./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4074665f53184e0f9778b3e4e6ee9c58d8a047121518f9c126ceccd876afea36 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:00:49,225 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:00:49,334 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:00:49,341 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:00:49,341 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:00:49,370 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:00:49,371 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:00:49,372 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:00:49,373 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:00:49,373 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:00:49,374 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:00:49,375 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:00:49,376 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:00:49,376 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:00:49,377 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:00:49,378 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:00:49,378 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:00:49,379 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:00:49,379 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:00:49,380 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:00:49,381 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:00:49,381 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:00:49,382 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:00:49,383 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:00:49,383 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:00:49,384 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:00:49,385 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:00:49,385 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:00:49,386 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:00:49,387 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:00:49,387 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:00:49,388 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:00:49,388 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:00:49,389 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:00:49,389 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:00:49,390 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:00:49,390 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:00:49,391 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:00:49,391 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:00:49,392 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4074665f53184e0f9778b3e4e6ee9c58d8a047121518f9c126ceccd876afea36 [2023-11-06 22:00:49,772 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:00:49,797 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:00:49,800 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:00:49,802 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:00:49,803 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:00:49,805 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c [2023-11-06 22:00:53,040 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:00:53,372 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:00:53,372 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c [2023-11-06 22:00:53,402 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/data/c01d0518b/252e4f612a764dfcaf68359406638015/FLAGcf14c0019 [2023-11-06 22:00:53,418 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/data/c01d0518b/252e4f612a764dfcaf68359406638015 [2023-11-06 22:00:53,421 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:00:53,423 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:00:53,424 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:00:53,425 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:00:53,437 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:00:53,438 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:00:53" (1/1) ... [2023-11-06 22:00:53,439 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@19f3993f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:53, skipping insertion in model container [2023-11-06 22:00:53,439 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:00:53" (1/1) ... [2023-11-06 22:00:53,587 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:00:53,853 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2023-11-06 22:00:53,932 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:00:53,952 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:00:53,963 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-06 22:00:53,965 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] [2023-11-06 22:00:53,965 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [521] [2023-11-06 22:00:53,965 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [530] [2023-11-06 22:00:53,966 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [581] [2023-11-06 22:00:53,966 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] [2023-11-06 22:00:53,966 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [760] [2023-11-06 22:00:53,967 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] [2023-11-06 22:00:54,050 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/sv-benchmarks/c/product-lines/minepump_spec5_product52.cil.c[12672,12685] [2023-11-06 22:00:54,067 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:00:54,088 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:00:54,088 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54 WrapperNode [2023-11-06 22:00:54,089 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:00:54,090 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:00:54,090 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:00:54,090 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:00:54,098 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,115 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,169 INFO L138 Inliner]: procedures = 59, calls = 104, calls flagged for inlining = 26, calls inlined = 22, statements flattened = 215 [2023-11-06 22:00:54,176 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:00:54,177 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:00:54,177 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:00:54,177 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:00:54,188 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,191 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,194 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,197 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,208 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,223 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,225 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,227 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,230 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:00:54,231 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:00:54,231 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:00:54,231 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:00:54,232 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (1/1) ... [2023-11-06 22:00:54,240 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:00:54,262 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:00:54,275 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:00:54,280 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:00:54,315 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:00:54,315 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:00:54,315 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:00:54,315 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:00:54,316 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:00:54,316 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:00:54,316 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:00:54,316 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:00:54,316 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:00:54,317 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:00:54,317 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:00:54,317 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 22:00:54,317 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 22:00:54,318 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:00:54,318 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:00:54,318 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:00:54,318 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:00:54,318 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:00:54,319 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:00:54,319 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:00:54,408 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:00:54,410 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:00:54,734 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:00:54,743 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:00:54,744 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:00:54,746 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:00:54 BoogieIcfgContainer [2023-11-06 22:00:54,747 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:00:54,749 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:00:54,750 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:00:54,754 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:00:54,759 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:00:53" (1/3) ... [2023-11-06 22:00:54,760 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5aa289d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:00:54, skipping insertion in model container [2023-11-06 22:00:54,761 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:00:54" (2/3) ... [2023-11-06 22:00:54,761 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5aa289d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:00:54, skipping insertion in model container [2023-11-06 22:00:54,761 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:00:54" (3/3) ... [2023-11-06 22:00:54,763 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product52.cil.c [2023-11-06 22:00:54,787 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:00:54,787 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:00:54,859 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:00:54,867 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4d426ade, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:00:54,867 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:00:54,874 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:00:54,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:00:54,890 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:54,891 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:54,892 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:54,897 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:54,897 INFO L85 PathProgramCache]: Analyzing trace with hash 1209028345, now seen corresponding path program 1 times [2023-11-06 22:00:54,906 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:54,907 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260708439] [2023-11-06 22:00:54,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:54,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:55,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 22:00:55,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:00:55,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,232 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:55,232 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:55,239 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260708439] [2023-11-06 22:00:55,240 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260708439] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:55,241 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:55,241 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:00:55,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [433475171] [2023-11-06 22:00:55,244 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:55,249 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:00:55,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:55,305 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:00:55,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:00:55,311 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.368421052631579) internal successors, (104), 85 states have internal predecessors, (104), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:55,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:55,385 INFO L93 Difference]: Finished difference Result 191 states and 258 transitions. [2023-11-06 22:00:55,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:00:55,388 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 22:00:55,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:55,400 INFO L225 Difference]: With dead ends: 191 [2023-11-06 22:00:55,400 INFO L226 Difference]: Without dead ends: 91 [2023-11-06 22:00:55,405 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:00:55,410 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:55,411 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:00:55,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2023-11-06 22:00:55,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2023-11-06 22:00:55,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.3043478260869565) internal successors, (90), 77 states have internal predecessors, (90), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:00:55,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 117 transitions. [2023-11-06 22:00:55,468 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 117 transitions. Word has length 32 [2023-11-06 22:00:55,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:55,468 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 117 transitions. [2023-11-06 22:00:55,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:55,469 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 117 transitions. [2023-11-06 22:00:55,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 22:00:55,474 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:55,474 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:55,474 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:00:55,475 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:55,476 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:55,476 INFO L85 PathProgramCache]: Analyzing trace with hash 819571873, now seen corresponding path program 1 times [2023-11-06 22:00:55,476 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:55,477 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567015153] [2023-11-06 22:00:55,477 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:55,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:55,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:00:55,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:00:55,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:55,682 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:55,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:55,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567015153] [2023-11-06 22:00:55,683 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567015153] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:55,683 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:55,683 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:00:55,684 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279656044] [2023-11-06 22:00:55,684 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:55,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:00:55,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:55,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:00:55,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:00:55,688 INFO L87 Difference]: Start difference. First operand 91 states and 117 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:55,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:55,738 INFO L93 Difference]: Finished difference Result 142 states and 182 transitions. [2023-11-06 22:00:55,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:00:55,739 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 22:00:55,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:55,741 INFO L225 Difference]: With dead ends: 142 [2023-11-06 22:00:55,741 INFO L226 Difference]: Without dead ends: 82 [2023-11-06 22:00:55,743 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:00:55,745 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 17 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 186 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:55,745 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 186 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:00:55,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2023-11-06 22:00:55,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2023-11-06 22:00:55,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 71 states have internal predecessors, (83), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:00:55,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 105 transitions. [2023-11-06 22:00:55,763 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 105 transitions. Word has length 33 [2023-11-06 22:00:55,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:55,763 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 105 transitions. [2023-11-06 22:00:55,763 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:55,764 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 105 transitions. [2023-11-06 22:00:55,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 22:00:55,766 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:55,766 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:55,766 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:00:55,767 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:55,767 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:55,768 INFO L85 PathProgramCache]: Analyzing trace with hash -1285533544, now seen corresponding path program 1 times [2023-11-06 22:00:55,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:55,768 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [463807452] [2023-11-06 22:00:55,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:55,769 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:55,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:00:56,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:00:56,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,068 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:56,069 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:56,069 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [463807452] [2023-11-06 22:00:56,070 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [463807452] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:56,070 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:56,070 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:00:56,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [181773635] [2023-11-06 22:00:56,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:56,072 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:00:56,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:56,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:00:56,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:00:56,074 INFO L87 Difference]: Start difference. First operand 82 states and 105 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:00:56,194 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:56,195 INFO L93 Difference]: Finished difference Result 203 states and 264 transitions. [2023-11-06 22:00:56,195 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:00:56,196 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 22:00:56,196 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:56,199 INFO L225 Difference]: With dead ends: 203 [2023-11-06 22:00:56,199 INFO L226 Difference]: Without dead ends: 129 [2023-11-06 22:00:56,201 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:00:56,202 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 166 mSDsluCounter, 239 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:56,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 352 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:00:56,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2023-11-06 22:00:56,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 126. [2023-11-06 22:00:56,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 96 states have (on average 1.3333333333333333) internal successors, (128), 107 states have internal predecessors, (128), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2023-11-06 22:00:56,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 163 transitions. [2023-11-06 22:00:56,231 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 163 transitions. Word has length 38 [2023-11-06 22:00:56,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:56,232 INFO L495 AbstractCegarLoop]: Abstraction has 126 states and 163 transitions. [2023-11-06 22:00:56,232 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:00:56,232 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 163 transitions. [2023-11-06 22:00:56,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:00:56,235 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:56,236 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:56,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:00:56,236 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:56,237 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:56,237 INFO L85 PathProgramCache]: Analyzing trace with hash -1848173569, now seen corresponding path program 1 times [2023-11-06 22:00:56,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:56,238 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1873811383] [2023-11-06 22:00:56,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:56,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:56,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:00:56,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 22:00:56,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,411 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:00:56,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:56,412 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1873811383] [2023-11-06 22:00:56,412 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1873811383] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:56,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:56,413 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:00:56,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678494369] [2023-11-06 22:00:56,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:56,414 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:00:56,414 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:56,415 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:00:56,415 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:00:56,415 INFO L87 Difference]: Start difference. First operand 126 states and 163 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:56,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:56,630 INFO L93 Difference]: Finished difference Result 286 states and 379 transitions. [2023-11-06 22:00:56,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:00:56,631 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-06 22:00:56,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:56,637 INFO L225 Difference]: With dead ends: 286 [2023-11-06 22:00:56,637 INFO L226 Difference]: Without dead ends: 168 [2023-11-06 22:00:56,648 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:00:56,652 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 49 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 456 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:56,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 456 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:00:56,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2023-11-06 22:00:56,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 164. [2023-11-06 22:00:56,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 125 states have (on average 1.272) internal successors, (159), 135 states have internal predecessors, (159), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2023-11-06 22:00:56,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 207 transitions. [2023-11-06 22:00:56,693 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 207 transitions. Word has length 41 [2023-11-06 22:00:56,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:56,694 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 207 transitions. [2023-11-06 22:00:56,695 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:00:56,695 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 207 transitions. [2023-11-06 22:00:56,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:00:56,704 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:56,705 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:56,705 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:00:56,706 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:56,707 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:56,707 INFO L85 PathProgramCache]: Analyzing trace with hash -1678713476, now seen corresponding path program 1 times [2023-11-06 22:00:56,707 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:56,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1842018526] [2023-11-06 22:00:56,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:56,709 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:56,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:00:56,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:00:56,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:00:56,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:56,937 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:56,937 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:56,938 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1842018526] [2023-11-06 22:00:56,938 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1842018526] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:56,939 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:56,939 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:00:56,941 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46779739] [2023-11-06 22:00:56,941 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:56,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:00:56,942 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:56,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:00:56,944 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:00:56,945 INFO L87 Difference]: Start difference. First operand 164 states and 207 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:57,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:57,206 INFO L93 Difference]: Finished difference Result 351 states and 450 transitions. [2023-11-06 22:00:57,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:00:57,207 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2023-11-06 22:00:57,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:57,219 INFO L225 Difference]: With dead ends: 351 [2023-11-06 22:00:57,219 INFO L226 Difference]: Without dead ends: 195 [2023-11-06 22:00:57,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:00:57,228 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 63 mSDsluCounter, 302 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 394 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:57,235 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 394 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:00:57,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-11-06 22:00:57,297 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 190. [2023-11-06 22:00:57,300 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 190 states, 146 states have (on average 1.2602739726027397) internal successors, (184), 156 states have internal predecessors, (184), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (32), 24 states have call predecessors, (32), 23 states have call successors, (32) [2023-11-06 22:00:57,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 239 transitions. [2023-11-06 22:00:57,304 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 239 transitions. Word has length 52 [2023-11-06 22:00:57,306 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:57,306 INFO L495 AbstractCegarLoop]: Abstraction has 190 states and 239 transitions. [2023-11-06 22:00:57,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:57,313 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 239 transitions. [2023-11-06 22:00:57,316 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:00:57,317 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:57,317 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:57,318 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:00:57,318 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:57,319 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:57,319 INFO L85 PathProgramCache]: Analyzing trace with hash 927310078, now seen corresponding path program 1 times [2023-11-06 22:00:57,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:57,319 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2100345960] [2023-11-06 22:00:57,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:57,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:57,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:00:57,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:00:57,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:00:57,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,504 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:57,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:57,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2100345960] [2023-11-06 22:00:57,505 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2100345960] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:57,505 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:57,506 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:00:57,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1513041025] [2023-11-06 22:00:57,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:57,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:00:57,507 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:57,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:00:57,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:00:57,508 INFO L87 Difference]: Start difference. First operand 190 states and 239 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:57,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:57,676 INFO L93 Difference]: Finished difference Result 382 states and 492 transitions. [2023-11-06 22:00:57,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:00:57,677 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2023-11-06 22:00:57,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:57,680 INFO L225 Difference]: With dead ends: 382 [2023-11-06 22:00:57,680 INFO L226 Difference]: Without dead ends: 200 [2023-11-06 22:00:57,681 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:00:57,683 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 66 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 70 SdHoareTripleChecker+Valid, 309 SdHoareTripleChecker+Invalid, 112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:57,683 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [70 Valid, 309 Invalid, 112 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:00:57,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2023-11-06 22:00:57,709 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 192. [2023-11-06 22:00:57,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 148 states have (on average 1.2567567567567568) internal successors, (186), 158 states have internal predecessors, (186), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (32), 24 states have call predecessors, (32), 23 states have call successors, (32) [2023-11-06 22:00:57,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 241 transitions. [2023-11-06 22:00:57,713 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 241 transitions. Word has length 52 [2023-11-06 22:00:57,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:57,714 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 241 transitions. [2023-11-06 22:00:57,714 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:57,714 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 241 transitions. [2023-11-06 22:00:57,715 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2023-11-06 22:00:57,716 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:57,716 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:57,716 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:00:57,716 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:57,717 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:57,717 INFO L85 PathProgramCache]: Analyzing trace with hash 1350011904, now seen corresponding path program 1 times [2023-11-06 22:00:57,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:57,718 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845669965] [2023-11-06 22:00:57,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:57,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:57,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:00:57,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:00:57,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2023-11-06 22:00:57,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:57,818 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:57,819 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:57,819 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845669965] [2023-11-06 22:00:57,819 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845669965] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:57,819 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:57,820 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:00:57,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1155292561] [2023-11-06 22:00:57,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:57,821 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:00:57,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:57,822 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:00:57,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:00:57,822 INFO L87 Difference]: Start difference. First operand 192 states and 241 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:58,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:58,141 INFO L93 Difference]: Finished difference Result 589 states and 769 transitions. [2023-11-06 22:00:58,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:00:58,142 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 52 [2023-11-06 22:00:58,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:58,150 INFO L225 Difference]: With dead ends: 589 [2023-11-06 22:00:58,150 INFO L226 Difference]: Without dead ends: 405 [2023-11-06 22:00:58,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:00:58,153 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 225 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 135 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 325 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 135 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:58,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 325 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 135 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:00:58,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 405 states. [2023-11-06 22:00:58,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 405 to 403. [2023-11-06 22:00:58,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 403 states, 308 states have (on average 1.2305194805194806) internal successors, (379), 326 states have internal predecessors, (379), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (78), 51 states have call predecessors, (78), 52 states have call successors, (78) [2023-11-06 22:00:58,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 403 states to 403 states and 509 transitions. [2023-11-06 22:00:58,219 INFO L78 Accepts]: Start accepts. Automaton has 403 states and 509 transitions. Word has length 52 [2023-11-06 22:00:58,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:58,220 INFO L495 AbstractCegarLoop]: Abstraction has 403 states and 509 transitions. [2023-11-06 22:00:58,220 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:00:58,220 INFO L276 IsEmpty]: Start isEmpty. Operand 403 states and 509 transitions. [2023-11-06 22:00:58,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:00:58,223 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:58,224 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:58,224 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:00:58,224 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:58,225 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:58,225 INFO L85 PathProgramCache]: Analyzing trace with hash 338031322, now seen corresponding path program 1 times [2023-11-06 22:00:58,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:58,226 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [732850284] [2023-11-06 22:00:58,226 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:58,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:58,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:58,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:00:58,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:58,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:00:58,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:58,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-06 22:00:58,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:58,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:00:58,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:58,569 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:00:58,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:58,570 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [732850284] [2023-11-06 22:00:58,570 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [732850284] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:00:58,570 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:00:58,571 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 22:00:58,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1130324354] [2023-11-06 22:00:58,572 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:00:58,573 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 22:00:58,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:00:58,574 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 22:00:58,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:00:58,574 INFO L87 Difference]: Start difference. First operand 403 states and 509 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:00:59,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:00:59,466 INFO L93 Difference]: Finished difference Result 1194 states and 1556 transitions. [2023-11-06 22:00:59,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-06 22:00:59,467 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2023-11-06 22:00:59,468 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:00:59,475 INFO L225 Difference]: With dead ends: 1194 [2023-11-06 22:00:59,475 INFO L226 Difference]: Without dead ends: 887 [2023-11-06 22:00:59,478 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2023-11-06 22:00:59,479 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 476 mSDsluCounter, 488 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 483 SdHoareTripleChecker+Valid, 602 SdHoareTripleChecker+Invalid, 577 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:00:59,480 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [483 Valid, 602 Invalid, 577 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 439 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 22:00:59,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 887 states. [2023-11-06 22:00:59,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 887 to 747. [2023-11-06 22:00:59,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 747 states, 571 states have (on average 1.2276707530647986) internal successors, (701), 608 states have internal predecessors, (701), 95 states have call successors, (95), 72 states have call predecessors, (95), 80 states have return successors, (144), 94 states have call predecessors, (144), 95 states have call successors, (144) [2023-11-06 22:00:59,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 747 states to 747 states and 940 transitions. [2023-11-06 22:00:59,611 INFO L78 Accepts]: Start accepts. Automaton has 747 states and 940 transitions. Word has length 56 [2023-11-06 22:00:59,611 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:00:59,611 INFO L495 AbstractCegarLoop]: Abstraction has 747 states and 940 transitions. [2023-11-06 22:00:59,612 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:00:59,612 INFO L276 IsEmpty]: Start isEmpty. Operand 747 states and 940 transitions. [2023-11-06 22:00:59,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2023-11-06 22:00:59,614 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:00:59,614 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:00:59,615 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:00:59,615 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:00:59,615 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:00:59,616 INFO L85 PathProgramCache]: Analyzing trace with hash 836408910, now seen corresponding path program 1 times [2023-11-06 22:00:59,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:00:59,616 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388849800] [2023-11-06 22:00:59,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:59,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:00:59,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:00:59,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:00:59,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:00:59,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:00:59,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2023-11-06 22:00:59,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2023-11-06 22:00:59,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:00:59,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2023-11-06 22:00:59,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:00:59,989 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:00:59,989 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:00:59,990 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388849800] [2023-11-06 22:00:59,990 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388849800] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:00:59,990 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [390468974] [2023-11-06 22:00:59,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:00:59,990 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:00:59,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:00:59,994 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:00,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:01:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:00,169 INFO L262 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:01:00,178 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:00,438 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:01:00,438 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:01:00,686 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:01:00,687 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [390468974] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:01:00,687 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:01:00,687 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2023-11-06 22:01:00,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1041043961] [2023-11-06 22:01:00,688 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:01:00,689 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-06 22:01:00,689 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:00,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-06 22:01:00,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:01:00,692 INFO L87 Difference]: Start difference. First operand 747 states and 940 transitions. Second operand has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-06 22:01:02,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:02,447 INFO L93 Difference]: Finished difference Result 1713 states and 2251 transitions. [2023-11-06 22:01:02,448 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2023-11-06 22:01:02,448 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 98 [2023-11-06 22:01:02,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:02,459 INFO L225 Difference]: With dead ends: 1713 [2023-11-06 22:01:02,459 INFO L226 Difference]: Without dead ends: 1058 [2023-11-06 22:01:02,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 271 GetRequests, 218 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 683 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2023-11-06 22:01:02,468 INFO L413 NwaCegarLoop]: 192 mSDtfsCounter, 448 mSDsluCounter, 1445 mSDsCounter, 0 mSdLazyCounter, 1210 mSolverCounterSat, 137 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 449 SdHoareTripleChecker+Valid, 1637 SdHoareTripleChecker+Invalid, 1347 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 137 IncrementalHoareTripleChecker+Valid, 1210 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:02,468 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [449 Valid, 1637 Invalid, 1347 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [137 Valid, 1210 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-06 22:01:02,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1058 states. [2023-11-06 22:01:02,617 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1058 to 844. [2023-11-06 22:01:02,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 844 states, 636 states have (on average 1.2044025157232705) internal successors, (766), 685 states have internal predecessors, (766), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (157), 100 states have call predecessors, (157), 112 states have call successors, (157) [2023-11-06 22:01:02,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1035 transitions. [2023-11-06 22:01:02,628 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1035 transitions. Word has length 98 [2023-11-06 22:01:02,629 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:02,630 INFO L495 AbstractCegarLoop]: Abstraction has 844 states and 1035 transitions. [2023-11-06 22:01:02,630 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.6875) internal successors, (123), 11 states have internal predecessors, (123), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-06 22:01:02,630 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1035 transitions. [2023-11-06 22:01:02,641 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2023-11-06 22:01:02,642 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:02,642 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:02,686 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:01:02,879 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:02,879 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:02,880 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:02,880 INFO L85 PathProgramCache]: Analyzing trace with hash -1532964471, now seen corresponding path program 1 times [2023-11-06 22:01:02,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:02,880 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1875645765] [2023-11-06 22:01:02,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:02,881 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:02,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,972 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:02,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:02,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:01:02,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:03,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:01:03,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2023-11-06 22:01:03,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:03,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:03,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:01:03,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 105 [2023-11-06 22:01:03,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:03,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:03,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 148 [2023-11-06 22:01:03,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2023-11-06 22:01:03,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2023-11-06 22:01:03,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,084 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 65 proven. 16 refuted. 0 times theorem prover too weak. 110 trivial. 0 not checked. [2023-11-06 22:01:03,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:03,084 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1875645765] [2023-11-06 22:01:03,084 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1875645765] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:03,085 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [446004083] [2023-11-06 22:01:03,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:03,085 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:03,085 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:03,086 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:03,112 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:01:03,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:03,270 INFO L262 TraceCheckSpWp]: Trace formula consists of 553 conjuncts, 3 conjunts are in the unsatisfiable core [2023-11-06 22:01:03,293 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:03,330 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 61 proven. 0 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2023-11-06 22:01:03,330 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:01:03,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [446004083] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:03,331 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:01:03,331 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2023-11-06 22:01:03,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1597775699] [2023-11-06 22:01:03,332 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:03,332 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:01:03,333 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:03,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:01:03,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:03,334 INFO L87 Difference]: Start difference. First operand 844 states and 1035 transitions. Second operand has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2023-11-06 22:01:03,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:03,462 INFO L93 Difference]: Finished difference Result 1690 states and 2072 transitions. [2023-11-06 22:01:03,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:01:03,463 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 181 [2023-11-06 22:01:03,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:03,469 INFO L225 Difference]: With dead ends: 1690 [2023-11-06 22:01:03,470 INFO L226 Difference]: Without dead ends: 854 [2023-11-06 22:01:03,473 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 207 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:01:03,474 INFO L413 NwaCegarLoop]: 140 mSDtfsCounter, 35 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:03,475 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 239 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:01:03,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 854 states. [2023-11-06 22:01:03,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 854 to 844. [2023-11-06 22:01:03,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 844 states, 636 states have (on average 1.1965408805031446) internal successors, (761), 685 states have internal predecessors, (761), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2023-11-06 22:01:03,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 844 states to 844 states and 1011 transitions. [2023-11-06 22:01:03,645 INFO L78 Accepts]: Start accepts. Automaton has 844 states and 1011 transitions. Word has length 181 [2023-11-06 22:01:03,645 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:03,646 INFO L495 AbstractCegarLoop]: Abstraction has 844 states and 1011 transitions. [2023-11-06 22:01:03,646 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 28.666666666666668) internal successors, (86), 3 states have internal predecessors, (86), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2023-11-06 22:01:03,646 INFO L276 IsEmpty]: Start isEmpty. Operand 844 states and 1011 transitions. [2023-11-06 22:01:03,652 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 180 [2023-11-06 22:01:03,653 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:03,653 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:03,665 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:01:03,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:03,861 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:03,861 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:03,862 INFO L85 PathProgramCache]: Analyzing trace with hash 1322302797, now seen corresponding path program 1 times [2023-11-06 22:01:03,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:03,862 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1562578317] [2023-11-06 22:01:03,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:03,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:03,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:04,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:01:04,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,022 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:04,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:01:04,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-06 22:01:04,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:04,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:04,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:01:04,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2023-11-06 22:01:04,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:04,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:04,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2023-11-06 22:01:04,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2023-11-06 22:01:04,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2023-11-06 22:01:04,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2023-11-06 22:01:04,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:04,121 INFO L134 CoverageAnalysis]: Checked inductivity of 196 backedges. 78 proven. 0 refuted. 0 times theorem prover too weak. 118 trivial. 0 not checked. [2023-11-06 22:01:04,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:04,122 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1562578317] [2023-11-06 22:01:04,122 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1562578317] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:01:04,122 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:01:04,122 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:01:04,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [556484206] [2023-11-06 22:01:04,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:01:04,123 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:01:04,123 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:04,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:01:04,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:01:04,124 INFO L87 Difference]: Start difference. First operand 844 states and 1011 transitions. Second operand has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2023-11-06 22:01:04,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:04,577 INFO L93 Difference]: Finished difference Result 1641 states and 1985 transitions. [2023-11-06 22:01:04,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2023-11-06 22:01:04,577 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 179 [2023-11-06 22:01:04,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:04,584 INFO L225 Difference]: With dead ends: 1641 [2023-11-06 22:01:04,585 INFO L226 Difference]: Without dead ends: 889 [2023-11-06 22:01:04,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 54 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=91, Invalid=251, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:01:04,615 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 177 mSDsluCounter, 368 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 466 SdHoareTripleChecker+Invalid, 340 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:04,615 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 466 Invalid, 340 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:01:04,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 889 states. [2023-11-06 22:01:04,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 889 to 853. [2023-11-06 22:01:04,712 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 853 states, 645 states have (on average 1.193798449612403) internal successors, (770), 694 states have internal predecessors, (770), 112 states have call successors, (112), 93 states have call predecessors, (112), 95 states have return successors, (138), 100 states have call predecessors, (138), 112 states have call successors, (138) [2023-11-06 22:01:04,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 853 states to 853 states and 1020 transitions. [2023-11-06 22:01:04,719 INFO L78 Accepts]: Start accepts. Automaton has 853 states and 1020 transitions. Word has length 179 [2023-11-06 22:01:04,720 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:04,720 INFO L495 AbstractCegarLoop]: Abstraction has 853 states and 1020 transitions. [2023-11-06 22:01:04,720 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 11.0) internal successors, (88), 5 states have internal predecessors, (88), 2 states have call successors, (12), 5 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2023-11-06 22:01:04,720 INFO L276 IsEmpty]: Start isEmpty. Operand 853 states and 1020 transitions. [2023-11-06 22:01:04,724 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 176 [2023-11-06 22:01:04,725 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:01:04,725 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:04,725 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2023-11-06 22:01:04,725 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:01:04,726 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:01:04,726 INFO L85 PathProgramCache]: Analyzing trace with hash 866202355, now seen corresponding path program 1 times [2023-11-06 22:01:04,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:01:04,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1568264356] [2023-11-06 22:01:04,727 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:04,728 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:01:04,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:01:05,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:01:05,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:05,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:01:05,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-06 22:01:05,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:05,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:05,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:01:05,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2023-11-06 22:01:05,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:01:05,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:01:05,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2023-11-06 22:01:05,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2023-11-06 22:01:05,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 167 [2023-11-06 22:01:05,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,197 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 92 proven. 30 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2023-11-06 22:01:05,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:01:05,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1568264356] [2023-11-06 22:01:05,198 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1568264356] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:01:05,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1303868352] [2023-11-06 22:01:05,198 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:01:05,199 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:05,199 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:01:05,218 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:01:05,244 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 22:01:05,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:01:05,390 INFO L262 TraceCheckSpWp]: Trace formula consists of 542 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 22:01:05,397 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:01:05,746 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 140 proven. 4 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2023-11-06 22:01:05,747 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:01:06,371 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 81 proven. 41 refuted. 0 times theorem prover too weak. 70 trivial. 0 not checked. [2023-11-06 22:01:06,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1303868352] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:01:06,372 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:01:06,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 11] total 25 [2023-11-06 22:01:06,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [860252308] [2023-11-06 22:01:06,373 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:01:06,374 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-06 22:01:06,374 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:01:06,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-06 22:01:06,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=479, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:01:06,376 INFO L87 Difference]: Start difference. First operand 853 states and 1020 transitions. Second operand has 25 states, 25 states have (on average 8.44) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) [2023-11-06 22:01:08,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:01:08,095 INFO L93 Difference]: Finished difference Result 1854 states and 2284 transitions. [2023-11-06 22:01:08,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2023-11-06 22:01:08,097 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 8.44) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) Word has length 175 [2023-11-06 22:01:08,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:01:08,098 INFO L225 Difference]: With dead ends: 1854 [2023-11-06 22:01:08,098 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:01:08,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 423 GetRequests, 370 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 530 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=542, Invalid=2008, Unknown=0, NotChecked=0, Total=2550 [2023-11-06 22:01:08,106 INFO L413 NwaCegarLoop]: 113 mSDtfsCounter, 591 mSDsluCounter, 933 mSDsCounter, 0 mSdLazyCounter, 1335 mSolverCounterSat, 197 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 597 SdHoareTripleChecker+Valid, 1046 SdHoareTripleChecker+Invalid, 1532 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 197 IncrementalHoareTripleChecker+Valid, 1335 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:01:08,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [597 Valid, 1046 Invalid, 1532 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [197 Valid, 1335 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2023-11-06 22:01:08,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:01:08,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:01:08,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:01:08,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:01:08,109 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 175 [2023-11-06 22:01:08,109 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:01:08,109 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:01:08,110 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 8.44) internal successors, (211), 22 states have internal predecessors, (211), 10 states have call successors, (31), 8 states have call predecessors, (31), 9 states have return successors, (29), 9 states have call predecessors, (29), 10 states have call successors, (29) [2023-11-06 22:01:08,110 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:01:08,110 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:01:08,113 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:01:08,121 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 22:01:08,321 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:01:08,323 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:01:17,890 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 860 867) no Hoare annotation was computed. [2023-11-06 22:01:17,891 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 860 867) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse1 .cse2))) [2023-11-06 22:01:17,891 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 860 867) no Hoare annotation was computed. [2023-11-06 22:01:17,891 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 793 799) no Hoare annotation was computed. [2023-11-06 22:01:17,891 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 793 799) the Hoare annotation is: true [2023-11-06 22:01:17,891 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 613 624) the Hoare annotation is: true [2023-11-06 22:01:17,891 INFO L899 garLoopResultBuilder]: For program point L617-1(lines 613 624) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 613 624) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point L952(lines 952 956) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point L952-2(lines 952 956) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point L564(lines 564 574) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point L593(lines 593 597) no Hoare annotation was computed. [2023-11-06 22:01:17,892 INFO L899 garLoopResultBuilder]: For program point L560(lines 560 577) no Hoare annotation was computed. [2023-11-06 22:01:17,893 INFO L895 garLoopResultBuilder]: At program point L593-2(lines 589 600) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 22:01:17,894 INFO L895 garLoopResultBuilder]: At program point L560-1(lines 552 580) the Hoare annotation is: (let ((.cse16 (= 0 ~systemActive~0))) (let ((.cse0 (= ~pumpRunning~0 0)) (.cse17 (<= 1 ~pumpRunning~0)) (.cse18 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse20 (<= ~waterLevel~0 1)) (.cse21 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse8 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0)) (.cse10 (<= 1 ~switchedOnBeforeTS~0)) (.cse6 (not .cse16))) (let ((.cse1 (= 2 ~waterLevel~0)) (.cse2 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse3 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| 2)) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse12 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse13 (and .cse17 .cse18 .cse7 .cse20 .cse21 .cse8 .cse10 .cse6)) (.cse14 (and .cse0 .cse7 .cse20 .cse21 .cse8 .cse10 .cse6)) (.cse15 (< |old(~pumpRunning~0)| 1)) (.cse11 (< 1 |old(~waterLevel~0)|)) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and .cse0 .cse1 .cse2 .cse3) .cse4 .cse5 .cse6) (or (and .cse0 .cse7 .cse8 .cse9 .cse10 .cse6) .cse11 .cse12 .cse13 .cse14 .cse15 .cse16 (and .cse17 .cse18 .cse7 .cse8 .cse9 .cse10 .cse6)) (or .cse4 (and .cse0 .cse1 .cse2 .cse3 .cse6) .cse5 .cse16 (and .cse17 .cse1 .cse2 .cse3)) (let ((.cse19 (= ~waterLevel~0 1))) (or (and .cse18 .cse7 .cse8 .cse19 .cse10) (and .cse0 .cse7 .cse8 .cse19 .cse10 .cse6) .cse5 .cse15 .cse16)) (or (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse14 .cse15 .cse16) (or .cse11 .cse4 (and .cse0 .cse7 .cse8 .cse9)))))) [2023-11-06 22:01:17,894 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 680 688) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 22:01:17,894 INFO L895 garLoopResultBuilder]: At program point L841(line 841) the Hoare annotation is: (let ((.cse10 (= 0 ~systemActive~0))) (let ((.cse3 (<= 1 ~pumpRunning~0)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (not .cse10))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse8 (and .cse3 .cse4 .cse5 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse6 .cse7)) (.cse9 (< |old(~pumpRunning~0)| 1))) (and (or .cse0 .cse1) (or .cse2 (and .cse3 .cse4 .cse5 (= |old(~waterLevel~0)| ~waterLevel~0) .cse6 .cse7) .cse8 .cse9 .cse10 (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) .cse0) (or (and .cse4 .cse5 (= ~waterLevel~0 1) .cse6) .cse1 .cse9 .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse2 .cse8 .cse9 .cse10))))) [2023-11-06 22:01:17,895 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 766 792) no Hoare annotation was computed. [2023-11-06 22:01:17,895 INFO L895 garLoopResultBuilder]: At program point L837(line 837) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 22:01:17,896 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 657 665) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (<= ~waterLevel~0 1)) (.cse19 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (and .cse10 .cse11 .cse5 .cse18 .cse19 .cse7)) (.cse3 (and .cse4 .cse5 .cse18 .cse19 .cse7)) (.cse0 (< 1 |old(~waterLevel~0)|)) (.cse13 (and .cse4 .cse5 .cse6)) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse9 (= 0 ~systemActive~0)) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7) .cse8 .cse9 (and .cse10 .cse11 .cse5 .cse6 .cse7)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 .cse8 .cse9) (or .cse12 .cse13 (< 2 |old(~waterLevel~0)|) (not .cse9)) (or .cse0 .cse12 .cse13) (let ((.cse14 (= ~waterLevel~0 1))) (or (and .cse11 .cse5 .cse14 .cse7) .cse15 .cse8 .cse9 (and .cse4 .cse5 .cse14 .cse7))) (let ((.cse16 (= 2 ~waterLevel~0)) (.cse17 (= 2 |timeShift_getWaterLevel_#res#1|))) (or .cse12 (and .cse4 .cse16 .cse17) .cse15 (and .cse10 .cse16 .cse17)))))) [2023-11-06 22:01:17,896 INFO L899 garLoopResultBuilder]: For program point L565(lines 565 571) no Hoare annotation was computed. [2023-11-06 22:01:17,896 INFO L895 garLoopResultBuilder]: At program point L846(line 846) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or .cse2 .cse3 (not .cse1)) (or .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3) (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1))) [2023-11-06 22:01:17,897 INFO L895 garLoopResultBuilder]: At program point L846-1(lines 827 851) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse8 (= ~pumpRunning~0 0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= 1 ~switchedOnBeforeTS~0)) (.cse11 (not .cse3))) (let ((.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (and .cse5 .cse12 .cse13 .cse16 .cse17 .cse14 .cse11)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse4 (and .cse8 .cse16 .cse17 .cse14)) (.cse6 (= |old(~waterLevel~0)| 2)) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 (= 2 ~waterLevel~0) .cse6) .cse7 (and .cse8 .cse9) .cse10) (or .cse7 .cse10 .cse11) (or .cse0 (and .cse5 .cse12 .cse13 .cse9 .cse14 .cse11) .cse1 .cse2 (and .cse8 .cse9 .cse14) .cse3 .cse10 .cse4) (let ((.cse15 (= ~waterLevel~0 1))) (or (and .cse12 .cse13 .cse15 .cse14) (not .cse6) .cse2 .cse3 (and .cse8 .cse15 .cse14))))))) [2023-11-06 22:01:17,897 INFO L899 garLoopResultBuilder]: For program point L780-1(lines 780 786) no Hoare annotation was computed. [2023-11-06 22:01:17,898 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse5 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~pumpRunning~0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse8 (<= ~waterLevel~0 1)) (.cse16 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse2 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~4#1| ~waterLevel~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse15 (not .cse7))) (let ((.cse11 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse12 (and .cse14 .cse0 .cse1 .cse8 .cse16 .cse2 .cse4 .cse15)) (.cse13 (and .cse5 .cse1 .cse8 .cse16 .cse2 .cse4)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (let ((.cse3 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse2 .cse3 .cse4) (not (= |old(~waterLevel~0)| 2)) .cse6 .cse7)) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse5 .cse1 .cse8 .cse2 .cse9) .cse10) (or (not (= |old(~waterLevel~0)| 1)) .cse11 .cse12 .cse13 .cse6 .cse7) (or .cse11 .cse12 (and .cse5 .cse1 .cse2 .cse9 .cse4) .cse13 .cse6 .cse7 .cse10 (and .cse14 .cse0 .cse1 .cse2 .cse9 .cse4 .cse15)))))) [2023-11-06 22:01:17,898 INFO L899 garLoopResultBuilder]: For program point L562-1(line 562) no Hoare annotation was computed. [2023-11-06 22:01:17,898 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 522 529) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< 1 |old(~waterLevel~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse1 .cse3 .cse4) (or .cse2 (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse4))) [2023-11-06 22:01:17,899 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 766 792) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-06 22:01:17,899 INFO L899 garLoopResultBuilder]: For program point L773(lines 773 779) no Hoare annotation was computed. [2023-11-06 22:01:17,899 INFO L899 garLoopResultBuilder]: For program point L773-2(lines 769 791) no Hoare annotation was computed. [2023-11-06 22:01:17,899 INFO L899 garLoopResultBuilder]: For program point L835(lines 835 843) no Hoare annotation was computed. [2023-11-06 22:01:17,899 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 848) no Hoare annotation was computed. [2023-11-06 22:01:17,900 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 943 961) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 22:01:17,900 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 542 551) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse0 .cse4 .cse1) (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse3))) [2023-11-06 22:01:17,900 INFO L899 garLoopResultBuilder]: For program point L526(line 526) no Hoare annotation was computed. [2023-11-06 22:01:17,900 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 766 792) no Hoare annotation was computed. [2023-11-06 22:01:17,901 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 526) no Hoare annotation was computed. [2023-11-06 22:01:17,901 INFO L895 garLoopResultBuilder]: At program point L547(line 547) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-06 22:01:17,901 INFO L899 garLoopResultBuilder]: For program point L547-1(line 547) no Hoare annotation was computed. [2023-11-06 22:01:17,901 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 418 447) no Hoare annotation was computed. [2023-11-06 22:01:17,902 INFO L902 garLoopResultBuilder]: At program point L443(lines 418 447) the Hoare annotation is: true [2023-11-06 22:01:17,902 INFO L899 garLoopResultBuilder]: For program point L439(line 439) no Hoare annotation was computed. [2023-11-06 22:01:17,902 INFO L899 garLoopResultBuilder]: For program point L432(lines 432 436) no Hoare annotation was computed. [2023-11-06 22:01:17,902 INFO L902 garLoopResultBuilder]: At program point L432-1(lines 432 436) the Hoare annotation is: true [2023-11-06 22:01:17,902 INFO L899 garLoopResultBuilder]: For program point L429(line 429) no Hoare annotation was computed. [2023-11-06 22:01:17,902 INFO L902 garLoopResultBuilder]: At program point L428-2(lines 428 442) the Hoare annotation is: true [2023-11-06 22:01:17,903 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 418 447) the Hoare annotation is: true [2023-11-06 22:01:17,903 INFO L902 garLoopResultBuilder]: At program point L424(line 424) the Hoare annotation is: true [2023-11-06 22:01:17,903 INFO L899 garLoopResultBuilder]: For program point L424-1(line 424) no Hoare annotation was computed. [2023-11-06 22:01:17,903 INFO L899 garLoopResultBuilder]: For program point L704(lines 704 708) no Hoare annotation was computed. [2023-11-06 22:01:17,903 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 977 984) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse2 .cse3 (<= ~waterLevel~0 2) .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4 .cse5))) [2023-11-06 22:01:17,904 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 484 494) the Hoare annotation is: true [2023-11-06 22:01:17,904 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 997 1003) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:01:17,904 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 498 520) the Hoare annotation is: true [2023-11-06 22:01:17,904 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:01:17,904 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:01:17,904 INFO L902 garLoopResultBuilder]: At program point L755(lines 692 759) the Hoare annotation is: true [2023-11-06 22:01:17,905 INFO L899 garLoopResultBuilder]: For program point L722(lines 722 728) no Hoare annotation was computed. [2023-11-06 22:01:17,905 INFO L899 garLoopResultBuilder]: For program point L722-1(lines 722 728) no Hoare annotation was computed. [2023-11-06 22:01:17,905 INFO L895 garLoopResultBuilder]: At program point L714(line 714) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse2 .cse5 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse7))) [2023-11-06 22:01:17,905 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 475 481) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:01:17,905 INFO L899 garLoopResultBuilder]: For program point L966(lines 966 972) no Hoare annotation was computed. [2023-11-06 22:01:17,906 INFO L899 garLoopResultBuilder]: For program point L966-1(lines 966 972) no Hoare annotation was computed. [2023-11-06 22:01:17,906 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:01:17,906 INFO L899 garLoopResultBuilder]: For program point L508(lines 508 515) no Hoare annotation was computed. [2023-11-06 22:01:17,906 INFO L899 garLoopResultBuilder]: For program point L508-2(lines 508 515) no Hoare annotation was computed. [2023-11-06 22:01:17,906 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 534 541) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:01:17,906 INFO L895 garLoopResultBuilder]: At program point L752(lines 701 753) the Hoare annotation is: false [2023-11-06 22:01:17,907 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:01:17,907 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 1004 1010) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:01:17,907 INFO L899 garLoopResultBuilder]: For program point L740(lines 740 746) no Hoare annotation was computed. [2023-11-06 22:01:17,907 INFO L895 garLoopResultBuilder]: At program point L740-2(lines 732 747) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2023-11-06 22:01:17,907 INFO L899 garLoopResultBuilder]: For program point L703(lines 702 751) no Hoare annotation was computed. [2023-11-06 22:01:17,908 INFO L899 garLoopResultBuilder]: For program point L732(lines 732 747) no Hoare annotation was computed. [2023-11-06 22:01:17,908 INFO L895 garLoopResultBuilder]: At program point L724(line 724) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4))) [2023-11-06 22:01:17,908 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 962 976) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= |ULTIMATE.start_main_~tmp~3#1| 1) (= 0 ~systemActive~0)) [2023-11-06 22:01:17,908 INFO L895 garLoopResultBuilder]: At program point L749(lines 702 751) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse7 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse2 .cse5 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse7) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse7))) [2023-11-06 22:01:17,909 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 1011 1019) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:01:17,909 INFO L899 garLoopResultBuilder]: For program point L712(lines 712 718) no Hoare annotation was computed. [2023-11-06 22:01:17,909 INFO L895 garLoopResultBuilder]: At program point L968(line 968) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~3#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2023-11-06 22:01:17,909 INFO L899 garLoopResultBuilder]: For program point L712-1(lines 712 718) no Hoare annotation was computed. [2023-11-06 22:01:17,909 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 852 859) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse0) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) .cse0))) [2023-11-06 22:01:17,910 INFO L895 garLoopResultBuilder]: At program point L820(line 820) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 22:01:17,910 INFO L899 garLoopResultBuilder]: For program point L820-1(lines 801 825) no Hoare annotation was computed. [2023-11-06 22:01:17,910 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 801 825) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 22:01:17,910 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 666 679) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (and .cse0 (= 2 ~waterLevel~0)) .cse1)) (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1))) [2023-11-06 22:01:17,911 INFO L899 garLoopResultBuilder]: For program point L670(lines 670 676) no Hoare annotation was computed. [2023-11-06 22:01:17,911 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 924 942) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse3 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 22:01:17,911 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 801 825) no Hoare annotation was computed. [2023-11-06 22:01:17,911 INFO L895 garLoopResultBuilder]: At program point L815(line 815) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse0))) [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 817) no Hoare annotation was computed. [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point L805(lines 805 822) no Hoare annotation was computed. [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point L933-2(lines 933 937) no Hoare annotation was computed. [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 601 612) no Hoare annotation was computed. [2023-11-06 22:01:17,912 INFO L899 garLoopResultBuilder]: For program point L605-1(lines 601 612) no Hoare annotation was computed. [2023-11-06 22:01:17,913 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 601 612) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< 1 |old(~waterLevel~0)|)) (.cse5 (< ~pumpRunning~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4) (or .cse5 .cse1 .cse2 .cse6) (or .cse3 .cse5 (< ~switchedOnBeforeTS~0 1) .cse4 .cse6))) [2023-11-06 22:01:17,913 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 879 887) no Hoare annotation was computed. [2023-11-06 22:01:17,913 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 879 887) no Hoare annotation was computed. [2023-11-06 22:01:17,913 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 879 887) the Hoare annotation is: true [2023-11-06 22:01:17,916 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:01:17,918 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:01:17,971 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:01:17 BoogieIcfgContainer [2023-11-06 22:01:17,971 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:01:17,971 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:01:17,972 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:01:17,972 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:01:17,972 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:00:54" (3/4) ... [2023-11-06 22:01:17,975 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:01:17,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:01:17,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:01:17,980 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:01:17,980 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:01:17,980 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:01:17,980 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:01:17,980 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:01:17,981 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 22:01:17,990 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:01:17,990 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:01:17,991 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:01:17,992 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:01:17,992 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:01:18,024 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,025 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,025 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,025 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:01:18,027 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,028 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,029 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 2))) || !((0 == systemActive))) && (((((((((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (1 < \old(waterLevel))) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:01:18,030 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:01:18,031 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((((((((\old(switchedOnBeforeTS) < 1) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:01:18,031 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,031 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (0 == systemActive)) [2023-11-06 22:01:18,032 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) [2023-11-06 22:01:18,032 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,032 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,033 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,036 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:01:18,092 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,093 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,093 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:01:18,093 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:01:18,094 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,094 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,095 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 2))) || !((0 == systemActive))) && (((((((((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (1 < \old(waterLevel))) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)))) [2023-11-06 22:01:18,095 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:01:18,096 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((((((((\old(switchedOnBeforeTS) < 1) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:01:18,096 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,096 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (0 == systemActive)) [2023-11-06 22:01:18,096 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) [2023-11-06 22:01:18,097 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,097 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,097 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,098 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:01:18,099 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:01:18,123 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:01:18,124 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:01:18,124 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:01:18,125 INFO L158 Benchmark]: Toolchain (without parser) took 24702.39ms. Allocated memory was 151.0MB in the beginning and 272.6MB in the end (delta: 121.6MB). Free memory was 117.6MB in the beginning and 126.5MB in the end (delta: -8.8MB). Peak memory consumption was 112.4MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,125 INFO L158 Benchmark]: CDTParser took 0.43ms. Allocated memory is still 151.0MB. Free memory was 119.7MB in the beginning and 119.6MB in the end (delta: 139.9kB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:01:18,126 INFO L158 Benchmark]: CACSL2BoogieTranslator took 664.91ms. Allocated memory is still 151.0MB. Free memory was 117.6MB in the beginning and 105.6MB in the end (delta: 12.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,126 INFO L158 Benchmark]: Boogie Procedure Inliner took 86.23ms. Allocated memory is still 151.0MB. Free memory was 105.6MB in the beginning and 103.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,127 INFO L158 Benchmark]: Boogie Preprocessor took 53.15ms. Allocated memory is still 151.0MB. Free memory was 103.0MB in the beginning and 101.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,127 INFO L158 Benchmark]: RCFGBuilder took 515.87ms. Allocated memory is still 151.0MB. Free memory was 101.4MB in the beginning and 84.1MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,128 INFO L158 Benchmark]: TraceAbstraction took 23221.56ms. Allocated memory was 151.0MB in the beginning and 272.6MB in the end (delta: 121.6MB). Free memory was 83.1MB in the beginning and 134.9MB in the end (delta: -51.7MB). Peak memory consumption was 130.7MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,129 INFO L158 Benchmark]: Witness Printer took 152.76ms. Allocated memory is still 272.6MB. Free memory was 134.9MB in the beginning and 126.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:01:18,132 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.43ms. Allocated memory is still 151.0MB. Free memory was 119.7MB in the beginning and 119.6MB in the end (delta: 139.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 664.91ms. Allocated memory is still 151.0MB. Free memory was 117.6MB in the beginning and 105.6MB in the end (delta: 12.0MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 86.23ms. Allocated memory is still 151.0MB. Free memory was 105.6MB in the beginning and 103.0MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 53.15ms. Allocated memory is still 151.0MB. Free memory was 103.0MB in the beginning and 101.4MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 515.87ms. Allocated memory is still 151.0MB. Free memory was 101.4MB in the beginning and 84.1MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 23221.56ms. Allocated memory was 151.0MB in the beginning and 272.6MB in the end (delta: 121.6MB). Free memory was 83.1MB in the beginning and 134.9MB in the end (delta: -51.7MB). Peak memory consumption was 130.7MB. Max. memory is 16.1GB. * Witness Printer took 152.76ms. Allocated memory is still 272.6MB. Free memory was 134.9MB in the beginning and 126.5MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [415] - GenericResultAtLocation [Line: 521]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [521] - GenericResultAtLocation [Line: 530]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [530] - GenericResultAtLocation [Line: 581]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [581] - GenericResultAtLocation [Line: 689]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [689] - GenericResultAtLocation [Line: 760]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [760] - GenericResultAtLocation [Line: 985]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [985] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 526]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 23.1s, OverallIterations: 12, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 6.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2351 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2313 mSDsluCounter, 6138 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4710 mSDsCounter, 651 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3718 IncrementalHoareTripleChecker+Invalid, 4369 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 651 mSolverCounterUnsat, 1428 mSDtfsCounter, 3718 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1076 GetRequests, 891 SyntacticMatches, 8 SemanticMatches, 177 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1431 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=853occurred in iteration=11, InterpolantAutomatonStates: 154, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 12 MinimizatonAttempts, 422 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 2639 PreInvPairs, 3009 NumberOfFragments, 2701 HoareAnnotationTreeSize, 2639 FomulaSimplifications, 9581 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 46 FomulaSimplificationsInter, 22550 FormulaSimplificationTreeSizeReductionInter, 8.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 1443 NumberOfCodeBlocks, 1443 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1699 ConstructedInterpolants, 0 QuantifiedInterpolants, 3071 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1430 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 17 InterpolantComputations, 10 PerfectInterpolantSequences, 1163/1280 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 475]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 702]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 997]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 943]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 589]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 418]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 666]: Loop Invariant Derived loop invariant: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 680]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 924]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 827]: Loop Invariant Derived loop invariant: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((((((((\old(switchedOnBeforeTS) < 1) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (tmp == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && ((((((((pumpRunning == \old(pumpRunning)) && (tmp == 0)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 534]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (0 == systemActive)) - InvariantResult [Line: 552]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) || !((\old(pumpRunning) == 0))) || !((\old(waterLevel) == 2))) || !((0 == systemActive))) && (((((((((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (1 < \old(waterLevel))) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (0 == systemActive)) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2)))) && (((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || ((((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp == waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (tmp == waterLevel)) && (\old(waterLevel) == waterLevel)))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 522]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 657]: Loop Invariant Derived loop invariant: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((1 <= pumpRunning) && (pumpRunning == \old(pumpRunning))) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || (((pumpRunning == 0) && (waterLevel == \result)) && (\old(waterLevel) == waterLevel)))) && ((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel == \result)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) - InvariantResult [Line: 1011]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1004]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 542]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 498]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:01:18,183 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_64f1b91d-bac9-493b-a49e-e4b3f6b6bcbf/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE