./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 76f5874bdc2210da6be360b9991ed804689b1623a0180577df5607e0ad5d02da --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:12:05,768 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:12:05,837 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:12:05,843 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:12:05,844 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:12:05,876 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:12:05,879 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:12:05,880 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:12:05,881 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:12:05,883 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:12:05,885 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:12:05,885 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:12:05,886 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:12:05,891 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:12:05,891 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:12:05,892 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:12:05,893 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:12:05,894 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:12:05,895 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:12:05,895 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:12:05,896 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:12:05,896 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:12:05,897 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:12:05,897 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:12:05,898 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:12:05,899 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:12:05,899 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:12:05,900 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:12:05,900 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:12:05,901 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:12:05,902 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:12:05,903 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:12:05,903 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:12:05,904 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:12:05,904 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:12:05,904 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:12:05,905 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:12:05,905 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:12:05,905 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:12:05,906 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 76f5874bdc2210da6be360b9991ed804689b1623a0180577df5607e0ad5d02da [2023-11-06 23:12:06,203 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:12:06,239 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:12:06,242 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:12:06,244 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:12:06,244 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:12:06,246 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c [2023-11-06 23:12:09,546 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:12:09,807 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:12:09,808 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c [2023-11-06 23:12:09,830 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/data/5c4e4885f/e388208dea3b4f4ca18bb30abea86830/FLAG59ac9b1a0 [2023-11-06 23:12:09,849 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/data/5c4e4885f/e388208dea3b4f4ca18bb30abea86830 [2023-11-06 23:12:09,856 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:12:09,859 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:12:09,863 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:12:09,863 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:12:09,869 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:12:09,870 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:12:09" (1/1) ... [2023-11-06 23:12:09,872 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6b633031 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:09, skipping insertion in model container [2023-11-06 23:12:09,872 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:12:09" (1/1) ... [2023-11-06 23:12:09,945 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:12:10,157 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c[3693,3706] [2023-11-06 23:12:10,251 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:12:10,272 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:12:10,285 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2023-11-06 23:12:10,287 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [101] [2023-11-06 23:12:10,288 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [206] [2023-11-06 23:12:10,288 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [215] [2023-11-06 23:12:10,288 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [250] [2023-11-06 23:12:10,289 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [616] [2023-11-06 23:12:10,289 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] [2023-11-06 23:12:10,290 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] [2023-11-06 23:12:10,318 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/sv-benchmarks/c/product-lines/minepump_spec5_product42.cil.c[3693,3706] [2023-11-06 23:12:10,399 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:12:10,421 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:12:10,422 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10 WrapperNode [2023-11-06 23:12:10,422 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:12:10,423 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:12:10,423 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:12:10,424 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:12:10,432 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,448 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,478 INFO L138 Inliner]: procedures = 56, calls = 99, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 201 [2023-11-06 23:12:10,478 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:12:10,479 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:12:10,479 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:12:10,479 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:12:10,490 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,490 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,493 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,493 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,501 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,506 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,508 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,510 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,513 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:12:10,514 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:12:10,515 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:12:10,515 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:12:10,516 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (1/1) ... [2023-11-06 23:12:10,523 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:12:10,540 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:12:10,554 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:12:10,576 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:12:10,595 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:12:10,596 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:12:10,596 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:12:10,596 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:12:10,596 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:12:10,596 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:12:10,597 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:12:10,597 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:12:10,597 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:12:10,597 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 23:12:10,597 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 23:12:10,597 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:12:10,598 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:12:10,598 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:12:10,598 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:12:10,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:12:10,700 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:12:10,703 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:12:11,065 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:12:11,073 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:12:11,074 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:12:11,076 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:12:11 BoogieIcfgContainer [2023-11-06 23:12:11,076 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:12:11,080 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:12:11,080 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:12:11,084 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:12:11,084 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:12:09" (1/3) ... [2023-11-06 23:12:11,085 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c4684db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:12:11, skipping insertion in model container [2023-11-06 23:12:11,086 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:12:10" (2/3) ... [2023-11-06 23:12:11,086 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c4684db and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:12:11, skipping insertion in model container [2023-11-06 23:12:11,086 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:12:11" (3/3) ... [2023-11-06 23:12:11,088 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product42.cil.c [2023-11-06 23:12:11,111 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:12:11,111 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:12:11,178 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:12:11,187 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6a7405cf, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:12:11,187 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:12:11,193 INFO L276 IsEmpty]: Start isEmpty. Operand has 85 states, 67 states have (on average 1.373134328358209) internal successors, (92), 73 states have internal predecessors, (92), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) [2023-11-06 23:12:11,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 23:12:11,209 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:11,210 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:11,211 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:11,222 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:11,222 INFO L85 PathProgramCache]: Analyzing trace with hash -690410843, now seen corresponding path program 1 times [2023-11-06 23:12:11,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:11,235 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044608273] [2023-11-06 23:12:11,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:11,236 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:11,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 23:12:11,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 23:12:11,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,529 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:11,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:11,530 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044608273] [2023-11-06 23:12:11,531 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044608273] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:11,532 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:11,532 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:12:11,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105035031] [2023-11-06 23:12:11,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:11,540 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:12:11,541 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:11,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:12:11,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:12:11,580 INFO L87 Difference]: Start difference. First operand has 85 states, 67 states have (on average 1.373134328358209) internal successors, (92), 73 states have internal predecessors, (92), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (10), 9 states have call predecessors, (10), 10 states have call successors, (10) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:12:11,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:11,622 INFO L93 Difference]: Finished difference Result 161 states and 218 transitions. [2023-11-06 23:12:11,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:12:11,624 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 23:12:11,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:11,636 INFO L225 Difference]: With dead ends: 161 [2023-11-06 23:12:11,636 INFO L226 Difference]: Without dead ends: 76 [2023-11-06 23:12:11,641 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:12:11,645 INFO L413 NwaCegarLoop]: 106 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:11,647 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:11,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2023-11-06 23:12:11,694 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2023-11-06 23:12:11,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3) internal successors, (78), 65 states have internal predecessors, (78), 10 states have call successors, (10), 6 states have call predecessors, (10), 5 states have return successors, (9), 8 states have call predecessors, (9), 9 states have call successors, (9) [2023-11-06 23:12:11,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2023-11-06 23:12:11,701 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 32 [2023-11-06 23:12:11,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:11,702 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2023-11-06 23:12:11,703 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:12:11,703 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2023-11-06 23:12:11,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 23:12:11,707 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:11,707 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:11,707 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:12:11,708 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:11,708 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:11,709 INFO L85 PathProgramCache]: Analyzing trace with hash 1965939987, now seen corresponding path program 1 times [2023-11-06 23:12:11,709 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:11,709 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1783153721] [2023-11-06 23:12:11,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:11,710 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:11,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:12:11,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 23:12:11,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:11,837 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:11,838 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:11,838 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1783153721] [2023-11-06 23:12:11,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1783153721] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:11,839 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:11,839 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:12:11,839 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696194102] [2023-11-06 23:12:11,840 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:11,841 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:12:11,841 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:11,842 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:12:11,843 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:11,843 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:12:11,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:11,893 INFO L93 Difference]: Finished difference Result 116 states and 148 transitions. [2023-11-06 23:12:11,895 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:12:11,896 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 23:12:11,897 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:11,901 INFO L225 Difference]: With dead ends: 116 [2023-11-06 23:12:11,902 INFO L226 Difference]: Without dead ends: 67 [2023-11-06 23:12:11,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:11,908 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 13 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:11,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 151 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:11,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-06 23:12:11,920 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-06 23:12:11,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 54 states have (on average 1.3148148148148149) internal successors, (71), 59 states have internal predecessors, (71), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-06 23:12:11,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 85 transitions. [2023-11-06 23:12:11,922 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 85 transitions. Word has length 33 [2023-11-06 23:12:11,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:11,923 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 85 transitions. [2023-11-06 23:12:11,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:12:11,923 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 85 transitions. [2023-11-06 23:12:11,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 23:12:11,925 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:11,926 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:11,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:12:11,926 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:11,927 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:11,927 INFO L85 PathProgramCache]: Analyzing trace with hash -1695410136, now seen corresponding path program 1 times [2023-11-06 23:12:11,928 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:11,928 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [294024686] [2023-11-06 23:12:11,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:11,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:11,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:12,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 23:12:12,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,121 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:12,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:12,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [294024686] [2023-11-06 23:12:12,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [294024686] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:12,122 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:12,122 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:12:12,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1577721044] [2023-11-06 23:12:12,123 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:12,123 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:12:12,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:12,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:12:12,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:12:12,131 INFO L87 Difference]: Start difference. First operand 67 states and 85 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:12,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:12,246 INFO L93 Difference]: Finished difference Result 126 states and 163 transitions. [2023-11-06 23:12:12,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 23:12:12,247 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 23:12:12,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:12,249 INFO L225 Difference]: With dead ends: 126 [2023-11-06 23:12:12,249 INFO L226 Difference]: Without dead ends: 67 [2023-11-06 23:12:12,250 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:12:12,251 INFO L413 NwaCegarLoop]: 78 mSDtfsCounter, 108 mSDsluCounter, 122 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:12,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 200 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:12,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 67 states. [2023-11-06 23:12:12,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 67 to 67. [2023-11-06 23:12:12,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 67 states, 54 states have (on average 1.2962962962962963) internal successors, (70), 59 states have internal predecessors, (70), 7 states have call successors, (7), 5 states have call predecessors, (7), 5 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2023-11-06 23:12:12,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 67 states to 67 states and 84 transitions. [2023-11-06 23:12:12,266 INFO L78 Accepts]: Start accepts. Automaton has 67 states and 84 transitions. Word has length 38 [2023-11-06 23:12:12,268 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:12,268 INFO L495 AbstractCegarLoop]: Abstraction has 67 states and 84 transitions. [2023-11-06 23:12:12,268 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:12,269 INFO L276 IsEmpty]: Start isEmpty. Operand 67 states and 84 transitions. [2023-11-06 23:12:12,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2023-11-06 23:12:12,271 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:12,271 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:12,271 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:12:12,272 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:12,272 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:12,272 INFO L85 PathProgramCache]: Analyzing trace with hash 610140587, now seen corresponding path program 1 times [2023-11-06 23:12:12,273 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:12,273 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1194354269] [2023-11-06 23:12:12,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:12,273 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:12,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:12,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 23:12:12,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 23:12:12,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,390 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:12,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:12,391 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1194354269] [2023-11-06 23:12:12,391 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1194354269] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:12,391 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:12,391 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:12:12,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475009089] [2023-11-06 23:12:12,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:12,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:12:12,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:12,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:12:12,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:12,394 INFO L87 Difference]: Start difference. First operand 67 states and 84 transitions. Second operand has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 23:12:12,434 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:12,435 INFO L93 Difference]: Finished difference Result 171 states and 219 transitions. [2023-11-06 23:12:12,435 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:12:12,435 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 43 [2023-11-06 23:12:12,436 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:12,438 INFO L225 Difference]: With dead ends: 171 [2023-11-06 23:12:12,438 INFO L226 Difference]: Without dead ends: 112 [2023-11-06 23:12:12,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:12,441 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 52 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 144 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:12,441 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 144 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:12,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112 states. [2023-11-06 23:12:12,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112 to 110. [2023-11-06 23:12:12,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 87 states have (on average 1.2873563218390804) internal successors, (112), 94 states have internal predecessors, (112), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2023-11-06 23:12:12,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 138 transitions. [2023-11-06 23:12:12,468 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 138 transitions. Word has length 43 [2023-11-06 23:12:12,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:12,468 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 138 transitions. [2023-11-06 23:12:12,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 11.333333333333334) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 23:12:12,469 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 138 transitions. [2023-11-06 23:12:12,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2023-11-06 23:12:12,471 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:12,471 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:12,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:12:12,472 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:12,473 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:12,473 INFO L85 PathProgramCache]: Analyzing trace with hash 1028234707, now seen corresponding path program 1 times [2023-11-06 23:12:12,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:12,474 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [450503028] [2023-11-06 23:12:12,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:12,474 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:12,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,702 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:12,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 23:12:12,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 23:12:12,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:12,749 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:12:12,749 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:12,750 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [450503028] [2023-11-06 23:12:12,750 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [450503028] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:12,750 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:12,750 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:12:12,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1543416382] [2023-11-06 23:12:12,753 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:12,754 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:12:12,755 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:12,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:12:12,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:12:12,757 INFO L87 Difference]: Start difference. First operand 110 states and 138 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 23:12:12,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:12,926 INFO L93 Difference]: Finished difference Result 213 states and 270 transitions. [2023-11-06 23:12:12,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 23:12:12,927 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) Word has length 49 [2023-11-06 23:12:12,928 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:12,931 INFO L225 Difference]: With dead ends: 213 [2023-11-06 23:12:12,934 INFO L226 Difference]: Without dead ends: 111 [2023-11-06 23:12:12,935 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 23:12:12,937 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 35 mSDsluCounter, 275 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 359 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:12,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 359 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:12:12,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2023-11-06 23:12:12,965 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 109. [2023-11-06 23:12:12,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 86 states have (on average 1.2674418604651163) internal successors, (109), 93 states have internal predecessors, (109), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2023-11-06 23:12:12,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 135 transitions. [2023-11-06 23:12:12,968 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 135 transitions. Word has length 49 [2023-11-06 23:12:12,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:12,969 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 135 transitions. [2023-11-06 23:12:12,969 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 1 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 1 states have call successors, (3) [2023-11-06 23:12:12,969 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 135 transitions. [2023-11-06 23:12:12,971 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 23:12:12,971 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:12,971 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:12,972 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 23:12:12,972 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:12,973 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:12,973 INFO L85 PathProgramCache]: Analyzing trace with hash -2048289411, now seen corresponding path program 1 times [2023-11-06 23:12:12,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:12,973 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109904338] [2023-11-06 23:12:12,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:12,974 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:12,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:13,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-06 23:12:13,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,078 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:13,079 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:13,079 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109904338] [2023-11-06 23:12:13,079 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [109904338] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:13,080 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:13,080 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:12:13,080 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1662024905] [2023-11-06 23:12:13,080 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:13,081 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:12:13,081 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:13,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:12:13,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:12:13,083 INFO L87 Difference]: Start difference. First operand 109 states and 135 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,185 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:13,185 INFO L93 Difference]: Finished difference Result 225 states and 286 transitions. [2023-11-06 23:12:13,186 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:12:13,186 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2023-11-06 23:12:13,187 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:13,189 INFO L225 Difference]: With dead ends: 225 [2023-11-06 23:12:13,189 INFO L226 Difference]: Without dead ends: 124 [2023-11-06 23:12:13,190 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:12:13,194 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 13 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:13,199 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 356 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:13,201 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 124 states. [2023-11-06 23:12:13,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 124 to 112. [2023-11-06 23:12:13,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 112 states, 89 states have (on average 1.2584269662921348) internal successors, (112), 96 states have internal predecessors, (112), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2023-11-06 23:12:13,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 112 states to 112 states and 138 transitions. [2023-11-06 23:12:13,238 INFO L78 Accepts]: Start accepts. Automaton has 112 states and 138 transitions. Word has length 51 [2023-11-06 23:12:13,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:13,239 INFO L495 AbstractCegarLoop]: Abstraction has 112 states and 138 transitions. [2023-11-06 23:12:13,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,239 INFO L276 IsEmpty]: Start isEmpty. Operand 112 states and 138 transitions. [2023-11-06 23:12:13,243 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 23:12:13,243 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:13,243 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:13,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 23:12:13,244 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:13,244 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:13,244 INFO L85 PathProgramCache]: Analyzing trace with hash -1625587585, now seen corresponding path program 1 times [2023-11-06 23:12:13,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:13,245 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932930606] [2023-11-06 23:12:13,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:13,245 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:13,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:13,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-06 23:12:13,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,400 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:13,400 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:13,400 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932930606] [2023-11-06 23:12:13,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [932930606] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:13,401 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:13,401 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 23:12:13,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828492815] [2023-11-06 23:12:13,403 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:13,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 23:12:13,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:13,406 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 23:12:13,407 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 23:12:13,409 INFO L87 Difference]: Start difference. First operand 112 states and 138 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:13,454 INFO L93 Difference]: Finished difference Result 232 states and 293 transitions. [2023-11-06 23:12:13,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-06 23:12:13,455 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2023-11-06 23:12:13,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:13,461 INFO L225 Difference]: With dead ends: 232 [2023-11-06 23:12:13,461 INFO L226 Difference]: Without dead ends: 128 [2023-11-06 23:12:13,462 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:12:13,466 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 16 mSDsluCounter, 174 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:13,467 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 269 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:13,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2023-11-06 23:12:13,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 114. [2023-11-06 23:12:13,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 91 states have (on average 1.2527472527472527) internal successors, (114), 98 states have internal predecessors, (114), 12 states have call successors, (12), 10 states have call predecessors, (12), 10 states have return successors, (14), 12 states have call predecessors, (14), 12 states have call successors, (14) [2023-11-06 23:12:13,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 140 transitions. [2023-11-06 23:12:13,494 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 140 transitions. Word has length 51 [2023-11-06 23:12:13,494 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:13,495 INFO L495 AbstractCegarLoop]: Abstraction has 114 states and 140 transitions. [2023-11-06 23:12:13,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,495 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 140 transitions. [2023-11-06 23:12:13,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2023-11-06 23:12:13,496 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:13,496 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:13,497 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 23:12:13,497 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:13,497 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:13,498 INFO L85 PathProgramCache]: Analyzing trace with hash 863941377, now seen corresponding path program 1 times [2023-11-06 23:12:13,498 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:13,498 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1089899289] [2023-11-06 23:12:13,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:13,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:13,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:12:13,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2023-11-06 23:12:13,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,604 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:13,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:13,606 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1089899289] [2023-11-06 23:12:13,606 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1089899289] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:13,606 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:13,606 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:12:13,607 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [742636405] [2023-11-06 23:12:13,607 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:13,612 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:12:13,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:13,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:12:13,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:13,614 INFO L87 Difference]: Start difference. First operand 114 states and 140 transitions. Second operand has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:13,663 INFO L93 Difference]: Finished difference Result 266 states and 331 transitions. [2023-11-06 23:12:13,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:12:13,664 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 51 [2023-11-06 23:12:13,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:13,674 INFO L225 Difference]: With dead ends: 266 [2023-11-06 23:12:13,674 INFO L226 Difference]: Without dead ends: 160 [2023-11-06 23:12:13,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:12:13,677 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 35 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 11 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:13,677 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 153 Invalid, 11 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:12:13,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2023-11-06 23:12:13,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 160. [2023-11-06 23:12:13,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 127 states have (on average 1.2283464566929134) internal successors, (156), 135 states have internal predecessors, (156), 18 states have call successors, (18), 15 states have call predecessors, (18), 14 states have return successors, (20), 17 states have call predecessors, (20), 18 states have call successors, (20) [2023-11-06 23:12:13,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 194 transitions. [2023-11-06 23:12:13,714 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 194 transitions. Word has length 51 [2023-11-06 23:12:13,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:13,715 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 194 transitions. [2023-11-06 23:12:13,715 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 14.666666666666666) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:12:13,716 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 194 transitions. [2023-11-06 23:12:13,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2023-11-06 23:12:13,718 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:13,719 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:13,720 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 23:12:13,720 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:13,721 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:13,721 INFO L85 PathProgramCache]: Analyzing trace with hash 159207591, now seen corresponding path program 1 times [2023-11-06 23:12:13,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:13,721 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [392607137] [2023-11-06 23:12:13,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:13,722 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:13,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:13,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:12:13,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:12:14,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2023-11-06 23:12:14,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,084 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:12:14,085 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:14,085 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [392607137] [2023-11-06 23:12:14,085 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [392607137] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:12:14,085 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:12:14,086 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 23:12:14,086 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [108045811] [2023-11-06 23:12:14,086 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:12:14,087 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 23:12:14,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:14,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 23:12:14,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:12:14,089 INFO L87 Difference]: Start difference. First operand 160 states and 194 transitions. Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 23:12:14,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:14,521 INFO L93 Difference]: Finished difference Result 524 states and 658 transitions. [2023-11-06 23:12:14,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2023-11-06 23:12:14,522 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 55 [2023-11-06 23:12:14,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:14,527 INFO L225 Difference]: With dead ends: 524 [2023-11-06 23:12:14,527 INFO L226 Difference]: Without dead ends: 418 [2023-11-06 23:12:14,528 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=154, Unknown=0, NotChecked=0, Total=210 [2023-11-06 23:12:14,530 INFO L413 NwaCegarLoop]: 110 mSDtfsCounter, 236 mSDsluCounter, 410 mSDsCounter, 0 mSdLazyCounter, 193 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 520 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 193 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:14,530 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [245 Valid, 520 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 193 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:12:14,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 418 states. [2023-11-06 23:12:14,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 418 to 400. [2023-11-06 23:12:14,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 400 states, 319 states have (on average 1.2163009404388714) internal successors, (388), 341 states have internal predecessors, (388), 44 states have call successors, (44), 33 states have call predecessors, (44), 36 states have return successors, (54), 42 states have call predecessors, (54), 44 states have call successors, (54) [2023-11-06 23:12:14,615 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 400 states to 400 states and 486 transitions. [2023-11-06 23:12:14,616 INFO L78 Accepts]: Start accepts. Automaton has 400 states and 486 transitions. Word has length 55 [2023-11-06 23:12:14,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:14,616 INFO L495 AbstractCegarLoop]: Abstraction has 400 states and 486 transitions. [2023-11-06 23:12:14,617 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.75) internal successors, (46), 7 states have internal predecessors, (46), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 23:12:14,617 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 486 transitions. [2023-11-06 23:12:14,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2023-11-06 23:12:14,619 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:12:14,619 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:14,620 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 23:12:14,620 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:12:14,620 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:12:14,621 INFO L85 PathProgramCache]: Analyzing trace with hash -2045084638, now seen corresponding path program 1 times [2023-11-06 23:12:14,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:12:14,621 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112491253] [2023-11-06 23:12:14,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:14,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:12:14,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:12:14,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 23:12:14,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 23:12:14,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-06 23:12:14,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2023-11-06 23:12:14,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2023-11-06 23:12:14,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:14,925 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 18 proven. 7 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-06 23:12:14,926 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:12:14,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112491253] [2023-11-06 23:12:14,926 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112491253] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:12:14,926 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1905792810] [2023-11-06 23:12:14,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:12:14,927 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:12:14,927 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:12:14,931 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:12:14,963 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 23:12:15,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:12:15,067 INFO L262 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 23:12:15,081 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:12:15,279 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 23 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:12:15,279 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 23:12:15,527 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 19 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2023-11-06 23:12:15,528 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1905792810] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 23:12:15,528 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 23:12:15,528 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-06 23:12:15,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1741243969] [2023-11-06 23:12:15,529 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 23:12:15,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-06 23:12:15,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:12:15,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-06 23:12:15,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2023-11-06 23:12:15,532 INFO L87 Difference]: Start difference. First operand 400 states and 486 transitions. Second operand has 15 states, 15 states have (on average 7.2) internal successors, (108), 11 states have internal predecessors, (108), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-06 23:12:16,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:12:16,387 INFO L93 Difference]: Finished difference Result 638 states and 800 transitions. [2023-11-06 23:12:16,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2023-11-06 23:12:16,388 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 7.2) internal successors, (108), 11 states have internal predecessors, (108), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) Word has length 87 [2023-11-06 23:12:16,390 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:12:16,390 INFO L225 Difference]: With dead ends: 638 [2023-11-06 23:12:16,390 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:12:16,394 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 186 SyntacticMatches, 4 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 166 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=176, Invalid=754, Unknown=0, NotChecked=0, Total=930 [2023-11-06 23:12:16,394 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 269 mSDsluCounter, 983 mSDsCounter, 0 mSdLazyCounter, 640 mSolverCounterSat, 81 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 270 SdHoareTripleChecker+Valid, 1116 SdHoareTripleChecker+Invalid, 721 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 81 IncrementalHoareTripleChecker+Valid, 640 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 23:12:16,396 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [270 Valid, 1116 Invalid, 721 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [81 Valid, 640 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 23:12:16,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:12:16,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:12:16,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:12:16,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:12:16,399 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 87 [2023-11-06 23:12:16,400 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:12:16,400 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:12:16,400 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 7.2) internal successors, (108), 11 states have internal predecessors, (108), 5 states have call successors, (16), 6 states have call predecessors, (16), 6 states have return successors, (13), 7 states have call predecessors, (13), 5 states have call successors, (13) [2023-11-06 23:12:16,400 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:12:16,401 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:12:16,404 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:12:16,417 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 23:12:16,611 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 23:12:16,614 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:12:19,864 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 815 821) no Hoare annotation was computed. [2023-11-06 23:12:19,864 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 815 821) the Hoare annotation is: true [2023-11-06 23:12:19,864 INFO L899 garLoopResultBuilder]: For program point L651-1(lines 647 658) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 647 658) the Hoare annotation is: true [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 647 658) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 710) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point L795(lines 795 801) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point L795-2(lines 791 813) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-11-06 23:12:19,865 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 788 814) no Hoare annotation was computed. [2023-11-06 23:12:19,866 INFO L895 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |timeShift_processEnvironment_~tmp~6#1| 0)) (.cse3 (not .cse5))) (and (or .cse0 (and .cse1 (= 2 ~waterLevel~0) .cse2 .cse3) .cse4 .cse5) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse6 .cse5) (or .cse4 .cse6 .cse5) (or .cse0 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse3) (not (= |old(~waterLevel~0)| 1)) .cse5)))) [2023-11-06 23:12:19,866 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 700 713) the Hoare annotation is: (let ((.cse3 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= |timeShift_isHighWaterSensorDry_#res#1| 1) .cse1 (= ~waterLevel~0 1)) .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse2) (or .cse4 .cse3 .cse2) (or .cse0 (and .cse1 (= 2 ~waterLevel~0)) .cse4 .cse2))) [2023-11-06 23:12:19,867 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 691 699) the Hoare annotation is: (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse0 (<= 1 ~pumpRunning~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 .cse1) .cse2 .cse3) (or .cse4 .cse2 .cse3 (and .cse0 .cse5 .cse1)) (let ((.cse8 (= 2 ~waterLevel~0)) (.cse9 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse6 (and .cse7 .cse8 .cse9) .cse4 .cse3 (and .cse0 .cse8 .cse9))) (or .cse6 (not (= |old(~waterLevel~0)| 1)) (and .cse7 .cse5) .cse3))) [2023-11-06 23:12:19,867 INFO L899 garLoopResultBuilder]: For program point L627(lines 627 631) no Hoare annotation was computed. [2023-11-06 23:12:19,867 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= ~waterLevel~0 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse3 .cse4) .cse5 .cse2) (or .cse1 .cse5 .cse2 (and .cse3 .cse6 .cse4)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and (= ~pumpRunning~0 0) .cse6) .cse2))) [2023-11-06 23:12:19,867 INFO L895 garLoopResultBuilder]: At program point L627-2(lines 623 634) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse3 .cse4) .cse5 .cse2) (or .cse1 .cse5 .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 23:12:19,867 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2023-11-06 23:12:19,868 INFO L895 garLoopResultBuilder]: At program point L842(line 842) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse5 (< |old(~pumpRunning~0)| 1)) (.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse3 .cse4) .cse5 .cse2) (or .cse1 .cse5 .cse2 (and .cse3 (= ~waterLevel~0 1) .cse4)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 23:12:19,868 INFO L895 garLoopResultBuilder]: At program point L842-1(lines 823 847) the Hoare annotation is: (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse5 (= ~waterLevel~0 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 .cse1) .cse2 .cse3) (or .cse4 .cse2 .cse3 (and .cse0 .cse5 .cse1)) (let ((.cse7 (= 2 ~waterLevel~0))) (or .cse6 (and .cse0 .cse7) (and .cse8 .cse7) .cse4 .cse3)) (or .cse6 (not (= |old(~waterLevel~0)| 1)) (and .cse8 .cse5) .cse3))) [2023-11-06 23:12:19,868 INFO L899 garLoopResultBuilder]: For program point L211(line 211) no Hoare annotation was computed. [2023-11-06 23:12:19,868 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__highWaterSensor_returnLabel#1(lines 848 855) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 23:12:19,869 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 207 214) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse2) (or .cse1 .cse3 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2))) [2023-11-06 23:12:19,869 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 788 814) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse4 .cse3 (and .cse5 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse0 .cse6 .cse1) .cse7 .cse3) (or (and .cse5 .cse6 .cse1) .cse7 .cse4 .cse3))) [2023-11-06 23:12:19,869 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= 2 ~waterLevel~0)) (.cse1 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse7 (not (= |old(~waterLevel~0)| 2))) (.cse4 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 .cse1 (= ~waterLevel~0 1)) .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse4 .cse3 (and .cse5 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse2 (and .cse0 .cse6 .cse1) .cse7 .cse3) (or (and .cse5 .cse6 .cse1) .cse7 .cse4 .cse3))) [2023-11-06 23:12:19,869 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-11-06 23:12:19,869 INFO L899 garLoopResultBuilder]: For program point L802-1(lines 802 808) no Hoare annotation was computed. [2023-11-06 23:12:19,870 INFO L899 garLoopResultBuilder]: For program point L864(lines 864 870) no Hoare annotation was computed. [2023-11-06 23:12:19,870 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 839) no Hoare annotation was computed. [2023-11-06 23:12:19,870 INFO L895 garLoopResultBuilder]: At program point L864-2(lines 857 873) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1) (or .cse2 .cse0 .cse1) (let ((.cse4 (= 2 ~waterLevel~0))) (or .cse3 (and (<= 1 ~pumpRunning~0) .cse4) (and (= ~pumpRunning~0 0) .cse4) .cse2 .cse1)) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:12:19,870 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 938 956) the Hoare annotation is: (let ((.cse3 (< |old(~pumpRunning~0)| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse1 (= |timeShift_isHighWaterLevel_~tmp___0~2#1| 0) (= |timeShift_isHighWaterLevel_#res#1| 0) (= ~waterLevel~0 1)) .cse2) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse2) (or .cse4 .cse3 .cse2) (or .cse0 (and .cse1 (= 2 ~waterLevel~0)) .cse4 .cse2))) [2023-11-06 23:12:19,870 INFO L899 garLoopResultBuilder]: For program point L827(lines 827 844) no Hoare annotation was computed. [2023-11-06 23:12:19,870 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2023-11-06 23:12:19,870 INFO L899 garLoopResultBuilder]: For program point L947(lines 947 951) no Hoare annotation was computed. [2023-11-06 23:12:19,871 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 62 71) the Hoare annotation is: (let ((.cse2 (< |old(~pumpRunning~0)| 1)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse5 (= 2 ~waterLevel~0)) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse2 .cse3) (or .cse4 .cse2 (and .cse0 .cse5 .cse1) .cse3) (or .cse6 (and .cse7 .cse5) .cse4 .cse3) (or .cse6 (not (= |old(~waterLevel~0)| 1)) (and .cse7 (= ~waterLevel~0 1)) .cse3))) [2023-11-06 23:12:19,871 INFO L899 garLoopResultBuilder]: For program point L947-2(lines 947 951) no Hoare annotation was computed. [2023-11-06 23:12:19,871 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2023-11-06 23:12:19,871 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse6 (not (= |old(~waterLevel~0)| 2))) (.cse9 (< |old(~pumpRunning~0)| 1)) (.cse1 (<= 1 ~pumpRunning~0)) (.cse8 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse10 (= ~waterLevel~0 1)) (.cse7 (= 0 ~systemActive~0))) (and (let ((.cse2 (= 2 ~waterLevel~0)) (.cse3 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse4 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2))) (or .cse0 (and .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse2 .cse3 .cse4) .cse6 .cse7)) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse1 .cse8) .cse9 .cse7) (or .cse6 .cse9 .cse7 (and .cse1 .cse10 .cse8)) (or .cse0 (not (= |old(~waterLevel~0)| 1)) (and .cse5 .cse10) .cse7))) [2023-11-06 23:12:19,871 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 659 667) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1) (or .cse2 .cse0 .cse1) (or .cse3 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) .cse2 .cse1) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:12:19,871 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 788 814) no Hoare annotation was computed. [2023-11-06 23:12:19,872 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 882 892) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1) (or .cse2 .cse0 .cse1) (or .cse3 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) .cse2 .cse1) (or .cse3 (not (= |old(~waterLevel~0)| 1)) .cse1))) [2023-11-06 23:12:19,872 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 211) no Hoare annotation was computed. [2023-11-06 23:12:19,872 INFO L902 garLoopResultBuilder]: At program point L129(lines 104 133) the Hoare annotation is: true [2023-11-06 23:12:19,872 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 104 133) no Hoare annotation was computed. [2023-11-06 23:12:19,872 INFO L899 garLoopResultBuilder]: For program point L125(line 125) no Hoare annotation was computed. [2023-11-06 23:12:19,872 INFO L899 garLoopResultBuilder]: For program point L118(lines 118 122) no Hoare annotation was computed. [2023-11-06 23:12:19,872 INFO L902 garLoopResultBuilder]: At program point L118-1(lines 118 122) the Hoare annotation is: true [2023-11-06 23:12:19,872 INFO L899 garLoopResultBuilder]: For program point L115(line 115) no Hoare annotation was computed. [2023-11-06 23:12:19,873 INFO L902 garLoopResultBuilder]: At program point L114-2(lines 114 128) the Hoare annotation is: true [2023-11-06 23:12:19,873 INFO L902 garLoopResultBuilder]: At program point L110(line 110) the Hoare annotation is: true [2023-11-06 23:12:19,873 INFO L899 garLoopResultBuilder]: For program point L110-1(line 110) no Hoare annotation was computed. [2023-11-06 23:12:19,873 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 104 133) the Hoare annotation is: true [2023-11-06 23:12:19,873 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 957 964) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2023-11-06 23:12:19,873 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 169 179) the Hoare annotation is: true [2023-11-06 23:12:19,873 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 752) no Hoare annotation was computed. [2023-11-06 23:12:19,873 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 227 233) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:12:19,874 INFO L899 garLoopResultBuilder]: For program point L746-1(lines 746 752) no Hoare annotation was computed. [2023-11-06 23:12:19,874 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 183 205) the Hoare annotation is: true [2023-11-06 23:12:19,874 INFO L895 garLoopResultBuilder]: At program point L771(lines 726 773) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2023-11-06 23:12:19,874 INFO L895 garLoopResultBuilder]: At program point L738(line 738) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2023-11-06 23:12:19,874 INFO L899 garLoopResultBuilder]: For program point L193(lines 193 200) no Hoare annotation was computed. [2023-11-06 23:12:19,874 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:12:19,874 INFO L899 garLoopResultBuilder]: For program point L193-2(lines 193 200) no Hoare annotation was computed. [2023-11-06 23:12:19,874 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:12:19,875 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 161 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:12:19,875 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:12:19,875 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 768) no Hoare annotation was computed. [2023-11-06 23:12:19,875 INFO L895 garLoopResultBuilder]: At program point L764-2(lines 756 769) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2023-11-06 23:12:19,875 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~1#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:12:19,875 INFO L899 garLoopResultBuilder]: For program point L727(lines 726 773) no Hoare annotation was computed. [2023-11-06 23:12:19,877 INFO L899 garLoopResultBuilder]: For program point L756(lines 756 769) no Hoare annotation was computed. [2023-11-06 23:12:19,877 INFO L895 garLoopResultBuilder]: At program point L748(line 748) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~1#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (= ~waterLevel~0 1) .cse5) (and .cse6 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5))) [2023-11-06 23:12:19,877 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:12:19,878 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 234 240) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:12:19,878 INFO L902 garLoopResultBuilder]: At program point L777(lines 716 781) the Hoare annotation is: true [2023-11-06 23:12:19,878 INFO L899 garLoopResultBuilder]: For program point L736(lines 736 742) no Hoare annotation was computed. [2023-11-06 23:12:19,878 INFO L899 garLoopResultBuilder]: For program point L736-1(lines 736 742) no Hoare annotation was computed. [2023-11-06 23:12:19,878 INFO L899 garLoopResultBuilder]: For program point L728(lines 728 732) no Hoare annotation was computed. [2023-11-06 23:12:19,879 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 241 249) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:12:19,879 INFO L895 garLoopResultBuilder]: At program point L774(lines 725 775) the Hoare annotation is: false [2023-11-06 23:12:19,879 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 635 646) no Hoare annotation was computed. [2023-11-06 23:12:19,879 INFO L899 garLoopResultBuilder]: For program point L639-1(lines 635 646) no Hoare annotation was computed. [2023-11-06 23:12:19,879 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 635 646) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse2 (= 2 ~waterLevel~0)) (.cse3 (not (= |old(~waterLevel~0)| 2))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) (or .cse0 .cse2 .cse3 .cse1) (or .cse4 .cse2 .cse3 .cse1) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1)))) [2023-11-06 23:12:19,879 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 893 901) no Hoare annotation was computed. [2023-11-06 23:12:19,880 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 893 901) no Hoare annotation was computed. [2023-11-06 23:12:19,880 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 893 901) the Hoare annotation is: true [2023-11-06 23:12:19,882 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:12:19,885 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:12:19,923 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:12:19 BoogieIcfgContainer [2023-11-06 23:12:19,923 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:12:19,924 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:12:19,924 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:12:19,924 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:12:19,925 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:12:11" (3/4) ... [2023-11-06 23:12:19,927 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:12:19,931 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:12:19,931 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:12:19,932 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:12:19,932 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:12:19,932 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:12:19,932 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 23:12:19,941 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 23:12:19,942 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:12:19,943 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:12:19,943 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:12:19,944 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:12:19,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:19,973 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:19,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:19,974 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) [2023-11-06 23:12:19,975 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,976 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,976 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) [2023-11-06 23:12:19,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,977 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,978 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((\result == 1) && (pumpRunning == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-06 23:12:19,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-06 23:12:19,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,979 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:19,980 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,013 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:20,014 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:20,014 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:12:20,014 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) [2023-11-06 23:12:20,015 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,015 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,015 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,015 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) [2023-11-06 23:12:20,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((\result == 1) && (pumpRunning == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-06 23:12:20,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) [2023-11-06 23:12:20,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) [2023-11-06 23:12:20,038 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:12:20,039 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:12:20,039 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:12:20,040 INFO L158 Benchmark]: Toolchain (without parser) took 10180.89ms. Allocated memory was 180.4MB in the beginning and 283.1MB in the end (delta: 102.8MB). Free memory was 134.1MB in the beginning and 104.9MB in the end (delta: 29.1MB). Peak memory consumption was 133.9MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,040 INFO L158 Benchmark]: CDTParser took 0.32ms. Allocated memory is still 125.8MB. Free memory is still 78.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:12:20,041 INFO L158 Benchmark]: CACSL2BoogieTranslator took 559.36ms. Allocated memory is still 180.4MB. Free memory was 134.1MB in the beginning and 114.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,041 INFO L158 Benchmark]: Boogie Procedure Inliner took 55.20ms. Allocated memory is still 180.4MB. Free memory was 114.7MB in the beginning and 112.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,041 INFO L158 Benchmark]: Boogie Preprocessor took 34.65ms. Allocated memory is still 180.4MB. Free memory was 112.6MB in the beginning and 111.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,042 INFO L158 Benchmark]: RCFGBuilder took 562.26ms. Allocated memory is still 180.4MB. Free memory was 111.0MB in the beginning and 94.7MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,043 INFO L158 Benchmark]: TraceAbstraction took 8843.85ms. Allocated memory was 180.4MB in the beginning and 283.1MB in the end (delta: 102.8MB). Free memory was 94.2MB in the beginning and 113.3MB in the end (delta: -19.1MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,043 INFO L158 Benchmark]: Witness Printer took 115.13ms. Allocated memory is still 283.1MB. Free memory was 112.3MB in the beginning and 104.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 23:12:20,047 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.32ms. Allocated memory is still 125.8MB. Free memory is still 78.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 559.36ms. Allocated memory is still 180.4MB. Free memory was 134.1MB in the beginning and 114.7MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 55.20ms. Allocated memory is still 180.4MB. Free memory was 114.7MB in the beginning and 112.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.65ms. Allocated memory is still 180.4MB. Free memory was 112.6MB in the beginning and 111.0MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 562.26ms. Allocated memory is still 180.4MB. Free memory was 111.0MB in the beginning and 94.7MB in the end (delta: 16.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 8843.85ms. Allocated memory was 180.4MB in the beginning and 283.1MB in the end (delta: 102.8MB). Free memory was 94.2MB in the beginning and 113.3MB in the end (delta: -19.1MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. * Witness Printer took 115.13ms. Allocated memory is still 283.1MB. Free memory was 112.3MB in the beginning and 104.9MB in the end (delta: 7.3MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [101] - GenericResultAtLocation [Line: 206]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [206] - GenericResultAtLocation [Line: 215]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [215] - GenericResultAtLocation [Line: 250]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [250] - GenericResultAtLocation [Line: 616]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [616] - GenericResultAtLocation [Line: 714]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [714] - GenericResultAtLocation [Line: 782]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [782] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 211]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 7 procedures, 85 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.7s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 2.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 795 SdHoareTripleChecker+Valid, 0.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 777 mSDsluCounter, 3374 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2418 mSDsCounter, 154 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 939 IncrementalHoareTripleChecker+Invalid, 1093 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 154 mSolverCounterUnsat, 956 mSDtfsCounter, 939 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 317 GetRequests, 248 SyntacticMatches, 4 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 187 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=400occurred in iteration=9, InterpolantAutomatonStates: 70, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 48 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 685 PreInvPairs, 798 NumberOfFragments, 1731 HoareAnnotationTreeSize, 685 FomulaSimplifications, 730 FormulaSimplificationTreeSizeReduction, 0.1s HoareSimplificationTime, 40 FomulaSimplificationsInter, 2549 FormulaSimplificationTreeSizeReductionInter, 3.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 577 NumberOfCodeBlocks, 577 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 652 ConstructedInterpolants, 0 QuantifiedInterpolants, 1279 SizeOfPredicates, 3 NumberOfNonLiveVariables, 312 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 97/117 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 857]: Loop Invariant Derived loop invariant: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 161]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 659]: Loop Invariant Derived loop invariant: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 882]: Loop Invariant Derived loop invariant: ((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 114]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 823]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) - InvariantResult [Line: 207]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 691]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) - InvariantResult [Line: 241]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 848]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((1 <= pumpRunning) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) - InvariantResult [Line: 716]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (((\result == 1) && (pumpRunning == 0)) && (waterLevel == 1))) || (0 == systemActive)) && (((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || (((1 <= pumpRunning) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (((1 <= pumpRunning) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (2 == waterLevel))) || !((\old(waterLevel) == 2))) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || ((pumpRunning == 0) && (waterLevel == 1))) || (0 == systemActive))) - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 726]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) - InvariantResult [Line: 623]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || (0 == systemActive)) && ((((\old(switchedOnBeforeTS) < 1) || ((1 <= pumpRunning) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((1 <= pumpRunning) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || (0 == systemActive))) RESULT: Ultimate proved your program to be correct! [2023-11-06 23:12:20,122 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_47d7eb04-9b6e-409a-8a65-5be09ac2c29e/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE