./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:59:47,803 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:59:47,946 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:59:47,960 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:59:47,961 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:59:48,015 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:59:48,017 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:59:48,017 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:59:48,019 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:59:48,025 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:59:48,027 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:59:48,027 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:59:48,028 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:59:48,030 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:59:48,030 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:59:48,031 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:59:48,032 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:59:48,032 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:59:48,033 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:59:48,033 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:59:48,034 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:59:48,034 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:59:48,036 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:59:48,037 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:59:48,038 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:59:48,039 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:59:48,039 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:59:48,040 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:59:48,040 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:59:48,041 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:59:48,043 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:59:48,043 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:59:48,043 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:59:48,044 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:59:48,053 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:59:48,054 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:59:48,054 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:59:48,054 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:59:48,054 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:59:48,055 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f645b80d4169704e02b3c19c65a00755e1e28cc942f5a2526cd4b4e1dcca30cf [2023-11-06 22:59:48,433 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:59:48,468 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:59:48,471 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:59:48,473 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:59:48,473 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:59:48,475 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2023-11-06 22:59:51,718 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:59:52,137 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:59:52,138 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c [2023-11-06 22:59:52,174 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/data/72913bbc3/b6951d49cea944348b8b9d517a6d0513/FLAG479891456 [2023-11-06 22:59:52,198 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/data/72913bbc3/b6951d49cea944348b8b9d517a6d0513 [2023-11-06 22:59:52,208 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:59:52,212 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:59:52,218 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:59:52,218 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:59:52,225 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:59:52,226 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,227 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7b6e9196 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52, skipping insertion in model container [2023-11-06 22:59:52,227 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,293 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:59:52,642 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2023-11-06 22:59:52,647 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:59:52,660 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:59:52,673 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] [2023-11-06 22:59:52,675 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] [2023-11-06 22:59:52,675 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [190] [2023-11-06 22:59:52,676 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [232] [2023-11-06 22:59:52,676 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [340] [2023-11-06 22:59:52,676 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [548] [2023-11-06 22:59:52,677 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [615] [2023-11-06 22:59:52,677 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [981] [2023-11-06 22:59:52,751 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/sv-benchmarks/c/product-lines/minepump_spec2_product50.cil.c[18939,18952] [2023-11-06 22:59:52,752 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:59:52,778 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:59:52,778 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52 WrapperNode [2023-11-06 22:59:52,778 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:59:52,780 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:59:52,780 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:59:52,780 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:59:52,790 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,808 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,843 INFO L138 Inliner]: procedures = 57, calls = 100, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 209 [2023-11-06 22:59:52,844 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:59:52,845 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:59:52,845 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:59:52,846 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:59:52,857 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,858 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,861 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,861 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,870 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,876 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,878 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,880 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,884 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:59:52,885 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:59:52,886 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:59:52,886 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:59:52,887 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (1/1) ... [2023-11-06 22:59:52,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:59:52,915 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:59:52,932 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:59:52,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:59:52,991 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:59:52,991 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:59:52,992 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:59:52,992 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:59:52,994 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:59:52,995 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:59:52,995 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:59:52,995 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:59:52,996 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:59:52,996 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:59:52,996 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:59:52,996 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:59:52,996 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:59:52,997 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:59:52,997 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:59:52,997 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:59:52,998 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:59:52,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:59:53,113 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:59:53,116 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:59:53,484 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:59:53,494 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:59:53,494 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:59:53,497 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:53 BoogieIcfgContainer [2023-11-06 22:59:53,497 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:59:53,502 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:59:53,503 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:59:53,507 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:59:53,507 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:59:52" (1/3) ... [2023-11-06 22:59:53,508 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@104077f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:59:53, skipping insertion in model container [2023-11-06 22:59:53,509 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:59:52" (2/3) ... [2023-11-06 22:59:53,511 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@104077f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:59:53, skipping insertion in model container [2023-11-06 22:59:53,511 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:53" (3/3) ... [2023-11-06 22:59:53,513 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product50.cil.c [2023-11-06 22:59:53,537 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:59:53,538 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:59:53,616 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:59:53,623 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2416625e, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:59:53,623 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:59:53,629 INFO L276 IsEmpty]: Start isEmpty. Operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:59:53,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:59:53,643 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:53,643 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:53,644 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:53,651 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:53,652 INFO L85 PathProgramCache]: Analyzing trace with hash 778842968, now seen corresponding path program 1 times [2023-11-06 22:59:53,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:53,664 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [238301912] [2023-11-06 22:59:53,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:53,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:53,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:53,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:59:53,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:53,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:53,975 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:53,976 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [238301912] [2023-11-06 22:59:53,976 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [238301912] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:53,977 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:53,977 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:59:53,979 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1951204587] [2023-11-06 22:59:53,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:53,986 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:59:53,986 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:54,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:59:54,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:59:54,042 INFO L87 Difference]: Start difference. First operand has 89 states, 69 states have (on average 1.391304347826087) internal successors, (96), 77 states have internal predecessors, (96), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:54,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:54,143 INFO L93 Difference]: Finished difference Result 169 states and 230 transitions. [2023-11-06 22:59:54,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:59:54,147 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:59:54,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:54,158 INFO L225 Difference]: With dead ends: 169 [2023-11-06 22:59:54,159 INFO L226 Difference]: Without dead ends: 80 [2023-11-06 22:59:54,163 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:59:54,167 INFO L413 NwaCegarLoop]: 112 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:54,168 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:54,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-06 22:59:54,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2023-11-06 22:59:54,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 69 states have internal predecessors, (82), 11 states have call successors, (11), 7 states have call predecessors, (11), 6 states have return successors, (10), 8 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 22:59:54,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2023-11-06 22:59:54,236 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 25 [2023-11-06 22:59:54,237 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:54,237 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2023-11-06 22:59:54,238 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:54,239 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2023-11-06 22:59:54,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:59:54,246 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:54,247 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:54,247 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:59:54,247 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:54,248 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:54,248 INFO L85 PathProgramCache]: Analyzing trace with hash -1591426498, now seen corresponding path program 1 times [2023-11-06 22:59:54,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:54,249 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1607252394] [2023-11-06 22:59:54,249 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:54,249 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:54,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:54,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-06 22:59:54,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:54,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:54,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:54,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1607252394] [2023-11-06 22:59:54,472 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1607252394] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:54,473 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:54,473 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:59:54,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [918262855] [2023-11-06 22:59:54,473 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:54,475 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:59:54,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:54,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:59:54,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:54,477 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:54,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:54,527 INFO L93 Difference]: Finished difference Result 124 states and 160 transitions. [2023-11-06 22:59:54,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:59:54,532 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:59:54,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:54,535 INFO L225 Difference]: With dead ends: 124 [2023-11-06 22:59:54,535 INFO L226 Difference]: Without dead ends: 71 [2023-11-06 22:59:54,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:59:54,538 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 13 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:54,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 163 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:54,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2023-11-06 22:59:54,565 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2023-11-06 22:59:54,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3392857142857142) internal successors, (75), 63 states have internal predecessors, (75), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-06 22:59:54,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 91 transitions. [2023-11-06 22:59:54,568 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 91 transitions. Word has length 26 [2023-11-06 22:59:54,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:54,569 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 91 transitions. [2023-11-06 22:59:54,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:54,569 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 91 transitions. [2023-11-06 22:59:54,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2023-11-06 22:59:54,571 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:54,572 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:54,574 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:59:54,575 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:54,576 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:54,576 INFO L85 PathProgramCache]: Analyzing trace with hash 18143891, now seen corresponding path program 1 times [2023-11-06 22:59:54,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:54,577 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377606728] [2023-11-06 22:59:54,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:54,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:54,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:54,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:54,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:54,824 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:54,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:54,825 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377606728] [2023-11-06 22:59:54,825 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377606728] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:54,825 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:54,825 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:54,826 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715060905] [2023-11-06 22:59:54,826 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:54,827 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:54,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:54,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:54,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:54,829 INFO L87 Difference]: Start difference. First operand 71 states and 91 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:54,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:54,974 INFO L93 Difference]: Finished difference Result 134 states and 175 transitions. [2023-11-06 22:59:54,978 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:59:54,979 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2023-11-06 22:59:54,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:54,981 INFO L225 Difference]: With dead ends: 134 [2023-11-06 22:59:54,983 INFO L226 Difference]: Without dead ends: 71 [2023-11-06 22:59:54,984 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:54,988 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 118 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 118 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:54,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [118 Valid, 218 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:54,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2023-11-06 22:59:55,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2023-11-06 22:59:55,012 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 56 states have (on average 1.3214285714285714) internal successors, (74), 63 states have internal predecessors, (74), 8 states have call successors, (8), 6 states have call predecessors, (8), 6 states have return successors, (8), 6 states have call predecessors, (8), 8 states have call successors, (8) [2023-11-06 22:59:55,015 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 90 transitions. [2023-11-06 22:59:55,018 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 90 transitions. Word has length 31 [2023-11-06 22:59:55,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:55,019 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 90 transitions. [2023-11-06 22:59:55,019 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:59:55,020 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 90 transitions. [2023-11-06 22:59:55,022 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:59:55,024 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:55,024 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:55,025 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:59:55,025 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:55,026 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:55,027 INFO L85 PathProgramCache]: Analyzing trace with hash -26266963, now seen corresponding path program 1 times [2023-11-06 22:59:55,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:55,028 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693290782] [2023-11-06 22:59:55,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:55,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:55,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:55,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:59:55,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 22:59:55,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,296 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:55,296 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:55,297 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693290782] [2023-11-06 22:59:55,297 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [693290782] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:55,297 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:55,297 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:55,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357807038] [2023-11-06 22:59:55,298 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:55,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:55,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:55,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:55,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:55,301 INFO L87 Difference]: Start difference. First operand 71 states and 90 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:59:55,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:55,559 INFO L93 Difference]: Finished difference Result 209 states and 267 transitions. [2023-11-06 22:59:55,559 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:59:55,560 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2023-11-06 22:59:55,561 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:55,566 INFO L225 Difference]: With dead ends: 209 [2023-11-06 22:59:55,567 INFO L226 Difference]: Without dead ends: 146 [2023-11-06 22:59:55,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:59:55,579 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 167 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 286 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:55,582 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 286 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:55,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2023-11-06 22:59:55,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 140. [2023-11-06 22:59:55,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 140 states, 109 states have (on average 1.2844036697247707) internal successors, (140), 116 states have internal predecessors, (140), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2023-11-06 22:59:55,640 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 173 transitions. [2023-11-06 22:59:55,641 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 173 transitions. Word has length 41 [2023-11-06 22:59:55,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:55,641 INFO L495 AbstractCegarLoop]: Abstraction has 140 states and 173 transitions. [2023-11-06 22:59:55,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:59:55,642 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 173 transitions. [2023-11-06 22:59:55,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:55,644 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:55,645 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:55,645 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:59:55,645 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:55,646 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:55,646 INFO L85 PathProgramCache]: Analyzing trace with hash -970342054, now seen corresponding path program 1 times [2023-11-06 22:59:55,646 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:55,647 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [267559978] [2023-11-06 22:59:55,647 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:55,647 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:55,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:55,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:59:55,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:55,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:55,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:55,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [267559978] [2023-11-06 22:59:55,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [267559978] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:55,898 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:55,898 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:59:55,900 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1706278043] [2023-11-06 22:59:55,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:55,901 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:59:55,902 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:55,902 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:59:55,903 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:55,904 INFO L87 Difference]: Start difference. First operand 140 states and 173 transitions. Second operand has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:56,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:56,187 INFO L93 Difference]: Finished difference Result 287 states and 361 transitions. [2023-11-06 22:59:56,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:59:56,189 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2023-11-06 22:59:56,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:56,193 INFO L225 Difference]: With dead ends: 287 [2023-11-06 22:59:56,194 INFO L226 Difference]: Without dead ends: 155 [2023-11-06 22:59:56,197 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:59:56,201 INFO L413 NwaCegarLoop]: 83 mSDtfsCounter, 100 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 142 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 103 SdHoareTripleChecker+Valid, 399 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:56,202 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [103 Valid, 399 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 142 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:56,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2023-11-06 22:59:56,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 142. [2023-11-06 22:59:56,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 111 states have (on average 1.2792792792792793) internal successors, (142), 118 states have internal predecessors, (142), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2023-11-06 22:59:56,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 175 transitions. [2023-11-06 22:59:56,250 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 175 transitions. Word has length 45 [2023-11-06 22:59:56,251 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:56,251 INFO L495 AbstractCegarLoop]: Abstraction has 142 states and 175 transitions. [2023-11-06 22:59:56,251 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.714285714285714) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:56,252 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 175 transitions. [2023-11-06 22:59:56,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:56,254 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:56,254 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:56,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:59:56,255 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:56,256 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:56,256 INFO L85 PathProgramCache]: Analyzing trace with hash 718601688, now seen corresponding path program 1 times [2023-11-06 22:59:56,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:56,257 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447700341] [2023-11-06 22:59:56,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:56,257 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:56,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:56,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:59:56,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:56,395 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:56,395 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447700341] [2023-11-06 22:59:56,396 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [447700341] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:56,396 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:56,396 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:59:56,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [992906044] [2023-11-06 22:59:56,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:56,397 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:59:56,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:56,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:59:56,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:59:56,399 INFO L87 Difference]: Start difference. First operand 142 states and 175 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:56,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:56,601 INFO L93 Difference]: Finished difference Result 284 states and 354 transitions. [2023-11-06 22:59:56,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:59:56,602 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2023-11-06 22:59:56,602 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:56,604 INFO L225 Difference]: With dead ends: 284 [2023-11-06 22:59:56,605 INFO L226 Difference]: Without dead ends: 150 [2023-11-06 22:59:56,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:59:56,607 INFO L413 NwaCegarLoop]: 85 mSDtfsCounter, 58 mSDsluCounter, 278 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:56,607 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 363 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:59:56,609 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2023-11-06 22:59:56,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 145. [2023-11-06 22:59:56,632 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 145 states, 114 states have (on average 1.2719298245614035) internal successors, (145), 121 states have internal predecessors, (145), 14 states have call successors, (14), 13 states have call predecessors, (14), 16 states have return successors, (19), 15 states have call predecessors, (19), 14 states have call successors, (19) [2023-11-06 22:59:56,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 145 states to 145 states and 178 transitions. [2023-11-06 22:59:56,634 INFO L78 Accepts]: Start accepts. Automaton has 145 states and 178 transitions. Word has length 45 [2023-11-06 22:59:56,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:56,635 INFO L495 AbstractCegarLoop]: Abstraction has 145 states and 178 transitions. [2023-11-06 22:59:56,635 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:56,635 INFO L276 IsEmpty]: Start isEmpty. Operand 145 states and 178 transitions. [2023-11-06 22:59:56,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2023-11-06 22:59:56,637 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:56,637 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:56,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:59:56,638 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:56,639 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:56,639 INFO L85 PathProgramCache]: Analyzing trace with hash -547640228, now seen corresponding path program 1 times [2023-11-06 22:59:56,639 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:56,639 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871777178] [2023-11-06 22:59:56,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:56,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:56,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:56,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:59:56,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:56,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:56,760 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:56,760 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871777178] [2023-11-06 22:59:56,760 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871777178] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:56,760 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:56,761 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:56,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376083815] [2023-11-06 22:59:56,761 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:56,762 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:56,762 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:56,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:56,763 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:56,763 INFO L87 Difference]: Start difference. First operand 145 states and 178 transitions. Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:57,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:57,030 INFO L93 Difference]: Finished difference Result 407 states and 521 transitions. [2023-11-06 22:59:57,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:59:57,031 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 45 [2023-11-06 22:59:57,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:57,036 INFO L225 Difference]: With dead ends: 407 [2023-11-06 22:59:57,037 INFO L226 Difference]: Without dead ends: 270 [2023-11-06 22:59:57,038 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:59:57,041 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 201 mSDsluCounter, 167 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 207 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:57,041 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [207 Valid, 293 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:57,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2023-11-06 22:59:57,095 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 262. [2023-11-06 22:59:57,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 203 states have (on average 1.2610837438423645) internal successors, (256), 214 states have internal predecessors, (256), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2023-11-06 22:59:57,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 329 transitions. [2023-11-06 22:59:57,100 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 329 transitions. Word has length 45 [2023-11-06 22:59:57,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:57,104 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 329 transitions. [2023-11-06 22:59:57,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:59:57,105 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 329 transitions. [2023-11-06 22:59:57,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2023-11-06 22:59:57,109 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:57,109 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:57,109 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:59:57,110 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:57,110 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:57,110 INFO L85 PathProgramCache]: Analyzing trace with hash 2090838197, now seen corresponding path program 1 times [2023-11-06 22:59:57,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:57,111 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1209609916] [2023-11-06 22:59:57,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:57,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:57,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:57,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:59:57,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-06 22:59:57,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:57,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:57,314 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1209609916] [2023-11-06 22:59:57,314 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1209609916] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:57,314 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:57,314 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:59:57,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1052606319] [2023-11-06 22:59:57,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:57,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:59:57,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:57,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:59:57,317 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:59:57,319 INFO L87 Difference]: Start difference. First operand 262 states and 329 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:59:57,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:57,634 INFO L93 Difference]: Finished difference Result 528 states and 671 transitions. [2023-11-06 22:59:57,635 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-06 22:59:57,635 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 47 [2023-11-06 22:59:57,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:57,643 INFO L225 Difference]: With dead ends: 528 [2023-11-06 22:59:57,644 INFO L226 Difference]: Without dead ends: 274 [2023-11-06 22:59:57,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:59:57,652 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 112 mSDsluCounter, 242 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:57,653 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 312 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:57,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 274 states. [2023-11-06 22:59:57,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 274 to 258. [2023-11-06 22:59:57,697 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 258 states, 199 states have (on average 1.2261306532663316) internal successors, (244), 210 states have internal predecessors, (244), 29 states have call successors, (29), 28 states have call predecessors, (29), 29 states have return successors, (44), 29 states have call predecessors, (44), 29 states have call successors, (44) [2023-11-06 22:59:57,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 317 transitions. [2023-11-06 22:59:57,702 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 317 transitions. Word has length 47 [2023-11-06 22:59:57,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:57,702 INFO L495 AbstractCegarLoop]: Abstraction has 258 states and 317 transitions. [2023-11-06 22:59:57,702 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 1 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:59:57,703 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 317 transitions. [2023-11-06 22:59:57,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:59:57,704 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:57,704 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:57,704 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:59:57,704 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:57,705 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:57,707 INFO L85 PathProgramCache]: Analyzing trace with hash -1265697662, now seen corresponding path program 1 times [2023-11-06 22:59:57,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:57,707 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016276288] [2023-11-06 22:59:57,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:57,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:57,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:59:57,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:59:57,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2023-11-06 22:59:57,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:57,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:57,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:57,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016276288] [2023-11-06 22:59:57,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016276288] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:57,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:59:57,818 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:59:57,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [355420420] [2023-11-06 22:59:57,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:57,821 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:59:57,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:57,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:59:57,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:59:57,823 INFO L87 Difference]: Start difference. First operand 258 states and 317 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:59:58,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:58,268 INFO L93 Difference]: Finished difference Result 477 states and 602 transitions. [2023-11-06 22:59:58,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:59:58,269 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2023-11-06 22:59:58,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:58,274 INFO L225 Difference]: With dead ends: 477 [2023-11-06 22:59:58,275 INFO L226 Difference]: Without dead ends: 475 [2023-11-06 22:59:58,276 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:59:58,278 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 279 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 282 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:58,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [282 Valid, 225 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:59:58,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 475 states. [2023-11-06 22:59:58,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 475 to 435. [2023-11-06 22:59:58,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 435 states, 338 states have (on average 1.2307692307692308) internal successors, (416), 359 states have internal predecessors, (416), 48 states have call successors, (48), 42 states have call predecessors, (48), 48 states have return successors, (90), 47 states have call predecessors, (90), 48 states have call successors, (90) [2023-11-06 22:59:58,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 435 states to 435 states and 554 transitions. [2023-11-06 22:59:58,370 INFO L78 Accepts]: Start accepts. Automaton has 435 states and 554 transitions. Word has length 49 [2023-11-06 22:59:58,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:58,371 INFO L495 AbstractCegarLoop]: Abstraction has 435 states and 554 transitions. [2023-11-06 22:59:58,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 3 states have internal predecessors, (42), 1 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:59:58,372 INFO L276 IsEmpty]: Start isEmpty. Operand 435 states and 554 transitions. [2023-11-06 22:59:58,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 89 [2023-11-06 22:59:58,374 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:58,375 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:58,375 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:59:58,375 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:58,376 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:58,376 INFO L85 PathProgramCache]: Analyzing trace with hash 2030253660, now seen corresponding path program 1 times [2023-11-06 22:59:58,376 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:58,376 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107078042] [2023-11-06 22:59:58,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:58,377 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:58,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:59:58,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:58,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:59:58,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:59:58,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 22:59:58,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 22:59:58,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,643 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-06 22:59:58,643 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:58,644 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107078042] [2023-11-06 22:59:58,644 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107078042] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:59:58,644 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1275996851] [2023-11-06 22:59:58,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:58,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:59:58,645 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:59:58,652 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:59:58,668 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:59:58,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:58,795 INFO L262 TraceCheckSpWp]: Trace formula consists of 320 conjuncts, 4 conjunts are in the unsatisfiable core [2023-11-06 22:59:58,805 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:59:58,955 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 36 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:58,956 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:59:58,956 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1275996851] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:58,956 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:59:58,957 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2023-11-06 22:59:58,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84504470] [2023-11-06 22:59:58,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:58,958 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:59:58,958 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:58,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:59:58,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:59:58,960 INFO L87 Difference]: Start difference. First operand 435 states and 554 transitions. Second operand has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-06 22:59:59,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:59:59,089 INFO L93 Difference]: Finished difference Result 764 states and 988 transitions. [2023-11-06 22:59:59,089 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:59:59,090 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) Word has length 88 [2023-11-06 22:59:59,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:59:59,093 INFO L225 Difference]: With dead ends: 764 [2023-11-06 22:59:59,094 INFO L226 Difference]: Without dead ends: 386 [2023-11-06 22:59:59,096 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:59:59,097 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 38 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:59:59,097 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 194 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:59:59,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 386 states. [2023-11-06 22:59:59,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 386 to 386. [2023-11-06 22:59:59,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 386 states, 300 states have (on average 1.2266666666666666) internal successors, (368), 319 states have internal predecessors, (368), 43 states have call successors, (43), 37 states have call predecessors, (43), 42 states have return successors, (68), 43 states have call predecessors, (68), 43 states have call successors, (68) [2023-11-06 22:59:59,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 386 states and 479 transitions. [2023-11-06 22:59:59,166 INFO L78 Accepts]: Start accepts. Automaton has 386 states and 479 transitions. Word has length 88 [2023-11-06 22:59:59,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:59:59,167 INFO L495 AbstractCegarLoop]: Abstraction has 386 states and 479 transitions. [2023-11-06 22:59:59,167 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.0) internal successors, (75), 3 states have internal predecessors, (75), 3 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2023-11-06 22:59:59,168 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 479 transitions. [2023-11-06 22:59:59,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2023-11-06 22:59:59,170 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:59:59,170 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:59:59,184 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:59:59,377 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 22:59:59,378 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:59:59,379 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:59:59,379 INFO L85 PathProgramCache]: Analyzing trace with hash 1047652398, now seen corresponding path program 1 times [2023-11-06 22:59:59,379 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:59:59,379 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [261244144] [2023-11-06 22:59:59,379 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:59,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:59:59,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:59:59,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:59:59,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:59:59,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:59:59,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 22:59:59,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,649 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:59:59,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,652 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2023-11-06 22:59:59,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,655 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-06 22:59:59,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:59:59,656 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [261244144] [2023-11-06 22:59:59,656 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [261244144] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:59:59,656 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [214994895] [2023-11-06 22:59:59,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:59:59,657 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:59:59,657 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:59:59,658 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:59:59,668 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:59:59,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:59:59,794 INFO L262 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 22:59:59,799 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:59:59,976 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 28 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:59:59,977 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:59:59,977 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [214994895] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:59:59,977 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:59:59,978 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2023-11-06 22:59:59,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956713024] [2023-11-06 22:59:59,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:59:59,979 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:59:59,979 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:59:59,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:59:59,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=154, Unknown=0, NotChecked=0, Total=182 [2023-11-06 22:59:59,981 INFO L87 Difference]: Start difference. First operand 386 states and 479 transitions. Second operand has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 23:00:00,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:00,229 INFO L93 Difference]: Finished difference Result 931 states and 1206 transitions. [2023-11-06 23:00:00,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:00:00,230 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) Word has length 91 [2023-11-06 23:00:00,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:00,236 INFO L225 Difference]: With dead ends: 931 [2023-11-06 23:00:00,236 INFO L226 Difference]: Without dead ends: 602 [2023-11-06 23:00:00,239 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 97 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-06 23:00:00,240 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 129 mSDsluCounter, 425 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 571 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:00,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 571 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:00:00,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 602 states. [2023-11-06 23:00:00,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 602 to 548. [2023-11-06 23:00:00,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 548 states, 424 states have (on average 1.2264150943396226) internal successors, (520), 450 states have internal predecessors, (520), 62 states have call successors, (62), 55 states have call predecessors, (62), 61 states have return successors, (99), 59 states have call predecessors, (99), 62 states have call successors, (99) [2023-11-06 23:00:00,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 548 states to 548 states and 681 transitions. [2023-11-06 23:00:00,387 INFO L78 Accepts]: Start accepts. Automaton has 548 states and 681 transitions. Word has length 91 [2023-11-06 23:00:00,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:00,387 INFO L495 AbstractCegarLoop]: Abstraction has 548 states and 681 transitions. [2023-11-06 23:00:00,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.666666666666666) internal successors, (76), 6 states have internal predecessors, (76), 3 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (7), 3 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 23:00:00,388 INFO L276 IsEmpty]: Start isEmpty. Operand 548 states and 681 transitions. [2023-11-06 23:00:00,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2023-11-06 23:00:00,397 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:00,397 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:00,413 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-06 23:00:00,604 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:00:00,604 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:00,605 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:00,605 INFO L85 PathProgramCache]: Analyzing trace with hash 913638892, now seen corresponding path program 1 times [2023-11-06 23:00:00,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:00,605 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1854168304] [2023-11-06 23:00:00,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:00,606 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:00,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:00,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 23:00:00,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 23:00:00,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 23:00:00,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2023-11-06 23:00:00,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:00,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2023-11-06 23:00:00,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,832 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2023-11-06 23:00:00,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:00,833 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1854168304] [2023-11-06 23:00:00,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1854168304] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:00:00,833 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [49583967] [2023-11-06 23:00:00,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:00,834 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:00:00,834 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:00:00,835 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:00:00,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 23:00:00,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:00,968 INFO L262 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 5 conjunts are in the unsatisfiable core [2023-11-06 23:00:00,972 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:00:01,019 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 23:00:01,019 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 23:00:01,019 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [49583967] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:01,020 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 23:00:01,020 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8] total 11 [2023-11-06 23:00:01,020 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [411573545] [2023-11-06 23:00:01,020 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:01,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:00:01,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:01,022 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:00:01,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=24, Invalid=86, Unknown=0, NotChecked=0, Total=110 [2023-11-06 23:00:01,023 INFO L87 Difference]: Start difference. First operand 548 states and 681 transitions. Second operand has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 23:00:01,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:01,090 INFO L93 Difference]: Finished difference Result 738 states and 914 transitions. [2023-11-06 23:00:01,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:00:01,091 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 91 [2023-11-06 23:00:01,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:01,092 INFO L225 Difference]: With dead ends: 738 [2023-11-06 23:00:01,092 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:00:01,094 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 100 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2023-11-06 23:00:01,095 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 15 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 338 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:01,096 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 338 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:00:01,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:00:01,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:00:01,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:00:01,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:00:01,097 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 91 [2023-11-06 23:00:01,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:01,098 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:00:01,098 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.4) internal successors, (67), 5 states have internal predecessors, (67), 2 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2023-11-06 23:00:01,098 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:00:01,098 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:00:01,101 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:00:01,113 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 23:00:01,313 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-06 23:00:01,315 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:00:03,923 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 371 377) no Hoare annotation was computed. [2023-11-06 23:00:03,923 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 371 377) the Hoare annotation is: true [2023-11-06 23:00:03,923 INFO L899 garLoopResultBuilder]: For program point L268-1(lines 264 275) no Hoare annotation was computed. [2023-11-06 23:00:03,924 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 264 275) the Hoare annotation is: true [2023-11-06 23:00:03,924 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 264 275) no Hoare annotation was computed. [2023-11-06 23:00:03,924 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 276 284) the Hoare annotation is: true [2023-11-06 23:00:03,924 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 276 284) no Hoare annotation was computed. [2023-11-06 23:00:03,924 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 276 284) no Hoare annotation was computed. [2023-11-06 23:00:03,925 INFO L895 garLoopResultBuilder]: At program point L209(line 209) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (= ~methAndRunningLastTime~0 0)) (.cse0 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) .cse0 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0))) (or .cse2 .cse3 .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 .cse3 (< |old(~waterLevel~0)| 1) (and .cse1 .cse5) (and (<= 1 ~pumpRunning~0) .cse4 (<= 2 ~waterLevel~0) .cse5) .cse0)))) [2023-11-06 23:00:03,925 INFO L899 garLoopResultBuilder]: For program point L209-1(line 209) no Hoare annotation was computed. [2023-11-06 23:00:03,925 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 331 339) the Hoare annotation is: (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0)) .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3))) [2023-11-06 23:00:03,925 INFO L895 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) .cse0) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0))) [2023-11-06 23:00:03,926 INFO L895 garLoopResultBuilder]: At program point L424-1(lines 405 429) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse4 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (let ((.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (< |old(~waterLevel~0)| 1) (and .cse4 .cse5) (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse5) .cse3)) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse4 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) .cse3))) [2023-11-06 23:00:03,926 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 347 370) no Hoare annotation was computed. [2023-11-06 23:00:03,926 INFO L899 garLoopResultBuilder]: For program point L358-1(lines 358 364) no Hoare annotation was computed. [2023-11-06 23:00:03,926 INFO L899 garLoopResultBuilder]: For program point L986(line 986) no Hoare annotation was computed. [2023-11-06 23:00:03,926 INFO L899 garLoopResultBuilder]: For program point L351-1(lines 350 369) no Hoare annotation was computed. [2023-11-06 23:00:03,926 INFO L899 garLoopResultBuilder]: For program point L413(lines 413 421) no Hoare annotation was computed. [2023-11-06 23:00:03,952 INFO L899 garLoopResultBuilder]: For program point L409(lines 409 426) no Hoare annotation was computed. [2023-11-06 23:00:03,952 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 225) no Hoare annotation was computed. [2023-11-06 23:00:03,952 INFO L899 garLoopResultBuilder]: For program point L244(lines 244 248) no Hoare annotation was computed. [2023-11-06 23:00:03,952 INFO L899 garLoopResultBuilder]: For program point L211(lines 211 228) no Hoare annotation was computed. [2023-11-06 23:00:03,953 INFO L895 garLoopResultBuilder]: At program point L244-2(lines 240 251) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0)) .cse2 .cse3))) [2023-11-06 23:00:03,955 INFO L895 garLoopResultBuilder]: At program point L211-1(lines 203 231) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) (not (= |old(~methAndRunningLastTime~0)| 0)) (< |old(~waterLevel~0)| 1) (and .cse0 .cse1 .cse2) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0) .cse2) .cse3)) (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) (< |old(~waterLevel~0)| 2) (< |old(~pumpRunning~0)| 1) .cse3))) [2023-11-06 23:00:03,956 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 982 989) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:00:03,956 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 347 370) the Hoare annotation is: (let ((.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (< |old(~waterLevel~0)| 2)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (< |old(~waterLevel~0)| 1) (and (= ~pumpRunning~0 0) .cse1 .cse5) .cse4) (or .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5) .cse3 .cse4))) [2023-11-06 23:00:03,956 INFO L895 garLoopResultBuilder]: At program point deactivatePump_returnLabel#1(lines 438 445) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) (= ~pumpRunning~0 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:00:03,957 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 521 539) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse0 (< |old(~waterLevel~0)| 2)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~2#1|) (= |timeShift_isLowWaterLevel_~tmp~5#1| 0))) (or .cse3 (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2) (or .cse4 .cse3 .cse0 .cse2) (or .cse4 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 23:00:03,957 INFO L899 garLoopResultBuilder]: For program point L216(lines 216 222) no Hoare annotation was computed. [2023-11-06 23:00:03,958 INFO L899 garLoopResultBuilder]: For program point L530(lines 530 534) no Hoare annotation was computed. [2023-11-06 23:00:03,958 INFO L899 garLoopResultBuilder]: For program point L530-2(lines 530 534) no Hoare annotation was computed. [2023-11-06 23:00:03,958 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 347 370) no Hoare annotation was computed. [2023-11-06 23:00:03,959 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 457 465) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse2 (= 0 ~systemActive~0))) (and (or (< |old(~waterLevel~0)| 2) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse0 .cse1 (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)) (< |old(~pumpRunning~0)| 1) .cse2) (or .cse3 .cse4 .cse5 (not (= |old(~waterLevel~0)| 1)) .cse2) (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse3 .cse4 (< |old(~waterLevel~0)| 1) (and (<= 1 ~pumpRunning~0) .cse5 (<= 2 ~waterLevel~0) .cse6) (and .cse0 .cse1 .cse6) .cse2)))) [2023-11-06 23:00:03,959 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 986) no Hoare annotation was computed. [2023-11-06 23:00:03,959 INFO L895 garLoopResultBuilder]: At program point L419(line 419) the Hoare annotation is: (let ((.cse0 (< |old(~waterLevel~0)| 2)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:00:03,959 INFO L902 garLoopResultBuilder]: At program point L96(line 96) the Hoare annotation is: true [2023-11-06 23:00:03,959 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 90 119) no Hoare annotation was computed. [2023-11-06 23:00:03,960 INFO L899 garLoopResultBuilder]: For program point L96-1(line 96) no Hoare annotation was computed. [2023-11-06 23:00:03,960 INFO L902 garLoopResultBuilder]: At program point L115(lines 90 119) the Hoare annotation is: true [2023-11-06 23:00:03,960 INFO L899 garLoopResultBuilder]: For program point L111(line 111) no Hoare annotation was computed. [2023-11-06 23:00:03,960 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 90 119) the Hoare annotation is: true [2023-11-06 23:00:03,960 INFO L899 garLoopResultBuilder]: For program point L104(lines 104 108) no Hoare annotation was computed. [2023-11-06 23:00:03,961 INFO L902 garLoopResultBuilder]: At program point L104-1(lines 104 108) the Hoare annotation is: true [2023-11-06 23:00:03,961 INFO L899 garLoopResultBuilder]: For program point L101(line 101) no Hoare annotation was computed. [2023-11-06 23:00:03,961 INFO L902 garLoopResultBuilder]: At program point L100-2(lines 100 114) the Hoare annotation is: true [2023-11-06 23:00:03,961 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 540 547) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2023-11-06 23:00:03,961 INFO L899 garLoopResultBuilder]: For program point L597(lines 597 601) no Hoare annotation was computed. [2023-11-06 23:00:03,962 INFO L895 garLoopResultBuilder]: At program point L597-2(lines 589 602) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2023-11-06 23:00:03,962 INFO L899 garLoopResultBuilder]: For program point L560(lines 559 606) no Hoare annotation was computed. [2023-11-06 23:00:03,962 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 156 166) the Hoare annotation is: true [2023-11-06 23:00:03,962 INFO L899 garLoopResultBuilder]: For program point L589(lines 589 602) no Hoare annotation was computed. [2023-11-06 23:00:03,962 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:03,962 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 167 189) the Hoare annotation is: true [2023-11-06 23:00:03,963 INFO L895 garLoopResultBuilder]: At program point L581(line 581) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2023-11-06 23:00:03,963 INFO L902 garLoopResultBuilder]: At program point L610(lines 549 614) the Hoare annotation is: true [2023-11-06 23:00:03,963 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:00:03,963 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:00:03,963 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 575) no Hoare annotation was computed. [2023-11-06 23:00:03,963 INFO L899 garLoopResultBuilder]: For program point L569-1(lines 569 575) no Hoare annotation was computed. [2023-11-06 23:00:03,964 INFO L899 garLoopResultBuilder]: For program point L177(lines 177 184) no Hoare annotation was computed. [2023-11-06 23:00:03,964 INFO L899 garLoopResultBuilder]: For program point L561(lines 561 565) no Hoare annotation was computed. [2023-11-06 23:00:03,964 INFO L899 garLoopResultBuilder]: For program point L177-2(lines 177 184) no Hoare annotation was computed. [2023-11-06 23:00:03,964 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 147 153) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:03,964 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:00:03,965 INFO L895 garLoopResultBuilder]: At program point L607(lines 558 608) the Hoare annotation is: false [2023-11-06 23:00:03,965 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:00:03,965 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:03,965 INFO L899 garLoopResultBuilder]: For program point L579(lines 579 585) no Hoare annotation was computed. [2023-11-06 23:00:03,965 INFO L899 garLoopResultBuilder]: For program point L579-1(lines 579 585) no Hoare annotation was computed. [2023-11-06 23:00:03,965 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 195 202) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:03,966 INFO L895 garLoopResultBuilder]: At program point L604(lines 559 606) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2023-11-06 23:00:03,966 INFO L895 garLoopResultBuilder]: At program point L571(line 571) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse1 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (not (= 0 ~systemActive~0)))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) .cse0 .cse1 .cse2 (<= 1 ~waterLevel~0) .cse3))) [2023-11-06 23:00:03,966 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:03,967 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 430 437) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2023-11-06 23:00:03,968 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 379 403) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse2 .cse3))) [2023-11-06 23:00:03,968 INFO L895 garLoopResultBuilder]: At program point L393(line 393) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (= ~methAndRunningLastTime~0 0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)))) (and (or .cse0 (< ~waterLevel~0 2) .cse1 .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3))) [2023-11-06 23:00:03,969 INFO L899 garLoopResultBuilder]: For program point L387(lines 387 395) no Hoare annotation was computed. [2023-11-06 23:00:03,969 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 317 330) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and .cse0 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2023-11-06 23:00:03,970 INFO L899 garLoopResultBuilder]: For program point L321(lines 321 327) no Hoare annotation was computed. [2023-11-06 23:00:03,970 INFO L899 garLoopResultBuilder]: For program point L383(lines 383 400) no Hoare annotation was computed. [2023-11-06 23:00:03,970 INFO L899 garLoopResultBuilder]: For program point L511(lines 511 515) no Hoare annotation was computed. [2023-11-06 23:00:03,970 INFO L899 garLoopResultBuilder]: For program point L511-2(lines 511 515) no Hoare annotation was computed. [2023-11-06 23:00:03,970 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 502 520) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (and .cse0 (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0)))) [2023-11-06 23:00:03,971 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 379 403) no Hoare annotation was computed. [2023-11-06 23:00:03,971 INFO L895 garLoopResultBuilder]: At program point L398(line 398) the Hoare annotation is: (or (not (= |old(~pumpRunning~0)| 0)) (< ~waterLevel~0 1) (= 0 ~systemActive~0) (not (= ~methAndRunningLastTime~0 0))) [2023-11-06 23:00:03,971 INFO L899 garLoopResultBuilder]: For program point L398-1(lines 379 403) no Hoare annotation was computed. [2023-11-06 23:00:03,971 INFO L899 garLoopResultBuilder]: For program point L256-1(lines 252 263) no Hoare annotation was computed. [2023-11-06 23:00:03,972 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 252 263) no Hoare annotation was computed. [2023-11-06 23:00:03,972 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 252 263) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or (< ~pumpRunning~0 1) (< |old(~waterLevel~0)| 2) .cse0 .cse1) (or (< |old(~waterLevel~0)| 1) (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2023-11-06 23:00:03,975 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:03,977 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:00:04,041 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:00:04 BoogieIcfgContainer [2023-11-06 23:00:04,045 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:00:04,046 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:00:04,046 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:00:04,046 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:00:04,047 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:59:53" (3/4) ... [2023-11-06 23:00:04,049 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:00:04,053 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:00:04,054 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:00:04,054 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 23:00:04,054 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:00:04,054 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:00:04,055 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:00:04,055 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:00:04,070 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 23:00:04,071 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:00:04,072 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:00:04,072 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:00:04,073 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:00:04,106 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,106 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,107 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,107 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) [2023-11-06 23:00:04,108 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,109 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) && ((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,111 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((((\result == 0) && (pumpRunning == 0)) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,112 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) [2023-11-06 23:00:04,112 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(waterLevel) < 2) || (((((\result == 0) && (pumpRunning == 0)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 23:00:04,113 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,113 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,114 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,114 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,115 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,115 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,116 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,170 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,171 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,171 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:04,171 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) [2023-11-06 23:00:04,172 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,172 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) && ((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,173 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((((\result == 0) && (pumpRunning == 0)) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:04,173 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) [2023-11-06 23:00:04,173 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(waterLevel) < 2) || (((((\result == 0) && (pumpRunning == 0)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) [2023-11-06 23:00:04,173 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,174 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,174 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,174 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,174 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,175 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:00:04,175 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) [2023-11-06 23:00:04,195 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:00:04,196 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:00:04,196 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:00:04,197 INFO L158 Benchmark]: Toolchain (without parser) took 11985.50ms. Allocated memory was 148.9MB in the beginning and 237.0MB in the end (delta: 88.1MB). Free memory was 109.5MB in the beginning and 191.6MB in the end (delta: -82.1MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,197 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 148.9MB. Free memory is still 116.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:00:04,198 INFO L158 Benchmark]: CACSL2BoogieTranslator took 561.14ms. Allocated memory is still 148.9MB. Free memory was 109.5MB in the beginning and 90.0MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,198 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.52ms. Allocated memory is still 148.9MB. Free memory was 90.0MB in the beginning and 87.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:00:04,199 INFO L158 Benchmark]: Boogie Preprocessor took 39.39ms. Allocated memory is still 148.9MB. Free memory was 87.9MB in the beginning and 85.9MB in the end (delta: 2.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,199 INFO L158 Benchmark]: RCFGBuilder took 611.91ms. Allocated memory is still 148.9MB. Free memory was 85.9MB in the beginning and 69.6MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,200 INFO L158 Benchmark]: TraceAbstraction took 10543.41ms. Allocated memory was 148.9MB in the beginning and 237.0MB in the end (delta: 88.1MB). Free memory was 68.6MB in the beginning and 198.9MB in the end (delta: -130.3MB). Peak memory consumption was 90.5MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,201 INFO L158 Benchmark]: Witness Printer took 150.72ms. Allocated memory is still 237.0MB. Free memory was 198.9MB in the beginning and 191.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-06 23:00:04,204 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 148.9MB. Free memory is still 116.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 561.14ms. Allocated memory is still 148.9MB. Free memory was 109.5MB in the beginning and 90.0MB in the end (delta: 19.5MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.52ms. Allocated memory is still 148.9MB. Free memory was 90.0MB in the beginning and 87.9MB in the end (delta: 2.1MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 39.39ms. Allocated memory is still 148.9MB. Free memory was 87.9MB in the beginning and 85.9MB in the end (delta: 2.0MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * RCFGBuilder took 611.91ms. Allocated memory is still 148.9MB. Free memory was 85.9MB in the beginning and 69.6MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 10543.41ms. Allocated memory was 148.9MB in the beginning and 237.0MB in the end (delta: 88.1MB). Free memory was 68.6MB in the beginning and 198.9MB in the end (delta: -130.3MB). Peak memory consumption was 90.5MB. Max. memory is 16.1GB. * Witness Printer took 150.72ms. Allocated memory is still 237.0MB. Free memory was 198.9MB in the beginning and 191.6MB in the end (delta: 7.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [49] - GenericResultAtLocation [Line: 87]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [87] - GenericResultAtLocation [Line: 190]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [190] - GenericResultAtLocation [Line: 232]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [232] - GenericResultAtLocation [Line: 340]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [340] - GenericResultAtLocation [Line: 548]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [548] - GenericResultAtLocation [Line: 615]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [615] - GenericResultAtLocation [Line: 981]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [981] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 986]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 89 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 10.4s, OverallIterations: 12, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1254 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1230 mSDsluCounter, 3474 SdHoareTripleChecker+Invalid, 1.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2274 mSDsCounter, 243 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 827 IncrementalHoareTripleChecker+Invalid, 1070 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 243 mSolverCounterUnsat, 1200 mSDtfsCounter, 827 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 446 GetRequests, 363 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 66 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=548occurred in iteration=11, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 142 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 41 LocationsWithAnnotation, 993 PreInvPairs, 1082 NumberOfFragments, 1288 HoareAnnotationTreeSize, 993 FomulaSimplifications, 973 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 41 FomulaSimplificationsInter, 2990 FormulaSimplificationTreeSizeReductionInter, 2.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.5s InterpolantComputationTime, 894 NumberOfCodeBlocks, 894 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 879 ConstructedInterpolants, 0 QuantifiedInterpolants, 1480 SizeOfPredicates, 8 NumberOfNonLiveVariables, 965 ConjunctsInSsa, 20 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 177/184 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 147]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 549]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 90]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 540]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) - InvariantResult [Line: 982]: Loop Invariant Derived loop invariant: (((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && ((((\old(waterLevel) < 2) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((1 <= pumpRunning) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || (((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\old(waterLevel) == waterLevel))) || (((1 <= pumpRunning) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive)) && ((((((((\result == 0) && (pumpRunning == 0)) && (methAndRunningLastTime == 0)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel)) && (1 <= tmp___0)) && (tmp == 0))) && ((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 405]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive)) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) && ((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 457]: Loop Invariant Derived loop invariant: ((((((\old(waterLevel) < 2) || (((((\result == 0) && (pumpRunning == 0)) && (\result == 0)) && (1 <= \result)) && (1 <= waterLevel))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (methAndRunningLastTime == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) && (((((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 1)) || ((((1 <= pumpRunning) && (methAndRunningLastTime == 0)) && (2 <= waterLevel)) && (\old(waterLevel) == waterLevel))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning) && (\result == 1)) && (tmp == 1)) && (2 <= waterLevel)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((pumpRunning == 0) && (methAndRunningLastTime == 0)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= waterLevel)) && !((0 == systemActive)))) - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: (((((((!((\old(methAndRunningLastTime) == 0)) || (methAndRunningLastTime == 0)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((\old(waterLevel) < 2) || (\old(pumpRunning) < 1)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 438]: Loop Invariant Derived loop invariant: ((((((((((\result == 0) && (pumpRunning == 0)) && (1 <= tmp)) && (1 <= \result)) && (1 <= waterLevel)) || (\old(waterLevel) < 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || (\old(waterLevel) < 2)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(methAndRunningLastTime) == 0))) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 502]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || ((pumpRunning == 0) && (2 <= waterLevel))) || (0 == systemActive)) || !((methAndRunningLastTime == 0))) - InvariantResult [Line: 558]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 156]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 23:00:04,269 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b43faa6d-5205-4787-b445-82d058fbbdf3/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE