./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:48:02,001 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:48:02,125 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:48:02,134 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:48:02,135 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:48:02,173 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:48:02,173 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:48:02,174 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:48:02,175 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:48:02,180 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:48:02,182 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:48:02,182 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:48:02,183 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:48:02,185 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:48:02,185 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:48:02,185 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:48:02,186 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:48:02,186 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:48:02,187 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:48:02,187 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:48:02,187 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:48:02,188 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:48:02,189 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:48:02,189 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:48:02,189 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:48:02,190 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:48:02,191 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:48:02,191 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:48:02,192 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:02,192 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:48:02,193 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:48:02,194 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:48:02,194 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:48:02,194 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:48:02,194 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:48:02,195 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:48:02,195 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:48:02,195 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:48:02,195 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:48:02,196 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e1c4d106eb612b91999bdca4bb49f57df1223b70f35ecd881d6daa6062cb1b0b [2023-11-06 22:48:02,494 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:48:02,520 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:48:02,523 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:48:02,524 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:48:02,525 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:48:02,526 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2023-11-06 22:48:05,723 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:48:06,070 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:48:06,074 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2023-11-06 22:48:06,093 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/data/fe5be2c59/d8ab8ce12e4248f0b741a82f453c85fb/FLAG7e47ef1cf [2023-11-06 22:48:06,111 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/data/fe5be2c59/d8ab8ce12e4248f0b741a82f453c85fb [2023-11-06 22:48:06,118 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:48:06,120 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:48:06,123 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:06,123 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:48:06,129 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:48:06,130 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,131 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2262d11e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06, skipping insertion in model container [2023-11-06 22:48:06,131 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,208 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:48:06,376 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2023-11-06 22:48:06,515 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:06,537 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:48:06,550 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] [2023-11-06 22:48:06,552 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] [2023-11-06 22:48:06,553 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [96] [2023-11-06 22:48:06,553 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [165] [2023-11-06 22:48:06,553 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [398] [2023-11-06 22:48:06,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [502] [2023-11-06 22:48:06,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [536] [2023-11-06 22:48:06,554 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [902] [2023-11-06 22:48:06,558 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c[1605,1618] [2023-11-06 22:48:06,618 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:48:06,639 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:48:06,640 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06 WrapperNode [2023-11-06 22:48:06,640 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:48:06,641 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:06,641 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:48:06,642 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:48:06,649 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,680 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,713 INFO L138 Inliner]: procedures = 56, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 228 [2023-11-06 22:48:06,714 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:48:06,715 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:48:06,715 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:48:06,715 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:48:06,725 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,725 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,734 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,734 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,740 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,747 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,749 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,751 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,761 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:48:06,762 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:48:06,762 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:48:06,762 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:48:06,763 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (1/1) ... [2023-11-06 22:48:06,770 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:48:06,783 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:06,798 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:48:06,827 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:48:06,842 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:48:06,842 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:48:06,842 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:48:06,842 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:48:06,844 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:48:06,845 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:48:06,845 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:48:06,845 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:48:06,846 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:48:06,846 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:48:06,846 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:48:06,846 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:48:06,846 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:48:06,846 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:48:06,846 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:48:06,847 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:48:06,847 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:48:06,847 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:48:06,848 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:48:06,848 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:48:06,848 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:48:06,849 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:48:06,985 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:48:06,988 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:48:07,422 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:48:07,436 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:48:07,436 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:48:07,440 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:07 BoogieIcfgContainer [2023-11-06 22:48:07,440 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:48:07,443 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:48:07,444 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:48:07,447 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:48:07,447 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:48:06" (1/3) ... [2023-11-06 22:48:07,448 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12a2fc8d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:07, skipping insertion in model container [2023-11-06 22:48:07,448 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:48:06" (2/3) ... [2023-11-06 22:48:07,450 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@12a2fc8d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:48:07, skipping insertion in model container [2023-11-06 22:48:07,450 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:07" (3/3) ... [2023-11-06 22:48:07,452 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product53.cil.c [2023-11-06 22:48:07,472 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:48:07,473 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:48:07,546 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:48:07,553 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7b58b7cb, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:48:07,554 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:48:07,559 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:48:07,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2023-11-06 22:48:07,571 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:07,572 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:07,573 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:07,578 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:07,578 INFO L85 PathProgramCache]: Analyzing trace with hash 1763060088, now seen corresponding path program 1 times [2023-11-06 22:48:07,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:07,589 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [855227488] [2023-11-06 22:48:07,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:07,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:07,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:07,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:48:07,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:07,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:07,788 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:07,788 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [855227488] [2023-11-06 22:48:07,789 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [855227488] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:07,797 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:07,798 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:48:07,800 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673081661] [2023-11-06 22:48:07,800 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:07,805 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:48:07,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:07,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:48:07,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:07,857 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:07,935 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:07,935 INFO L93 Difference]: Finished difference Result 196 states and 267 transitions. [2023-11-06 22:48:07,936 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:48:07,937 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2023-11-06 22:48:07,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:07,949 INFO L225 Difference]: With dead ends: 196 [2023-11-06 22:48:07,950 INFO L226 Difference]: Without dead ends: 93 [2023-11-06 22:48:07,955 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:48:07,960 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:07,961 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:07,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2023-11-06 22:48:08,019 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2023-11-06 22:48:08,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-06 22:48:08,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 121 transitions. [2023-11-06 22:48:08,034 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 121 transitions. Word has length 25 [2023-11-06 22:48:08,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:08,035 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 121 transitions. [2023-11-06 22:48:08,036 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:08,036 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 121 transitions. [2023-11-06 22:48:08,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-06 22:48:08,046 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:08,046 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:08,046 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:48:08,047 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:08,047 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:08,048 INFO L85 PathProgramCache]: Analyzing trace with hash 1681284877, now seen corresponding path program 1 times [2023-11-06 22:48:08,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:08,048 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1718541879] [2023-11-06 22:48:08,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:08,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:08,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:48:08,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:08,260 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:08,261 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1718541879] [2023-11-06 22:48:08,261 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1718541879] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:08,261 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:08,261 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:08,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868889567] [2023-11-06 22:48:08,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:08,263 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:08,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:08,271 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:08,271 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:08,272 INFO L87 Difference]: Start difference. First operand 93 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:08,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:08,311 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2023-11-06 22:48:08,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:08,311 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2023-11-06 22:48:08,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:08,315 INFO L225 Difference]: With dead ends: 152 [2023-11-06 22:48:08,315 INFO L226 Difference]: Without dead ends: 84 [2023-11-06 22:48:08,323 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:08,326 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 12 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:08,327 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:08,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-06 22:48:08,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2023-11-06 22:48:08,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3387096774193548) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:48:08,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2023-11-06 22:48:08,348 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 26 [2023-11-06 22:48:08,348 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:08,348 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2023-11-06 22:48:08,349 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:08,349 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2023-11-06 22:48:08,350 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2023-11-06 22:48:08,350 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:08,351 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:08,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:48:08,351 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:08,352 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:08,352 INFO L85 PathProgramCache]: Analyzing trace with hash -1900585844, now seen corresponding path program 1 times [2023-11-06 22:48:08,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:08,353 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642250883] [2023-11-06 22:48:08,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:08,353 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:08,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:08,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:08,452 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:08,452 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [642250883] [2023-11-06 22:48:08,452 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [642250883] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:08,452 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:08,453 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:48:08,453 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1259263218] [2023-11-06 22:48:08,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:08,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:48:08,454 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:08,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:48:08,455 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:08,455 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:08,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:08,475 INFO L93 Difference]: Finished difference Result 161 states and 212 transitions. [2023-11-06 22:48:08,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:48:08,476 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2023-11-06 22:48:08,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:08,478 INFO L225 Difference]: With dead ends: 161 [2023-11-06 22:48:08,478 INFO L226 Difference]: Without dead ends: 84 [2023-11-06 22:48:08,479 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:48:08,480 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 91 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:08,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 107 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:48:08,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2023-11-06 22:48:08,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2023-11-06 22:48:08,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 71 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:48:08,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2023-11-06 22:48:08,497 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 30 [2023-11-06 22:48:08,498 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:08,498 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2023-11-06 22:48:08,498 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:48:08,498 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2023-11-06 22:48:08,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-06 22:48:08,500 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:08,504 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:08,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:48:08,504 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:08,505 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:08,505 INFO L85 PathProgramCache]: Analyzing trace with hash 810060833, now seen corresponding path program 1 times [2023-11-06 22:48:08,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:08,505 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [923812856] [2023-11-06 22:48:08,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:08,506 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:08,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:08,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-06 22:48:08,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-06 22:48:08,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:08,691 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:48:08,691 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:08,691 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [923812856] [2023-11-06 22:48:08,692 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [923812856] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:08,692 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:08,692 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 22:48:08,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1303215511] [2023-11-06 22:48:08,692 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:08,693 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 22:48:08,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:08,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 22:48:08,694 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 22:48:08,694 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:48:08,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:08,969 INFO L93 Difference]: Finished difference Result 243 states and 317 transitions. [2023-11-06 22:48:08,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:48:08,970 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 43 [2023-11-06 22:48:08,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:08,972 INFO L225 Difference]: With dead ends: 243 [2023-11-06 22:48:08,972 INFO L226 Difference]: Without dead ends: 166 [2023-11-06 22:48:08,973 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:48:08,975 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 154 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 160 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:08,975 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [160 Valid, 219 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:08,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2023-11-06 22:48:09,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 160. [2023-11-06 22:48:09,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 120 states have (on average 1.2916666666666667) internal successors, (155), 128 states have internal predecessors, (155), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2023-11-06 22:48:09,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 204 transitions. [2023-11-06 22:48:09,003 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 204 transitions. Word has length 43 [2023-11-06 22:48:09,003 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:09,003 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 204 transitions. [2023-11-06 22:48:09,003 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 22:48:09,004 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 204 transitions. [2023-11-06 22:48:09,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:48:09,005 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:09,005 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:09,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:48:09,006 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:09,006 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:09,007 INFO L85 PathProgramCache]: Analyzing trace with hash 1861351509, now seen corresponding path program 1 times [2023-11-06 22:48:09,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:09,007 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1704932087] [2023-11-06 22:48:09,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:09,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:09,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:09,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:09,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 22:48:09,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,172 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:09,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:09,173 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1704932087] [2023-11-06 22:48:09,173 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1704932087] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:09,173 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:09,173 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:09,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [126169085] [2023-11-06 22:48:09,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:09,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:09,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:09,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:09,176 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:09,176 INFO L87 Difference]: Start difference. First operand 160 states and 204 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:48:09,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:09,455 INFO L93 Difference]: Finished difference Result 425 states and 570 transitions. [2023-11-06 22:48:09,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2023-11-06 22:48:09,456 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2023-11-06 22:48:09,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:09,460 INFO L225 Difference]: With dead ends: 425 [2023-11-06 22:48:09,460 INFO L226 Difference]: Without dead ends: 272 [2023-11-06 22:48:09,462 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:48:09,463 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 161 mSDsluCounter, 319 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 167 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 211 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:09,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [167 Valid, 427 Invalid, 211 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:09,465 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 272 states. [2023-11-06 22:48:09,503 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 272 to 253. [2023-11-06 22:48:09,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 253 states, 191 states have (on average 1.2827225130890052) internal successors, (245), 201 states have internal predecessors, (245), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (49), 32 states have call predecessors, (49), 30 states have call successors, (49) [2023-11-06 22:48:09,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 253 states to 253 states and 324 transitions. [2023-11-06 22:48:09,507 INFO L78 Accepts]: Start accepts. Automaton has 253 states and 324 transitions. Word has length 49 [2023-11-06 22:48:09,508 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:09,508 INFO L495 AbstractCegarLoop]: Abstraction has 253 states and 324 transitions. [2023-11-06 22:48:09,508 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 22:48:09,509 INFO L276 IsEmpty]: Start isEmpty. Operand 253 states and 324 transitions. [2023-11-06 22:48:09,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:48:09,510 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:09,510 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:09,510 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:48:09,511 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:09,511 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:09,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1995365015, now seen corresponding path program 1 times [2023-11-06 22:48:09,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:09,512 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [354822737] [2023-11-06 22:48:09,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:09,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:09,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:09,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:09,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 22:48:09,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:09,676 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:09,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:09,677 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [354822737] [2023-11-06 22:48:09,677 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [354822737] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:09,677 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:09,678 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:09,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31664012] [2023-11-06 22:48:09,679 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:09,680 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:09,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:09,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:09,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:09,681 INFO L87 Difference]: Start difference. First operand 253 states and 324 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:48:09,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:09,920 INFO L93 Difference]: Finished difference Result 513 states and 670 transitions. [2023-11-06 22:48:09,920 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:09,921 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2023-11-06 22:48:09,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:09,927 INFO L225 Difference]: With dead ends: 513 [2023-11-06 22:48:09,928 INFO L226 Difference]: Without dead ends: 267 [2023-11-06 22:48:09,953 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:48:09,954 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 70 mSDsluCounter, 325 mSDsCounter, 0 mSdLazyCounter, 147 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 170 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 147 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:09,955 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 425 Invalid, 170 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 147 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:09,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 267 states. [2023-11-06 22:48:09,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 267 to 259. [2023-11-06 22:48:09,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 259 states, 197 states have (on average 1.2741116751269035) internal successors, (251), 207 states have internal predecessors, (251), 30 states have call successors, (30), 26 states have call predecessors, (30), 31 states have return successors, (49), 32 states have call predecessors, (49), 30 states have call successors, (49) [2023-11-06 22:48:09,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 259 states to 259 states and 330 transitions. [2023-11-06 22:48:09,994 INFO L78 Accepts]: Start accepts. Automaton has 259 states and 330 transitions. Word has length 49 [2023-11-06 22:48:09,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:09,995 INFO L495 AbstractCegarLoop]: Abstraction has 259 states and 330 transitions. [2023-11-06 22:48:09,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:48:09,995 INFO L276 IsEmpty]: Start isEmpty. Operand 259 states and 330 transitions. [2023-11-06 22:48:09,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 22:48:09,997 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:09,997 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:09,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:48:09,998 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:09,998 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:09,998 INFO L85 PathProgramCache]: Analyzing trace with hash -2080747563, now seen corresponding path program 1 times [2023-11-06 22:48:09,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:09,999 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [456123443] [2023-11-06 22:48:09,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:09,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:10,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:10,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:10,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2023-11-06 22:48:10,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:10,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:10,178 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [456123443] [2023-11-06 22:48:10,178 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [456123443] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:10,178 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:10,178 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:10,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065967460] [2023-11-06 22:48:10,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:10,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:10,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:10,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:10,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:10,180 INFO L87 Difference]: Start difference. First operand 259 states and 330 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:48:10,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:10,388 INFO L93 Difference]: Finished difference Result 475 states and 619 transitions. [2023-11-06 22:48:10,389 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:48:10,389 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2023-11-06 22:48:10,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:10,391 INFO L225 Difference]: With dead ends: 475 [2023-11-06 22:48:10,391 INFO L226 Difference]: Without dead ends: 223 [2023-11-06 22:48:10,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:48:10,393 INFO L413 NwaCegarLoop]: 77 mSDtfsCounter, 167 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 159 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:10,394 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 260 Invalid, 159 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:48:10,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2023-11-06 22:48:10,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 218. [2023-11-06 22:48:10,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 165 states have (on average 1.2545454545454546) internal successors, (207), 174 states have internal predecessors, (207), 26 states have call successors, (26), 22 states have call predecessors, (26), 26 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2023-11-06 22:48:10,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 270 transitions. [2023-11-06 22:48:10,421 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 270 transitions. Word has length 49 [2023-11-06 22:48:10,422 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:10,422 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 270 transitions. [2023-11-06 22:48:10,422 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:48:10,422 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 270 transitions. [2023-11-06 22:48:10,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 22:48:10,423 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:10,423 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:10,424 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:48:10,424 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:10,424 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:10,424 INFO L85 PathProgramCache]: Analyzing trace with hash 1736726981, now seen corresponding path program 1 times [2023-11-06 22:48:10,425 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:10,425 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1394740672] [2023-11-06 22:48:10,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:10,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:10,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:10,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:10,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:10,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,529 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2023-11-06 22:48:10,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,533 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:10,533 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:10,533 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1394740672] [2023-11-06 22:48:10,533 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1394740672] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:10,533 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:10,533 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:48:10,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1908082979] [2023-11-06 22:48:10,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:10,534 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:48:10,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:10,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:48:10,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:48:10,535 INFO L87 Difference]: Start difference. First operand 218 states and 270 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:10,768 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:10,769 INFO L93 Difference]: Finished difference Result 432 states and 535 transitions. [2023-11-06 22:48:10,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:48:10,769 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2023-11-06 22:48:10,771 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:10,774 INFO L225 Difference]: With dead ends: 432 [2023-11-06 22:48:10,774 INFO L226 Difference]: Without dead ends: 221 [2023-11-06 22:48:10,775 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:48:10,777 INFO L413 NwaCegarLoop]: 86 mSDtfsCounter, 125 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 373 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:10,778 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 373 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:10,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2023-11-06 22:48:10,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 216. [2023-11-06 22:48:10,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 163 states have (on average 1.2453987730061349) internal successors, (203), 172 states have internal predecessors, (203), 26 states have call successors, (26), 22 states have call predecessors, (26), 26 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2023-11-06 22:48:10,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 266 transitions. [2023-11-06 22:48:10,810 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 266 transitions. Word has length 51 [2023-11-06 22:48:10,810 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:10,810 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 266 transitions. [2023-11-06 22:48:10,811 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 22:48:10,811 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 266 transitions. [2023-11-06 22:48:10,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2023-11-06 22:48:10,812 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:10,812 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:10,813 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:48:10,813 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:10,813 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:10,814 INFO L85 PathProgramCache]: Analyzing trace with hash 1340244461, now seen corresponding path program 1 times [2023-11-06 22:48:10,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:10,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825277110] [2023-11-06 22:48:10,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:10,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:10,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:10,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:48:10,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:10,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:10,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2023-11-06 22:48:10,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,001 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:11,001 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:11,001 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825277110] [2023-11-06 22:48:11,001 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825277110] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:11,002 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:11,002 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:48:11,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1274442629] [2023-11-06 22:48:11,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:11,003 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:48:11,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:11,003 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:48:11,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:48:11,004 INFO L87 Difference]: Start difference. First operand 216 states and 266 transitions. Second operand has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:48:11,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:11,683 INFO L93 Difference]: Finished difference Result 427 states and 534 transitions. [2023-11-06 22:48:11,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2023-11-06 22:48:11,684 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2023-11-06 22:48:11,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:11,686 INFO L225 Difference]: With dead ends: 427 [2023-11-06 22:48:11,687 INFO L226 Difference]: Without dead ends: 269 [2023-11-06 22:48:11,688 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 100 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=175, Invalid=425, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:48:11,689 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 354 mSDsluCounter, 352 mSDsCounter, 0 mSdLazyCounter, 473 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 358 SdHoareTripleChecker+Valid, 452 SdHoareTripleChecker+Invalid, 596 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 473 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:11,689 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [358 Valid, 452 Invalid, 596 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 473 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 22:48:11,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 269 states. [2023-11-06 22:48:11,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 269 to 218. [2023-11-06 22:48:11,735 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 164 states have (on average 1.2073170731707317) internal successors, (198), 174 states have internal predecessors, (198), 26 states have call successors, (26), 22 states have call predecessors, (26), 27 states have return successors, (32), 27 states have call predecessors, (32), 26 states have call successors, (32) [2023-11-06 22:48:11,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 256 transitions. [2023-11-06 22:48:11,737 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 256 transitions. Word has length 53 [2023-11-06 22:48:11,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:11,737 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 256 transitions. [2023-11-06 22:48:11,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 4.888888888888889) internal successors, (44), 7 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:48:11,739 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 256 transitions. [2023-11-06 22:48:11,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-06 22:48:11,740 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:11,740 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:11,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:48:11,741 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:11,741 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:11,741 INFO L85 PathProgramCache]: Analyzing trace with hash -768900197, now seen corresponding path program 1 times [2023-11-06 22:48:11,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:11,742 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175990972] [2023-11-06 22:48:11,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:11,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:11,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:11,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:48:11,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:11,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:11,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:48:11,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:11,908 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:11,908 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:11,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175990972] [2023-11-06 22:48:11,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1175990972] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:11,909 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:11,909 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:48:11,909 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1250813145] [2023-11-06 22:48:11,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:11,910 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:48:11,910 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:11,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:48:11,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:48:11,911 INFO L87 Difference]: Start difference. First operand 218 states and 256 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:12,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:12,231 INFO L93 Difference]: Finished difference Result 417 states and 499 transitions. [2023-11-06 22:48:12,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-06 22:48:12,233 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 55 [2023-11-06 22:48:12,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:12,236 INFO L225 Difference]: With dead ends: 417 [2023-11-06 22:48:12,236 INFO L226 Difference]: Without dead ends: 257 [2023-11-06 22:48:12,237 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2023-11-06 22:48:12,238 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 156 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 355 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:12,238 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 293 Invalid, 355 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:48:12,239 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2023-11-06 22:48:12,273 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 218. [2023-11-06 22:48:12,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 164 states have (on average 1.201219512195122) internal successors, (197), 174 states have internal predecessors, (197), 26 states have call successors, (26), 22 states have call predecessors, (26), 27 states have return successors, (32), 27 states have call predecessors, (32), 26 states have call successors, (32) [2023-11-06 22:48:12,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 255 transitions. [2023-11-06 22:48:12,276 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 255 transitions. Word has length 55 [2023-11-06 22:48:12,276 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:12,277 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 255 transitions. [2023-11-06 22:48:12,277 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:48:12,277 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 255 transitions. [2023-11-06 22:48:12,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-06 22:48:12,279 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:12,279 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:12,279 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 22:48:12,279 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:12,280 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:12,280 INFO L85 PathProgramCache]: Analyzing trace with hash -696926305, now seen corresponding path program 1 times [2023-11-06 22:48:12,280 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:12,281 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336347876] [2023-11-06 22:48:12,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:12,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:12,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:12,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:48:12,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:12,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:48:12,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:48:12,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:12,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:48:12,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:12,417 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336347876] [2023-11-06 22:48:12,417 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336347876] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:48:12,417 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:48:12,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:48:12,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143984463] [2023-11-06 22:48:12,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:48:12,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:48:12,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:12,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:48:12,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:48:12,420 INFO L87 Difference]: Start difference. First operand 218 states and 255 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:48:12,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:12,944 INFO L93 Difference]: Finished difference Result 530 states and 651 transitions. [2023-11-06 22:48:12,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2023-11-06 22:48:12,945 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 55 [2023-11-06 22:48:12,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:12,948 INFO L225 Difference]: With dead ends: 530 [2023-11-06 22:48:12,948 INFO L226 Difference]: Without dead ends: 370 [2023-11-06 22:48:12,949 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 35 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=132, Invalid=330, Unknown=0, NotChecked=0, Total=462 [2023-11-06 22:48:12,950 INFO L413 NwaCegarLoop]: 53 mSDtfsCounter, 298 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 401 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 303 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 512 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 401 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:12,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [303 Valid, 369 Invalid, 512 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 401 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:48:12,951 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2023-11-06 22:48:12,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 347. [2023-11-06 22:48:12,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 259 states have (on average 1.193050193050193) internal successors, (309), 275 states have internal predecessors, (309), 46 states have call successors, (46), 35 states have call predecessors, (46), 41 states have return successors, (60), 44 states have call predecessors, (60), 46 states have call successors, (60) [2023-11-06 22:48:12,995 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 415 transitions. [2023-11-06 22:48:12,995 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 415 transitions. Word has length 55 [2023-11-06 22:48:12,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:12,996 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 415 transitions. [2023-11-06 22:48:12,996 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 3 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 22:48:12,996 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 415 transitions. [2023-11-06 22:48:12,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2023-11-06 22:48:12,998 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:48:12,998 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:12,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-06 22:48:12,999 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:48:12,999 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:48:12,999 INFO L85 PathProgramCache]: Analyzing trace with hash 1626295211, now seen corresponding path program 1 times [2023-11-06 22:48:13,000 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:48:13,000 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [470567726] [2023-11-06 22:48:13,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:13,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:48:13,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:48:13,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:48:13,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:48:13,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:48:13,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:48:13,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2023-11-06 22:48:13,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-06 22:48:13,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 22:48:13,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,240 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 5 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-06 22:48:13,240 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:48:13,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [470567726] [2023-11-06 22:48:13,241 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [470567726] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:48:13,241 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1610011660] [2023-11-06 22:48:13,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:48:13,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:48:13,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:48:13,248 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:48:13,276 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:48:13,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:48:13,368 INFO L262 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 22:48:13,377 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:48:13,653 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-06 22:48:13,654 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:48:14,003 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2023-11-06 22:48:14,003 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1610011660] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:48:14,003 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:48:14,004 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 20 [2023-11-06 22:48:14,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141576908] [2023-11-06 22:48:14,004 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:48:14,005 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2023-11-06 22:48:14,005 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:48:14,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2023-11-06 22:48:14,006 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=64, Invalid=316, Unknown=0, NotChecked=0, Total=380 [2023-11-06 22:48:14,006 INFO L87 Difference]: Start difference. First operand 347 states and 415 transitions. Second operand has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2023-11-06 22:48:15,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:48:15,871 INFO L93 Difference]: Finished difference Result 1073 states and 1374 transitions. [2023-11-06 22:48:15,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2023-11-06 22:48:15,871 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) Word has length 89 [2023-11-06 22:48:15,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:48:15,872 INFO L225 Difference]: With dead ends: 1073 [2023-11-06 22:48:15,873 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:48:15,878 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 189 SyntacticMatches, 7 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1419 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1113, Invalid=3999, Unknown=0, NotChecked=0, Total=5112 [2023-11-06 22:48:15,879 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 493 mSDsluCounter, 712 mSDsCounter, 0 mSdLazyCounter, 1120 mSolverCounterSat, 223 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 495 SdHoareTripleChecker+Valid, 784 SdHoareTripleChecker+Invalid, 1343 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 223 IncrementalHoareTripleChecker+Valid, 1120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-06 22:48:15,879 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [495 Valid, 784 Invalid, 1343 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [223 Valid, 1120 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-06 22:48:15,880 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:48:15,880 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:48:15,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:48:15,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:48:15,881 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 89 [2023-11-06 22:48:15,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:48:15,881 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:48:15,881 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 6.6) internal successors, (132), 14 states have internal predecessors, (132), 6 states have call successors, (25), 10 states have call predecessors, (25), 8 states have return successors, (22), 8 states have call predecessors, (22), 6 states have call successors, (22) [2023-11-06 22:48:15,881 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:48:15,882 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:48:15,884 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:48:15,896 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:48:16,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2023-11-06 22:48:16,093 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:48:21,625 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 296 303) no Hoare annotation was computed. [2023-11-06 22:48:21,625 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 296 303) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) [2023-11-06 22:48:21,625 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 296 303) no Hoare annotation was computed. [2023-11-06 22:48:21,626 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 203 209) no Hoare annotation was computed. [2023-11-06 22:48:21,626 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 203 209) the Hoare annotation is: true [2023-11-06 22:48:21,626 INFO L899 garLoopResultBuilder]: For program point L430-1(lines 426 437) no Hoare annotation was computed. [2023-11-06 22:48:21,626 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 426 437) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~methaneLevelCritical~0)| 0)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (< ~pumpRunning~0 1) .cse1 .cse2 .cse3) (or .cse0 (not (= ~pumpRunning~0 0)) .cse1 .cse2 .cse3))) [2023-11-06 22:48:21,626 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 426 437) no Hoare annotation was computed. [2023-11-06 22:48:21,626 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 438 446) the Hoare annotation is: true [2023-11-06 22:48:21,626 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 438 446) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 438 446) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L902 garLoopResultBuilder]: At program point L929(lines 904 933) the Hoare annotation is: true [2023-11-06 22:48:21,627 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 904 933) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L899 garLoopResultBuilder]: For program point L925(line 925) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L902 garLoopResultBuilder]: At program point L918-1(lines 918 922) the Hoare annotation is: true [2023-11-06 22:48:21,627 INFO L899 garLoopResultBuilder]: For program point L915(line 915) no Hoare annotation was computed. [2023-11-06 22:48:21,627 INFO L902 garLoopResultBuilder]: At program point L914-2(lines 914 928) the Hoare annotation is: true [2023-11-06 22:48:21,627 INFO L902 garLoopResultBuilder]: At program point L910(line 910) the Hoare annotation is: true [2023-11-06 22:48:21,628 INFO L899 garLoopResultBuilder]: For program point L910-1(line 910) no Hoare annotation was computed. [2023-11-06 22:48:21,628 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 904 933) the Hoare annotation is: true [2023-11-06 22:48:21,628 INFO L895 garLoopResultBuilder]: At program point L510(line 510) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse8 (= 1 ~systemActive~0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse9)) (.cse2 (and .cse7 .cse5 .cse8 .cse9 .cse3)) (.cse1 (not .cse8)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3) .cse4) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (and .cse7 .cse5 .cse6) (< |old(~pumpRunning~0)| 1) .cse4))))) [2023-11-06 22:48:21,628 INFO L899 garLoopResultBuilder]: For program point L510-1(line 510) no Hoare annotation was computed. [2023-11-06 22:48:21,628 INFO L899 garLoopResultBuilder]: For program point L271(lines 271 279) no Hoare annotation was computed. [2023-11-06 22:48:21,629 INFO L899 garLoopResultBuilder]: For program point L267(lines 267 284) no Hoare annotation was computed. [2023-11-06 22:48:21,629 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 179 202) no Hoare annotation was computed. [2023-11-06 22:48:21,629 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 470 478) the Hoare annotation is: (let ((.cse6 (= ~methaneLevelCritical~0 0))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse1 (or (not .cse6) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0))) (.cse9 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse13 (= |old(~pumpRunning~0)| 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse4 (and .cse8 .cse1 .cse9 .cse12 .cse13 .cse2 .cse11)) (.cse0 (not .cse13)) (.cse3 (not .cse12)) (.cse7 (< |old(~pumpRunning~0)| 1)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse6 .cse3 .cse7 .cse5) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse3 .cse4) (or .cse0 .cse6 .cse3 .cse5) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse3 (and .cse8 .cse1 .cse9 .cse10 .cse11) .cse7 .cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse9 .cse10 .cse11))))))) [2023-11-06 22:48:21,629 INFO L895 garLoopResultBuilder]: At program point L309(line 309) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-06 22:48:21,630 INFO L899 garLoopResultBuilder]: For program point L309-1(line 309) no Hoare annotation was computed. [2023-11-06 22:48:21,630 INFO L899 garLoopResultBuilder]: For program point L512(lines 512 532) no Hoare annotation was computed. [2023-11-06 22:48:21,630 INFO L899 garLoopResultBuilder]: For program point L190-1(lines 190 196) no Hoare annotation was computed. [2023-11-06 22:48:21,630 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2023-11-06 22:48:21,630 INFO L895 garLoopResultBuilder]: At program point L277(line 277) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-06 22:48:21,630 INFO L895 garLoopResultBuilder]: At program point L273(line 273) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-06 22:48:21,631 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1) (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1))) [2023-11-06 22:48:21,631 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 179 202) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (< |old(~pumpRunning~0)| 1) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse1) .cse0 .cse2))) [2023-11-06 22:48:21,631 INFO L895 garLoopResultBuilder]: At program point L282(line 282) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1))) [2023-11-06 22:48:21,631 INFO L895 garLoopResultBuilder]: At program point L282-1(lines 263 287) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse8 (= 1 ~systemActive~0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse9)) (.cse2 (and .cse7 .cse5 .cse8 .cse9 .cse3)) (.cse1 (not .cse8)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 .cse1 .cse2 (and (<= 1 ~pumpRunning~0) .cse3) .cse4) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2) (let ((.cse6 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) (and .cse7 .cse5 .cse6) (< |old(~pumpRunning~0)| 1) .cse4))))) [2023-11-06 22:48:21,631 INFO L899 garLoopResultBuilder]: For program point L406(lines 406 410) no Hoare annotation was computed. [2023-11-06 22:48:21,631 INFO L899 garLoopResultBuilder]: For program point L183-1(lines 182 201) no Hoare annotation was computed. [2023-11-06 22:48:21,632 INFO L895 garLoopResultBuilder]: At program point L406-2(lines 402 413) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-06 22:48:21,632 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 179 202) no Hoare annotation was computed. [2023-11-06 22:48:21,632 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 304 314) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|)) (< |old(~pumpRunning~0)| 1) .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1))) [2023-11-06 22:48:21,632 INFO L899 garLoopResultBuilder]: For program point L522(lines 522 528) no Hoare annotation was computed. [2023-11-06 22:48:21,632 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 315 323) the Hoare annotation is: (let ((.cse1 (< 2 |old(~waterLevel~0)|)) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< |old(~pumpRunning~0)| 1) .cse1) (or .cse2 (= ~methaneLevelCritical~0 0) .cse0 .cse1) (or .cse2 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |old(~waterLevel~0)| ~waterLevel~0) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0)) .cse0 .cse1) (or (< 1 |old(~waterLevel~0)|) .cse2 .cse0))) [2023-11-06 22:48:21,633 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2023-11-06 22:48:21,633 INFO L899 garLoopResultBuilder]: For program point L518(lines 518 531) no Hoare annotation was computed. [2023-11-06 22:48:21,633 INFO L895 garLoopResultBuilder]: At program point L518-1(lines 503 535) the Hoare annotation is: (let ((.cse15 (= ~methaneLevelCritical~0 0))) (let ((.cse18 (not .cse15)) (.cse20 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~6#1| 0))) (let ((.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (not .cse20)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (or .cse18 .cse20)) (.cse2 (<= ~waterLevel~0 1)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~3#1| 1)) (.cse4 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse19 (= |old(~pumpRunning~0)| 0))) (let ((.cse11 (not .cse19)) (.cse13 (and .cse0 .cse1 .cse2 .cse19 .cse12 .cse3 .cse4)) (.cse14 (and .cse0 .cse2 .cse19 .cse18 .cse16 .cse12)) (.cse6 (and .cse0 .cse2 .cse18 .cse16)) (.cse8 (and .cse5 .cse2 .cse18 .cse16)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse17 (< 1 |old(~waterLevel~0)|)) (.cse7 (not (= 1 ~systemActive~0))) (.cse9 (< |old(~pumpRunning~0)| 1))) (and (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse4) .cse6 .cse7 .cse8 .cse9 .cse10) (or .cse11 (and (<= 1 ~pumpRunning~0) .cse1 .cse12) .cse7 .cse13 .cse10 .cse14) (or .cse11 .cse15 .cse7 .cse16 .cse10) (or .cse17 .cse11 .cse7 .cse13 .cse14) (or .cse6 .cse15 .cse7 .cse8 .cse9 .cse10) (or .cse17 .cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|) .cse9)))))) [2023-11-06 22:48:21,633 INFO L899 garLoopResultBuilder]: For program point L985(lines 985 992) no Hoare annotation was computed. [2023-11-06 22:48:21,633 INFO L899 garLoopResultBuilder]: For program point L985-2(lines 985 992) no Hoare annotation was computed. [2023-11-06 22:48:21,634 INFO L899 garLoopResultBuilder]: For program point L147(lines 147 151) no Hoare annotation was computed. [2023-11-06 22:48:21,634 INFO L895 garLoopResultBuilder]: At program point L147-2(lines 141 152) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2023-11-06 22:48:21,634 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 965 974) the Hoare annotation is: true [2023-11-06 22:48:21,634 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 73 79) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:48:21,634 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 975 997) the Hoare annotation is: true [2023-11-06 22:48:21,634 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 137) no Hoare annotation was computed. [2023-11-06 22:48:21,634 INFO L899 garLoopResultBuilder]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2023-11-06 22:48:21,635 INFO L902 garLoopResultBuilder]: At program point L160(lines 101 164) the Hoare annotation is: true [2023-11-06 22:48:21,635 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:48:21,635 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:48:21,635 INFO L895 garLoopResultBuilder]: At program point L123(line 123) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2023-11-06 22:48:21,635 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 958 964) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:48:21,635 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:48:21,635 INFO L895 garLoopResultBuilder]: At program point L157(lines 110 158) the Hoare annotation is: false [2023-11-06 22:48:21,635 INFO L899 garLoopResultBuilder]: For program point L112(lines 111 156) no Hoare annotation was computed. [2023-11-06 22:48:21,636 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 152) no Hoare annotation was computed. [2023-11-06 22:48:21,636 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:48:21,636 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 80 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:48:21,636 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 .cse2) (and (= ~pumpRunning~0 0) .cse0 .cse1 .cse2))) [2023-11-06 22:48:21,636 INFO L895 garLoopResultBuilder]: At program point L154(lines 111 156) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~pumpRunning~0) .cse0 .cse1 (<= ~waterLevel~0 2)) (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) .cse0 .cse1))) [2023-11-06 22:48:21,636 INFO L899 garLoopResultBuilder]: For program point L121(lines 121 127) no Hoare annotation was computed. [2023-11-06 22:48:21,636 INFO L899 garLoopResultBuilder]: For program point L121-1(lines 121 127) no Hoare annotation was computed. [2023-11-06 22:48:21,637 INFO L899 garLoopResultBuilder]: For program point L113(lines 113 117) no Hoare annotation was computed. [2023-11-06 22:48:21,637 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 87 95) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:48:21,637 INFO L895 garLoopResultBuilder]: At program point L225(line 225) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (not (= ~waterLevel~0 1)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse0 .cse1) (or .cse1 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)) (or (< 2 ~waterLevel~0) .cse0 .cse1 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0))))) [2023-11-06 22:48:21,637 INFO L899 garLoopResultBuilder]: For program point L219(lines 219 227) no Hoare annotation was computed. [2023-11-06 22:48:21,637 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 288 295) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< 1 ~waterLevel~0))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_~tmp~1#1|))) (or .cse1 .cse2 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse2))) [2023-11-06 22:48:21,637 INFO L899 garLoopResultBuilder]: For program point L215(lines 215 232) no Hoare annotation was computed. [2023-11-06 22:48:21,638 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 211 235) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,638 INFO L895 garLoopResultBuilder]: At program point L230(line 230) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,638 INFO L899 garLoopResultBuilder]: For program point L230-1(lines 211 235) no Hoare annotation was computed. [2023-11-06 22:48:21,638 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 479 492) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (< 1 ~waterLevel~0)) (.cse2 (not .cse6)) (.cse0 (not .cse5)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse4 (<= ~waterLevel~0 1) .cse5 .cse6))) (and (or .cse0 .cse1 (< |old(~pumpRunning~0)| 1)) (or .cse2 .cse0 .cse1 .cse3) (or (< 2 ~waterLevel~0) .cse2 .cse0 (and .cse4 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) .cse3)))) [2023-11-06 22:48:21,638 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 360 378) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse6)) (.cse1 (not .cse5)) (.cse4 (< 1 ~waterLevel~0)) (.cse3 (and (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1|) .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (<= ~waterLevel~0 1) .cse5 .cse6 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (and .cse2 (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1|) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1|)) .cse3) (or .cse1 .cse4 (< |old(~pumpRunning~0)| 1)) (or .cse0 .cse1 .cse4 .cse3)))) [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 211 235) no Hoare annotation was computed. [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 373) no Hoare annotation was computed. [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point L369-2(lines 369 373) no Hoare annotation was computed. [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point L483(lines 483 489) no Hoare annotation was computed. [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point L418-1(lines 414 425) no Hoare annotation was computed. [2023-11-06 22:48:21,639 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 414 425) no Hoare annotation was computed. [2023-11-06 22:48:21,640 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 414 425) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (< ~pumpRunning~0 1) .cse0 .cse1 (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (not (= ~pumpRunning~0 0)) .cse0 .cse1))) [2023-11-06 22:48:21,640 INFO L895 garLoopResultBuilder]: At program point L256(line 256) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,640 INFO L899 garLoopResultBuilder]: For program point L256-1(lines 237 261) no Hoare annotation was computed. [2023-11-06 22:48:21,640 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 493 501) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,641 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 237 261) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,641 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 379 397) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,641 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 237 261) no Hoare annotation was computed. [2023-11-06 22:48:21,641 INFO L895 garLoopResultBuilder]: At program point L251(line 251) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,641 INFO L895 garLoopResultBuilder]: At program point L247(line 247) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< 1 ~waterLevel~0) (< |old(~pumpRunning~0)| 1)))) [2023-11-06 22:48:21,642 INFO L899 garLoopResultBuilder]: For program point L245(lines 245 253) no Hoare annotation was computed. [2023-11-06 22:48:21,642 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 258) no Hoare annotation was computed. [2023-11-06 22:48:21,642 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 392) no Hoare annotation was computed. [2023-11-06 22:48:21,642 INFO L899 garLoopResultBuilder]: For program point L388-2(lines 388 392) no Hoare annotation was computed. [2023-11-06 22:48:21,645 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:48:21,647 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:48:21,688 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:48:21 BoogieIcfgContainer [2023-11-06 22:48:21,688 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:48:21,688 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:48:21,689 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:48:21,689 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:48:21,689 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:48:07" (3/4) ... [2023-11-06 22:48:21,692 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:48:21,696 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:48:21,696 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:48:21,697 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:48:21,697 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:48:21,697 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:48:21,697 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:48:21,697 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:48:21,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:48:21,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2023-11-06 22:48:21,707 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:48:21,708 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:48:21,708 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:48:21,709 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:48:21,710 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:48:21,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,740 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,741 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1)) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || (2 < \old(waterLevel))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || !((tmp == 0))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && (((((((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((1 == systemActive))) || (waterLevel <= \old(waterLevel))) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,742 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,742 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1))) && ((((methaneLevelCritical == 0) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) [2023-11-06 22:48:21,743 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,743 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 22:48:21,744 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,744 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel)) && (tmp == 0))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive)))) [2023-11-06 22:48:21,744 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp___0))) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0)))) [2023-11-06 22:48:21,745 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) && ((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,745 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel))) [2023-11-06 22:48:21,783 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,783 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,784 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1)) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || (2 < \old(waterLevel))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || !((tmp == 0))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && (((((((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((1 == systemActive))) || (waterLevel <= \old(waterLevel))) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,784 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,785 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1))) && ((((methaneLevelCritical == 0) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) [2023-11-06 22:48:21,785 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,785 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 22:48:21,785 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) [2023-11-06 22:48:21,786 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel)) && (tmp == 0))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive)))) [2023-11-06 22:48:21,786 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp___0))) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0)))) [2023-11-06 22:48:21,786 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) && ((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) [2023-11-06 22:48:21,786 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel))) [2023-11-06 22:48:21,805 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:48:21,805 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:48:21,806 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:48:21,806 INFO L158 Benchmark]: Toolchain (without parser) took 15686.64ms. Allocated memory was 142.6MB in the beginning and 237.0MB in the end (delta: 94.4MB). Free memory was 96.6MB in the beginning and 161.9MB in the end (delta: -65.3MB). Peak memory consumption was 30.5MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,807 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 98.6MB. Free memory was 52.4MB in the beginning and 52.2MB in the end (delta: 142.6kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:48:21,807 INFO L158 Benchmark]: CACSL2BoogieTranslator took 517.16ms. Allocated memory is still 142.6MB. Free memory was 96.4MB in the beginning and 77.0MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,807 INFO L158 Benchmark]: Boogie Procedure Inliner took 73.14ms. Allocated memory is still 142.6MB. Free memory was 77.0MB in the beginning and 74.7MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,808 INFO L158 Benchmark]: Boogie Preprocessor took 46.07ms. Allocated memory is still 142.6MB. Free memory was 74.7MB in the beginning and 72.9MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:48:21,808 INFO L158 Benchmark]: RCFGBuilder took 678.71ms. Allocated memory was 142.6MB in the beginning and 197.1MB in the end (delta: 54.5MB). Free memory was 72.9MB in the beginning and 159.2MB in the end (delta: -86.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,809 INFO L158 Benchmark]: TraceAbstraction took 14244.51ms. Allocated memory was 197.1MB in the beginning and 237.0MB in the end (delta: 39.8MB). Free memory was 159.2MB in the beginning and 170.3MB in the end (delta: -11.2MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,809 INFO L158 Benchmark]: Witness Printer took 117.18ms. Allocated memory is still 237.0MB. Free memory was 170.3MB in the beginning and 161.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:48:21,811 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 98.6MB. Free memory was 52.4MB in the beginning and 52.2MB in the end (delta: 142.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 517.16ms. Allocated memory is still 142.6MB. Free memory was 96.4MB in the beginning and 77.0MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 73.14ms. Allocated memory is still 142.6MB. Free memory was 77.0MB in the beginning and 74.7MB in the end (delta: 2.4MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.07ms. Allocated memory is still 142.6MB. Free memory was 74.7MB in the beginning and 72.9MB in the end (delta: 1.7MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 678.71ms. Allocated memory was 142.6MB in the beginning and 197.1MB in the end (delta: 54.5MB). Free memory was 72.9MB in the beginning and 159.2MB in the end (delta: -86.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 14244.51ms. Allocated memory was 197.1MB in the beginning and 237.0MB in the end (delta: 39.8MB). Free memory was 159.2MB in the beginning and 170.3MB in the end (delta: -11.2MB). Peak memory consumption was 131.5MB. Max. memory is 16.1GB. * Witness Printer took 117.18ms. Allocated memory is still 237.0MB. Free memory was 170.3MB in the beginning and 161.9MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [49] - GenericResultAtLocation [Line: 58]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [58] - GenericResultAtLocation [Line: 96]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [96] - GenericResultAtLocation [Line: 165]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [165] - GenericResultAtLocation [Line: 398]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [398] - GenericResultAtLocation [Line: 502]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [502] - GenericResultAtLocation [Line: 536]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [536] - GenericResultAtLocation [Line: 902]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [902] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2122 SdHoareTripleChecker+Valid, 2.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2081 mSDsluCounter, 4039 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2942 mSDsCounter, 685 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2969 IncrementalHoareTripleChecker+Invalid, 3654 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 685 mSolverCounterUnsat, 1097 mSDtfsCounter, 2969 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 454 GetRequests, 288 SyntacticMatches, 7 SemanticMatches, 159 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1625 ImplicationChecksByTransitivity, 1.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=347occurred in iteration=11, InterpolantAutomatonStates: 147, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 12 MinimizatonAttempts, 156 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 1364 PreInvPairs, 1631 NumberOfFragments, 1736 HoareAnnotationTreeSize, 1364 FomulaSimplifications, 13325 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 47 FomulaSimplificationsInter, 11543 FormulaSimplificationTreeSizeReductionInter, 4.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 663 NumberOfCodeBlocks, 663 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 738 ConstructedInterpolants, 0 QuantifiedInterpolants, 1533 SizeOfPredicates, 4 NumberOfNonLiveVariables, 307 ConjunctsInSsa, 13 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 60/81 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 379]: Loop Invariant Derived loop invariant: ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) && ((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel))) && ((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 288]: Loop Invariant Derived loop invariant: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((1 <= pumpRunning) && (1 <= \result)) && (1 <= tmp))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel))) - InvariantResult [Line: 470]: Loop Invariant Derived loop invariant: (((((((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (\result == 1))) && ((((methaneLevelCritical == 0) || !((1 == systemActive))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && ((((!((1 == systemActive)) || (((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel))) && (\result <= 1)))) - InvariantResult [Line: 87]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 110]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) - InvariantResult [Line: 101]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 80]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 315]: Loop Invariant Derived loop invariant: (((((!((1 == systemActive)) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && !((\result == 0))) && (\old(waterLevel) == waterLevel)) && (tmp == 0))) || !((1 == systemActive))) || (2 < \old(waterLevel)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive)))) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel))) || ((1 <= pumpRunning) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) && ((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)))) && ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (((pumpRunning == 0) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && (waterLevel <= \old(waterLevel)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (2 < \old(waterLevel)))) - InvariantResult [Line: 479]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1)) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 0))) || (((((1 <= \result) && (pumpRunning == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) - InvariantResult [Line: 503]: Loop Invariant Derived loop invariant: ((((((((((((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1)) || (((((pumpRunning == \old(pumpRunning)) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel))) && (((((!((\old(pumpRunning) == 0)) || (((1 <= pumpRunning) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || (2 < \old(waterLevel))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && ((((!((\old(pumpRunning) == 0)) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || !((tmp == 0))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((((((pumpRunning == 0) && (!((methaneLevelCritical == 0)) || (tmp == 0))) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && (\old(waterLevel) == waterLevel)) && (tmp___0 <= 1)) && (\result <= 1))) || ((((((pumpRunning == 0) && (waterLevel <= 1)) && (\old(pumpRunning) == 0)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) && (\old(waterLevel) == waterLevel)))) && (((((((((pumpRunning == 0) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0))) || (methaneLevelCritical == 0)) || !((1 == systemActive))) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && !((methaneLevelCritical == 0))) && !((tmp == 0)))) || (\old(pumpRunning) < 1)) || (2 < \old(waterLevel)))) && ((((1 < \old(waterLevel)) || !((1 == systemActive))) || (waterLevel <= \old(waterLevel))) || (\old(pumpRunning) < 1))) - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: (((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (((pumpRunning == 0) && (1 <= \result)) && (1 <= tmp___0))) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0))) && ((!((1 == systemActive)) || (1 < waterLevel)) || (\old(pumpRunning) < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (1 < waterLevel)) || ((((((((1 <= \result) && (pumpRunning == 0)) && (tmp___0 == 0)) && (waterLevel <= 1)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (1 <= tmp)) && (\result == 0)))) - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:48:21,856 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a4d05445-f850-45fc-8069-52f5d211fe34/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE