFO L902 garLoopResultBuilder]: At program point L988(lines 927 992) the Hoare annotation is: true [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 953) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 947 953) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 691 699) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L939(lines 939 943) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point L758(line 758) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (not (= 1 ~systemActive~0)) (not (<= 1 ~waterLevel~0))) [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L758-1(lines 739 763) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 739 763) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0))))) [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 812) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point L806-2(lines 799 815) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 540 553) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point L544(lines 544 550) no Hoare annotation was computed. [2022-12-13 21:43:19,169 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 880 898) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse5 (and .cse2 .cse3 (not .cse4) .cse6 .cse7 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1) .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (not (<= 1 ~waterLevel~0)) .cse5) (or .cse0 .cse1 (not .cse6) .cse5)))) [2022-12-13 21:43:19,169 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 739 763) no Hoare annotation was computed. [2022-12-13 21:43:19,170 INFO L899 garLoopResultBuilder]: For program point L889(lines 889 893) no Hoare annotation was computed. [2022-12-13 21:43:19,170 INFO L899 garLoopResultBuilder]: For program point L889-2(lines 889 893) no Hoare annotation was computed. [2022-12-13 21:43:19,170 INFO L895 garLoopResultBuilder]: At program point L753(line 753) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0))) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~8#1| 1) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))))) [2022-12-13 21:43:19,170 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 499 507) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (not (<= 2 ~waterLevel~0))))) [2022-12-13 21:43:19,170 INFO L899 garLoopResultBuilder]: For program point L747(lines 747 755) no Hoare annotation was computed. [2022-12-13 21:43:19,170 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 824 834) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (and (= ~pumpRunning~0 0) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))) (not (<= 2 ~waterLevel~0))))) [2022-12-13 21:43:19,170 INFO L899 garLoopResultBuilder]: For program point L743(lines 743 760) no Hoare annotation was computed. [2022-12-13 21:43:19,170 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 790 797) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~5#1| 0))))) [2022-12-13 21:43:19,171 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 475 486) no Hoare annotation was computed. [2022-12-13 21:43:19,171 INFO L899 garLoopResultBuilder]: For program point L479-1(lines 475 486) no Hoare annotation was computed. [2022-12-13 21:43:19,171 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 475 486) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (not (= ~pumpRunning~0 0)) .cse0 (not (<= 1 |old(~waterLevel~0)|)) .cse1) (or .cse0 .cse1 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:43:19,173 INFO L445 BasicCegarLoop]: Path program histogram: [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:43:19,175 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 21:43:19,192 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 09:43:19 BoogieIcfgContainer [2022-12-13 21:43:19,192 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 21:43:19,192 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 21:43:19,192 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 21:43:19,193 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 21:43:19,193 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:43:12" (3/4) ... [2022-12-13 21:43:19,195 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 21:43:19,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 21:43:19,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 21:43:19,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 21:43:19,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 21:43:19,200 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:43:19,201 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 21:43:19,205 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 27 nodes and edges [2022-12-13 21:43:19,205 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 21:43:19,206 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 21:43:19,206 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 21:43:19,206 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 21:43:19,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,224 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,225 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,226 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) [2022-12-13 21:43:19,226 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,226 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-12-13 21:43:19,226 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) [2022-12-13 21:43:19,227 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) [2022-12-13 21:43:19,227 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) [2022-12-13 21:43:19,227 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) [2022-12-13 21:43:19,241 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 21:43:19,242 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 21:43:19,242 INFO L158 Benchmark]: Toolchain (without parser) took 7374.90ms. Allocated memory was 159.4MB in the beginning and 199.2MB in the end (delta: 39.8MB). Free memory was 126.0MB in the beginning and 150.9MB in the end (delta: -24.9MB). Peak memory consumption was 16.9MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,242 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 159.4MB. Free memory is still 103.5MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 21:43:19,243 INFO L158 Benchmark]: CACSL2BoogieTranslator took 317.02ms. Allocated memory is still 159.4MB. Free memory was 126.0MB in the beginning and 107.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,243 INFO L158 Benchmark]: Boogie Procedure Inliner took 33.04ms. Allocated memory is still 159.4MB. Free memory was 107.1MB in the beginning and 105.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,243 INFO L158 Benchmark]: Boogie Preprocessor took 19.52ms. Allocated memory is still 159.4MB. Free memory was 104.5MB in the beginning and 103.4MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,244 INFO L158 Benchmark]: RCFGBuilder took 353.03ms. Allocated memory is still 159.4MB. Free memory was 102.9MB in the beginning and 86.6MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,244 INFO L158 Benchmark]: TraceAbstraction took 6598.06ms. Allocated memory was 159.4MB in the beginning and 199.2MB in the end (delta: 39.8MB). Free memory was 86.1MB in the beginning and 157.2MB in the end (delta: -71.0MB). Peak memory consumption was 81.9MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,244 INFO L158 Benchmark]: Witness Printer took 49.26ms. Allocated memory is still 199.2MB. Free memory was 157.2MB in the beginning and 150.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 21:43:19,246 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 159.4MB. Free memory is still 103.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 317.02ms. Allocated memory is still 159.4MB. Free memory was 126.0MB in the beginning and 107.1MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 33.04ms. Allocated memory is still 159.4MB. Free memory was 107.1MB in the beginning and 105.0MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 19.52ms. Allocated memory is still 159.4MB. Free memory was 104.5MB in the beginning and 103.4MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 353.03ms. Allocated memory is still 159.4MB. Free memory was 102.9MB in the beginning and 86.6MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 6598.06ms. Allocated memory was 159.4MB in the beginning and 199.2MB in the end (delta: 39.8MB). Free memory was 86.1MB in the beginning and 157.2MB in the end (delta: -71.0MB). Peak memory consumption was 81.9MB. Max. memory is 16.1GB. * Witness Printer took 49.26ms. Allocated memory is still 199.2MB. Free memory was 157.2MB in the beginning and 150.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 449]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 87 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 6.5s, OverallIterations: 14, TraceHistogramMax: 3, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 2.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 1.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2053 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2031 mSDsluCounter, 4229 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3064 mSDsCounter, 338 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2256 IncrementalHoareTripleChecker+Invalid, 2594 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 338 mSolverCounterUnsat, 1165 mSDtfsCounter, 2256 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 529 GetRequests, 380 SyntacticMatches, 11 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 318 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=567occurred in iteration=13, InterpolantAutomatonStates: 134, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 14 MinimizatonAttempts, 217 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 42 LocationsWithAnnotation, 1337 PreInvPairs, 1426 NumberOfFragments, 1136 HoareAnnotationTreeSize, 1337 FomulaSimplifications, 1277 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 42 FomulaSimplificationsInter, 3537 FormulaSimplificationTreeSizeReductionInter, 1.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 927 NumberOfCodeBlocks, 927 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 992 ConstructedInterpolants, 0 QuantifiedInterpolants, 1903 SizeOfPredicates, 8 NumberOfNonLiveVariables, 709 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 264/294 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 621]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (tmp == 1 && \result == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || ((((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel) && 2 <= \result) && 2 <= tmp)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 790]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 677]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(tmp == 0)) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 463]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (pumpRunning == 0 && \result == 0)) && (((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) - InvariantResult [Line: 554]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && tmp == 1) && \result == 0) && \result == 1)) || !(1 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(2 <= waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && !(\result == 0)) && 2 <= waterLevel) && 1 == systemActive) && 1 <= tmp___0)) - InvariantResult [Line: 629]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 918]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel) - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && (!(1 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 531]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((((((((\result == 0 && !(\old(pumpRunning) == 0)) && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= \result) && 1 <= tmp___0)) || (\old(waterLevel) == waterLevel && 2 <= \result)) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == 1) && \result == 1)) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 684]: Loop Invariant Derived loop invariant: (pumpRunning == 0 && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: ((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(tmp == 0))) || !(2 <= waterLevel)) - InvariantResult [Line: 765]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(1 <= \old(waterLevel))) && (((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || ((2 <= waterLevel && 1 == systemActive) && \old(waterLevel) == waterLevel)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 642]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 936]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 816]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) && ((((((((\result == 0 && pumpRunning == 0) && 1 <= \result) && 1 <= tmp) && tmp == 0) && 1 <= waterLevel) && 1 <= tmp___0) || !(1 == systemActive)) || !(2 <= \old(waterLevel))) RESULT: Ultimate proved your program to be correct! [2022-12-13 21:43:19,265 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f92cc740-d954-4da2-abad-2fbb189dda8a/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE