./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b57a794fa6b429f14911ed2b6a28ecb30bf580e5cb37ae05e7120c2d485c2d18 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:05:01,953 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:05:02,025 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:05:02,030 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:05:02,030 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:05:02,057 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:05:02,058 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:05:02,058 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:05:02,059 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:05:02,060 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:05:02,061 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:05:02,061 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:05:02,062 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:05:02,063 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:05:02,063 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:05:02,064 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:05:02,065 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:05:02,065 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:05:02,066 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:05:02,067 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:05:02,067 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:05:02,072 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:05:02,073 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:05:02,073 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:05:02,085 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:05:02,102 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:05:02,103 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:05:02,103 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:05:02,104 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:05:02,104 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:05:02,105 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:05:02,105 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:05:02,105 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:05:02,106 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:05:02,106 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:05:02,106 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:05:02,106 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:05:02,107 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:05:02,107 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:05:02,107 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b57a794fa6b429f14911ed2b6a28ecb30bf580e5cb37ae05e7120c2d485c2d18 [2023-11-06 22:05:02,381 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:05:02,419 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:05:02,422 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:05:02,424 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:05:02,424 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:05:02,426 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c [2023-11-06 22:05:05,518 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:05:05,801 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:05:05,801 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c [2023-11-06 22:05:05,825 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/data/b653185ce/08afec5b9e9c4e818b07d26ace7ddcbd/FLAG44dd2ab13 [2023-11-06 22:05:05,843 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/data/b653185ce/08afec5b9e9c4e818b07d26ace7ddcbd [2023-11-06 22:05:05,851 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:05:05,853 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:05:05,855 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:05:05,855 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:05:05,861 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:05:05,862 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:05:05" (1/1) ... [2023-11-06 22:05:05,863 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@61cb4d60 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:05, skipping insertion in model container [2023-11-06 22:05:05,863 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:05:05" (1/1) ... [2023-11-06 22:05:05,927 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:05:06,233 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c[18075,18088] [2023-11-06 22:05:06,242 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:05:06,266 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:05:06,277 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-06 22:05:06,279 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] [2023-11-06 22:05:06,279 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [376] [2023-11-06 22:05:06,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [427] [2023-11-06 22:05:06,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [793] [2023-11-06 22:05:06,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [893] [2023-11-06 22:05:06,280 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [928] [2023-11-06 22:05:06,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [937] [2023-11-06 22:05:06,406 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/sv-benchmarks/c/product-lines/minepump_spec5_product60.cil.c[18075,18088] [2023-11-06 22:05:06,410 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:05:06,433 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:05:06,434 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06 WrapperNode [2023-11-06 22:05:06,434 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:05:06,435 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:05:06,436 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:05:06,436 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:05:06,445 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,477 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,513 INFO L138 Inliner]: procedures = 60, calls = 106, calls flagged for inlining = 28, calls inlined = 25, statements flattened = 238 [2023-11-06 22:05:06,514 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:05:06,515 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:05:06,515 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:05:06,515 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:05:06,526 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,526 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,536 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,536 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,545 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,550 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,553 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,555 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,558 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:05:06,559 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:05:06,559 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:05:06,560 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:05:06,560 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (1/1) ... [2023-11-06 22:05:06,572 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:05:06,587 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:05:06,601 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:05:06,631 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:05:06,653 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:05:06,654 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:05:06,654 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:05:06,654 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:05:06,654 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:05:06,654 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:05:06,655 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:05:06,655 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:06,655 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:06,655 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:05:06,655 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:05:06,655 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 22:05:06,656 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 22:05:06,656 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:05:06,656 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:05:06,656 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:05:06,657 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:05:06,657 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:05:06,657 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:05:06,658 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:05:06,745 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:05:06,747 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:05:07,116 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:05:07,146 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:05:07,160 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:05:07,163 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:07 BoogieIcfgContainer [2023-11-06 22:05:07,163 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:05:07,166 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:05:07,166 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:05:07,170 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:05:07,170 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:05:05" (1/3) ... [2023-11-06 22:05:07,171 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@171ab3e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:05:07, skipping insertion in model container [2023-11-06 22:05:07,171 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:05:06" (2/3) ... [2023-11-06 22:05:07,172 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@171ab3e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:05:07, skipping insertion in model container [2023-11-06 22:05:07,172 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:07" (3/3) ... [2023-11-06 22:05:07,176 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product60.cil.c [2023-11-06 22:05:07,195 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:05:07,195 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:05:07,251 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:05:07,259 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3e1684cd, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:05:07,260 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:05:07,265 INFO L276 IsEmpty]: Start isEmpty. Operand has 104 states, 80 states have (on average 1.3625) internal successors, (109), 89 states have internal predecessors, (109), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 22:05:07,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:05:07,278 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:07,279 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:07,280 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:07,286 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:07,286 INFO L85 PathProgramCache]: Analyzing trace with hash 1321598299, now seen corresponding path program 1 times [2023-11-06 22:05:07,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:07,297 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1276026123] [2023-11-06 22:05:07,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:07,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:07,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 22:05:07,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 22:05:07,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,542 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:07,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:07,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1276026123] [2023-11-06 22:05:07,544 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1276026123] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:07,544 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:07,545 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:05:07,546 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1378267707] [2023-11-06 22:05:07,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:07,553 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:05:07,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:07,588 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:05:07,589 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:05:07,591 INFO L87 Difference]: Start difference. First operand has 104 states, 80 states have (on average 1.3625) internal successors, (109), 89 states have internal predecessors, (109), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:07,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:07,673 INFO L93 Difference]: Finished difference Result 199 states and 268 transitions. [2023-11-06 22:05:07,674 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:05:07,675 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 22:05:07,676 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:07,691 INFO L225 Difference]: With dead ends: 199 [2023-11-06 22:05:07,691 INFO L226 Difference]: Without dead ends: 95 [2023-11-06 22:05:07,697 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:05:07,701 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:07,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:05:07,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2023-11-06 22:05:07,754 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 95. [2023-11-06 22:05:07,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 95 states, 73 states have (on average 1.3013698630136987) internal successors, (95), 81 states have internal predecessors, (95), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 22:05:07,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 95 states to 95 states and 122 transitions. [2023-11-06 22:05:07,761 INFO L78 Accepts]: Start accepts. Automaton has 95 states and 122 transitions. Word has length 32 [2023-11-06 22:05:07,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:07,762 INFO L495 AbstractCegarLoop]: Abstraction has 95 states and 122 transitions. [2023-11-06 22:05:07,762 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:07,763 INFO L276 IsEmpty]: Start isEmpty. Operand 95 states and 122 transitions. [2023-11-06 22:05:07,766 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 22:05:07,767 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:07,767 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:07,767 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:05:07,768 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:07,769 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:07,769 INFO L85 PathProgramCache]: Analyzing trace with hash 932141827, now seen corresponding path program 1 times [2023-11-06 22:05:07,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:07,770 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [304209212] [2023-11-06 22:05:07,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:07,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:07,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:05:07,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 22:05:07,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:07,919 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:07,920 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:07,920 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [304209212] [2023-11-06 22:05:07,920 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [304209212] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:07,921 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:07,921 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:05:07,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1053437298] [2023-11-06 22:05:07,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:07,923 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:05:07,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:07,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:05:07,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:07,925 INFO L87 Difference]: Start difference. First operand 95 states and 122 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:07,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:07,950 INFO L93 Difference]: Finished difference Result 150 states and 192 transitions. [2023-11-06 22:05:07,950 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:05:07,951 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 22:05:07,951 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:07,953 INFO L225 Difference]: With dead ends: 150 [2023-11-06 22:05:07,953 INFO L226 Difference]: Without dead ends: 86 [2023-11-06 22:05:07,955 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:05:07,956 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 17 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 196 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:07,957 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 196 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:05:07,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2023-11-06 22:05:07,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2023-11-06 22:05:07,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 75 states have internal predecessors, (88), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 22:05:07,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 110 transitions. [2023-11-06 22:05:07,973 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 110 transitions. Word has length 33 [2023-11-06 22:05:07,974 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:07,974 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 110 transitions. [2023-11-06 22:05:07,974 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:07,975 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 110 transitions. [2023-11-06 22:05:07,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 22:05:07,977 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:07,977 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:07,977 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:05:07,978 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:07,978 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:07,979 INFO L85 PathProgramCache]: Analyzing trace with hash -509762780, now seen corresponding path program 1 times [2023-11-06 22:05:07,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:07,979 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427451993] [2023-11-06 22:05:07,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:07,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:08,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:05:08,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 22:05:08,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,193 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:08,194 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:08,194 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427451993] [2023-11-06 22:05:08,194 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427451993] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:08,194 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:08,194 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:08,195 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [956453496] [2023-11-06 22:05:08,195 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:08,195 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:08,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:08,197 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:08,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:08,198 INFO L87 Difference]: Start difference. First operand 86 states and 110 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:05:08,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:08,346 INFO L93 Difference]: Finished difference Result 211 states and 274 transitions. [2023-11-06 22:05:08,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:05:08,347 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 22:05:08,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:08,350 INFO L225 Difference]: With dead ends: 211 [2023-11-06 22:05:08,350 INFO L226 Difference]: Without dead ends: 133 [2023-11-06 22:05:08,351 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:05:08,353 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 171 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 171 SdHoareTripleChecker+Valid, 367 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:08,354 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [171 Valid, 367 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:05:08,355 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2023-11-06 22:05:08,380 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 130. [2023-11-06 22:05:08,385 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 100 states have (on average 1.33) internal successors, (133), 111 states have internal predecessors, (133), 17 states have call successors, (17), 12 states have call predecessors, (17), 12 states have return successors, (18), 13 states have call predecessors, (18), 17 states have call successors, (18) [2023-11-06 22:05:08,389 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 168 transitions. [2023-11-06 22:05:08,390 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 168 transitions. Word has length 38 [2023-11-06 22:05:08,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:08,394 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 168 transitions. [2023-11-06 22:05:08,394 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 22:05:08,395 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 168 transitions. [2023-11-06 22:05:08,397 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 22:05:08,399 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:08,400 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:08,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:05:08,400 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:08,401 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:08,401 INFO L85 PathProgramCache]: Analyzing trace with hash -1072402805, now seen corresponding path program 1 times [2023-11-06 22:05:08,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:08,402 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [395185972] [2023-11-06 22:05:08,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:08,403 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:08,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 22:05:08,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 22:05:08,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:08,719 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:05:08,719 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:08,719 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [395185972] [2023-11-06 22:05:08,720 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [395185972] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:08,721 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:08,721 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:05:08,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738415478] [2023-11-06 22:05:08,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:08,723 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:05:08,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:08,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:05:08,725 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:05:08,725 INFO L87 Difference]: Start difference. First operand 130 states and 168 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:08,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:08,928 INFO L93 Difference]: Finished difference Result 295 states and 390 transitions. [2023-11-06 22:05:08,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:05:08,929 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-06 22:05:08,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:08,935 INFO L225 Difference]: With dead ends: 295 [2023-11-06 22:05:08,935 INFO L226 Difference]: Without dead ends: 173 [2023-11-06 22:05:08,941 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 22:05:08,948 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 54 mSDsluCounter, 356 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 465 SdHoareTripleChecker+Invalid, 80 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:08,952 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 465 Invalid, 80 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:05:08,955 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2023-11-06 22:05:08,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 169. [2023-11-06 22:05:08,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 130 states have (on average 1.2692307692307692) internal successors, (165), 141 states have internal predecessors, (165), 21 states have call successors, (21), 17 states have call predecessors, (21), 17 states have return successors, (27), 20 states have call predecessors, (27), 21 states have call successors, (27) [2023-11-06 22:05:08,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 213 transitions. [2023-11-06 22:05:08,986 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 213 transitions. Word has length 41 [2023-11-06 22:05:08,986 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:08,987 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 213 transitions. [2023-11-06 22:05:08,987 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 22:05:08,987 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 213 transitions. [2023-11-06 22:05:08,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:05:08,997 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:08,997 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:08,998 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:05:08,998 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:08,998 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:08,999 INFO L85 PathProgramCache]: Analyzing trace with hash -2130728348, now seen corresponding path program 1 times [2023-11-06 22:05:08,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:09,000 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [680940009] [2023-11-06 22:05:09,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:09,001 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:09,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:05:09,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:05:09,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:05:09,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,181 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:09,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:09,181 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [680940009] [2023-11-06 22:05:09,181 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [680940009] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:09,182 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:09,182 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:05:09,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1055348891] [2023-11-06 22:05:09,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:09,183 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:05:09,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:09,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:05:09,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:05:09,184 INFO L87 Difference]: Start difference. First operand 169 states and 213 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:09,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:09,389 INFO L93 Difference]: Finished difference Result 363 states and 470 transitions. [2023-11-06 22:05:09,390 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:05:09,390 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 56 [2023-11-06 22:05:09,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:09,398 INFO L225 Difference]: With dead ends: 363 [2023-11-06 22:05:09,398 INFO L226 Difference]: Without dead ends: 202 [2023-11-06 22:05:09,400 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:05:09,404 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 70 mSDsluCounter, 308 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 401 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:09,407 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 401 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:05:09,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 202 states. [2023-11-06 22:05:09,460 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 202 to 195. [2023-11-06 22:05:09,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 151 states have (on average 1.2582781456953642) internal successors, (190), 162 states have internal predecessors, (190), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (32), 24 states have call predecessors, (32), 23 states have call successors, (32) [2023-11-06 22:05:09,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 245 transitions. [2023-11-06 22:05:09,464 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 245 transitions. Word has length 56 [2023-11-06 22:05:09,465 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:09,465 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 245 transitions. [2023-11-06 22:05:09,466 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:09,470 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 245 transitions. [2023-11-06 22:05:09,471 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:05:09,471 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:09,472 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:09,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:05:09,472 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:09,472 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:09,473 INFO L85 PathProgramCache]: Analyzing trace with hash 358800614, now seen corresponding path program 1 times [2023-11-06 22:05:09,473 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:09,473 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135348296] [2023-11-06 22:05:09,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:09,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:09,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:05:09,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:05:09,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:05:09,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:09,677 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:09,677 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:09,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135348296] [2023-11-06 22:05:09,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135348296] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:09,678 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:09,678 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-06 22:05:09,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [10903705] [2023-11-06 22:05:09,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:09,679 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 22:05:09,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:09,680 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 22:05:09,680 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:05:09,680 INFO L87 Difference]: Start difference. First operand 195 states and 245 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:09,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:09,915 INFO L93 Difference]: Finished difference Result 392 states and 504 transitions. [2023-11-06 22:05:09,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:05:09,916 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 56 [2023-11-06 22:05:09,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:09,918 INFO L225 Difference]: With dead ends: 392 [2023-11-06 22:05:09,918 INFO L226 Difference]: Without dead ends: 205 [2023-11-06 22:05:09,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2023-11-06 22:05:09,920 INFO L413 NwaCegarLoop]: 93 mSDtfsCounter, 117 mSDsluCounter, 349 mSDsCounter, 0 mSdLazyCounter, 159 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 442 SdHoareTripleChecker+Invalid, 185 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:09,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 442 Invalid, 185 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 159 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:05:09,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 205 states. [2023-11-06 22:05:09,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 205 to 197. [2023-11-06 22:05:09,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 153 states have (on average 1.2549019607843137) internal successors, (192), 164 states have internal predecessors, (192), 23 states have call successors, (23), 17 states have call predecessors, (23), 20 states have return successors, (32), 24 states have call predecessors, (32), 23 states have call successors, (32) [2023-11-06 22:05:09,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 247 transitions. [2023-11-06 22:05:09,948 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 247 transitions. Word has length 56 [2023-11-06 22:05:09,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:09,948 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 247 transitions. [2023-11-06 22:05:09,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:09,949 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 247 transitions. [2023-11-06 22:05:09,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2023-11-06 22:05:09,950 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:09,950 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:09,951 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:05:09,951 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:09,951 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:09,951 INFO L85 PathProgramCache]: Analyzing trace with hash 499349224, now seen corresponding path program 1 times [2023-11-06 22:05:09,952 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:09,952 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1439849288] [2023-11-06 22:05:09,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:09,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:09,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:05:10,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 22:05:10,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2023-11-06 22:05:10,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,050 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:10,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:10,050 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1439849288] [2023-11-06 22:05:10,051 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1439849288] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:10,051 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:10,051 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:10,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1579530360] [2023-11-06 22:05:10,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:10,052 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:10,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:10,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:10,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:10,053 INFO L87 Difference]: Start difference. First operand 197 states and 247 transitions. Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:10,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:10,306 INFO L93 Difference]: Finished difference Result 599 states and 781 transitions. [2023-11-06 22:05:10,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:05:10,307 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 56 [2023-11-06 22:05:10,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:10,310 INFO L225 Difference]: With dead ends: 599 [2023-11-06 22:05:10,310 INFO L226 Difference]: Without dead ends: 410 [2023-11-06 22:05:10,312 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:05:10,313 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 232 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 239 SdHoareTripleChecker+Valid, 332 SdHoareTripleChecker+Invalid, 198 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:10,313 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [239 Valid, 332 Invalid, 198 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:10,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 410 states. [2023-11-06 22:05:10,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 410 to 408. [2023-11-06 22:05:10,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 313 states have (on average 1.2300319488817892) internal successors, (385), 332 states have internal predecessors, (385), 52 states have call successors, (52), 42 states have call predecessors, (52), 42 states have return successors, (78), 51 states have call predecessors, (78), 52 states have call successors, (78) [2023-11-06 22:05:10,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 515 transitions. [2023-11-06 22:05:10,367 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 515 transitions. Word has length 56 [2023-11-06 22:05:10,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:10,367 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 515 transitions. [2023-11-06 22:05:10,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 4 states have internal predecessors, (47), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 22:05:10,368 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 515 transitions. [2023-11-06 22:05:10,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-06 22:05:10,369 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:10,370 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:10,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:05:10,370 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:10,370 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:10,371 INFO L85 PathProgramCache]: Analyzing trace with hash 510255989, now seen corresponding path program 1 times [2023-11-06 22:05:10,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:10,371 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [844482876] [2023-11-06 22:05:10,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:10,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:10,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:10,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2023-11-06 22:05:10,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2023-11-06 22:05:10,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2023-11-06 22:05:10,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,433 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:10,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:10,433 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [844482876] [2023-11-06 22:05:10,433 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [844482876] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:10,434 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:10,434 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:05:10,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1105158605] [2023-11-06 22:05:10,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:10,435 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:05:10,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:10,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:05:10,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:05:10,436 INFO L87 Difference]: Start difference. First operand 408 states and 515 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:10,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:10,721 INFO L93 Difference]: Finished difference Result 887 states and 1123 transitions. [2023-11-06 22:05:10,721 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:05:10,721 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 63 [2023-11-06 22:05:10,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:10,725 INFO L225 Difference]: With dead ends: 887 [2023-11-06 22:05:10,726 INFO L226 Difference]: Without dead ends: 487 [2023-11-06 22:05:10,727 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:05:10,728 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 187 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:10,729 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 302 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:05:10,730 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2023-11-06 22:05:10,785 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 465. [2023-11-06 22:05:10,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 465 states, 357 states have (on average 1.2240896358543418) internal successors, (437), 381 states have internal predecessors, (437), 59 states have call successors, (59), 42 states have call predecessors, (59), 48 states have return successors, (89), 59 states have call predecessors, (89), 59 states have call successors, (89) [2023-11-06 22:05:10,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 465 states to 465 states and 585 transitions. [2023-11-06 22:05:10,791 INFO L78 Accepts]: Start accepts. Automaton has 465 states and 585 transitions. Word has length 63 [2023-11-06 22:05:10,792 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:10,792 INFO L495 AbstractCegarLoop]: Abstraction has 465 states and 585 transitions. [2023-11-06 22:05:10,792 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 3 states have internal predecessors, (52), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:10,792 INFO L276 IsEmpty]: Start isEmpty. Operand 465 states and 585 transitions. [2023-11-06 22:05:10,793 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2023-11-06 22:05:10,794 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:10,794 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:10,794 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:05:10,794 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:10,795 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:10,795 INFO L85 PathProgramCache]: Analyzing trace with hash 741082050, now seen corresponding path program 1 times [2023-11-06 22:05:10,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:10,795 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [779652251] [2023-11-06 22:05:10,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:10,796 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:10,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:10,969 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:05:10,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:10,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-06 22:05:10,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:11,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-06 22:05:11,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:11,016 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:05:11,017 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:11,017 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [779652251] [2023-11-06 22:05:11,017 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [779652251] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:05:11,017 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:05:11,017 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2023-11-06 22:05:11,017 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [274449435] [2023-11-06 22:05:11,018 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:05:11,018 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2023-11-06 22:05:11,018 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:11,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2023-11-06 22:05:11,019 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:05:11,019 INFO L87 Difference]: Start difference. First operand 465 states and 585 transitions. Second operand has 10 states, 10 states have (on average 4.9) internal successors, (49), 8 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:12,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:12,065 INFO L93 Difference]: Finished difference Result 1099 states and 1432 transitions. [2023-11-06 22:05:12,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2023-11-06 22:05:12,068 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.9) internal successors, (49), 8 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 60 [2023-11-06 22:05:12,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:12,076 INFO L225 Difference]: With dead ends: 1099 [2023-11-06 22:05:12,076 INFO L226 Difference]: Without dead ends: 734 [2023-11-06 22:05:12,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 282 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=258, Invalid=864, Unknown=0, NotChecked=0, Total=1122 [2023-11-06 22:05:12,081 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 533 mSDsluCounter, 538 mSDsCounter, 0 mSdLazyCounter, 527 mSolverCounterSat, 154 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 541 SdHoareTripleChecker+Valid, 652 SdHoareTripleChecker+Invalid, 681 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 154 IncrementalHoareTripleChecker+Valid, 527 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:12,082 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [541 Valid, 652 Invalid, 681 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [154 Valid, 527 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:05:12,084 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 734 states. [2023-11-06 22:05:12,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 734 to 604. [2023-11-06 22:05:12,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 604 states, 464 states have (on average 1.2112068965517242) internal successors, (562), 495 states have internal predecessors, (562), 75 states have call successors, (75), 57 states have call predecessors, (75), 64 states have return successors, (108), 73 states have call predecessors, (108), 75 states have call successors, (108) [2023-11-06 22:05:12,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 604 states to 604 states and 745 transitions. [2023-11-06 22:05:12,167 INFO L78 Accepts]: Start accepts. Automaton has 604 states and 745 transitions. Word has length 60 [2023-11-06 22:05:12,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:12,167 INFO L495 AbstractCegarLoop]: Abstraction has 604 states and 745 transitions. [2023-11-06 22:05:12,168 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.9) internal successors, (49), 8 states have internal predecessors, (49), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-06 22:05:12,168 INFO L276 IsEmpty]: Start isEmpty. Operand 604 states and 745 transitions. [2023-11-06 22:05:12,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2023-11-06 22:05:12,170 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:05:12,170 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:12,170 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 22:05:12,171 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:05:12,171 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:05:12,171 INFO L85 PathProgramCache]: Analyzing trace with hash -1062453768, now seen corresponding path program 1 times [2023-11-06 22:05:12,172 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:05:12,172 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30999959] [2023-11-06 22:05:12,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:12,172 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:05:12,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 22:05:12,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 22:05:12,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:05:12,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 22:05:12,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-06 22:05:12,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2023-11-06 22:05:12,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:05:12,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,455 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 94 [2023-11-06 22:05:12,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,458 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 18 proven. 9 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:05:12,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:05:12,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30999959] [2023-11-06 22:05:12,459 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30999959] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:05:12,459 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1160837798] [2023-11-06 22:05:12,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:05:12,459 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:05:12,459 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:05:12,463 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:05:12,495 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:05:12,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:05:12,605 INFO L262 TraceCheckSpWp]: Trace formula consists of 352 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 22:05:12,618 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:05:12,860 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 25 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:05:12,860 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 22:05:13,123 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 19 proven. 8 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2023-11-06 22:05:13,124 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1160837798] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 22:05:13,124 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 22:05:13,124 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2023-11-06 22:05:13,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1360749680] [2023-11-06 22:05:13,124 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 22:05:13,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-06 22:05:13,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:05:13,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-06 22:05:13,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:05:13,126 INFO L87 Difference]: Start difference. First operand 604 states and 745 transitions. Second operand has 16 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-06 22:05:14,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:05:14,650 INFO L93 Difference]: Finished difference Result 1310 states and 1663 transitions. [2023-11-06 22:05:14,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-06 22:05:14,651 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) Word has length 102 [2023-11-06 22:05:14,651 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:05:14,652 INFO L225 Difference]: With dead ends: 1310 [2023-11-06 22:05:14,652 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:05:14,657 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 224 SyntacticMatches, 4 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 407 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=301, Invalid=1421, Unknown=0, NotChecked=0, Total=1722 [2023-11-06 22:05:14,658 INFO L413 NwaCegarLoop]: 178 mSDtfsCounter, 467 mSDsluCounter, 1239 mSDsCounter, 0 mSdLazyCounter, 1146 mSolverCounterSat, 148 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 468 SdHoareTripleChecker+Valid, 1417 SdHoareTripleChecker+Invalid, 1294 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 148 IncrementalHoareTripleChecker+Valid, 1146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2023-11-06 22:05:14,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [468 Valid, 1417 Invalid, 1294 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [148 Valid, 1146 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2023-11-06 22:05:14,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:05:14,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:05:14,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:05:14,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:05:14,662 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102 [2023-11-06 22:05:14,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:05:14,662 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:05:14,662 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 7.9375) internal successors, (127), 11 states have internal predecessors, (127), 5 states have call successors, (20), 7 states have call predecessors, (20), 6 states have return successors, (16), 7 states have call predecessors, (16), 5 states have call successors, (16) [2023-11-06 22:05:14,662 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:05:14,663 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:05:14,666 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:05:14,680 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:05:14,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:05:14,876 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:05:21,353 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 179 186) no Hoare annotation was computed. [2023-11-06 22:05:21,354 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 179 186) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or (< 2 ~waterLevel~0) .cse0 (< ~switchedOnBeforeTS~0 1) .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2))) [2023-11-06 22:05:21,354 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 179 186) no Hoare annotation was computed. [2023-11-06 22:05:21,354 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 94 100) no Hoare annotation was computed. [2023-11-06 22:05:21,354 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 94 100) the Hoare annotation is: true [2023-11-06 22:05:21,354 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 964 975) the Hoare annotation is: true [2023-11-06 22:05:21,354 INFO L899 garLoopResultBuilder]: For program point L968-1(lines 964 975) no Hoare annotation was computed. [2023-11-06 22:05:21,354 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 964 975) no Hoare annotation was computed. [2023-11-06 22:05:21,355 INFO L902 garLoopResultBuilder]: At program point L801(line 801) the Hoare annotation is: true [2023-11-06 22:05:21,355 INFO L899 garLoopResultBuilder]: For program point L801-1(line 801) no Hoare annotation was computed. [2023-11-06 22:05:21,355 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 795 824) no Hoare annotation was computed. [2023-11-06 22:05:21,355 INFO L902 garLoopResultBuilder]: At program point L820(lines 795 824) the Hoare annotation is: true [2023-11-06 22:05:21,355 INFO L899 garLoopResultBuilder]: For program point L816(line 816) no Hoare annotation was computed. [2023-11-06 22:05:21,355 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 795 824) the Hoare annotation is: true [2023-11-06 22:05:21,356 INFO L899 garLoopResultBuilder]: For program point L809(lines 809 813) no Hoare annotation was computed. [2023-11-06 22:05:21,356 INFO L902 garLoopResultBuilder]: At program point L809-1(lines 809 813) the Hoare annotation is: true [2023-11-06 22:05:21,356 INFO L899 garLoopResultBuilder]: For program point L806(line 806) no Hoare annotation was computed. [2023-11-06 22:05:21,356 INFO L902 garLoopResultBuilder]: At program point L805-2(lines 805 819) the Hoare annotation is: true [2023-11-06 22:05:21,356 INFO L899 garLoopResultBuilder]: For program point L411(lines 411 417) no Hoare annotation was computed. [2023-11-06 22:05:21,357 INFO L895 garLoopResultBuilder]: At program point L147(line 147) the Hoare annotation is: (let ((.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or .cse3 .cse2 (not .cse1)) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse2))) [2023-11-06 22:05:21,357 INFO L895 garLoopResultBuilder]: At program point L147-1(lines 128 152) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse5 (= |old(~waterLevel~0)| 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (< 2 |old(~waterLevel~0)|)) (.cse3 (not .cse7))) (and (let ((.cse1 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2) (not .cse5) .cse6 .cse7)) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse5) .cse8 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse9) (let ((.cse10 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 .cse10 .cse2 .cse3) .cse6 .cse7 .cse9 (and .cse4 .cse10 .cse2))) (or .cse8 .cse9 .cse3)))) [2023-11-06 22:05:21,357 INFO L899 garLoopResultBuilder]: For program point L944(lines 944 948) no Hoare annotation was computed. [2023-11-06 22:05:21,357 INFO L899 garLoopResultBuilder]: For program point L81-1(lines 81 87) no Hoare annotation was computed. [2023-11-06 22:05:21,358 INFO L899 garLoopResultBuilder]: For program point L271(lines 271 275) no Hoare annotation was computed. [2023-11-06 22:05:21,358 INFO L895 garLoopResultBuilder]: At program point L944-2(lines 940 951) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-06 22:05:21,358 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 1031 1039) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-06 22:05:21,359 INFO L899 garLoopResultBuilder]: For program point L271-2(lines 271 275) no Hoare annotation was computed. [2023-11-06 22:05:21,359 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 67 93) no Hoare annotation was computed. [2023-11-06 22:05:21,359 INFO L895 garLoopResultBuilder]: At program point L408(line 408) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse3 (not .cse7)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (<= 1 ~switchedOnBeforeTS~0)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse10 (< 2 |old(~waterLevel~0)|))) (and (let ((.cse1 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2) .cse5 .cse6 .cse7)) (or .cse8 .cse5) (let ((.cse9 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 .cse9 .cse2 .cse3) .cse6 .cse7 .cse10 (and .cse4 .cse9 .cse2))) (or .cse8 (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0)) .cse10)))) [2023-11-06 22:05:21,359 INFO L899 garLoopResultBuilder]: For program point L408-1(line 408) no Hoare annotation was computed. [2023-11-06 22:05:21,360 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 1008 1016) the Hoare annotation is: (let ((.cse3 (= |old(~waterLevel~0)| 2)) (.cse10 (= 0 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (not .cse10)) (.cse9 (< |old(~pumpRunning~0)| 1)) (.cse4 (< 2 |old(~waterLevel~0)|)) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not .cse3))) (and (or .cse0 (and .cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse2 .cse3) .cse4) (let ((.cse5 (= ~waterLevel~0 1))) (or (and .cse1 .cse5 .cse6 .cse2) (and .cse7 .cse5 .cse6) .cse8 .cse9 .cse10)) (let ((.cse11 (<= ~waterLevel~0 2))) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse1 .cse11 .cse6 .cse2) .cse9 .cse10 .cse4 (and .cse7 .cse11 .cse6))) (or .cse0 (= 2 |timeShift_getWaterLevel_#res#1|) .cse8)))) [2023-11-06 22:05:21,360 INFO L899 garLoopResultBuilder]: For program point L74(lines 74 80) no Hoare annotation was computed. [2023-11-06 22:05:21,360 INFO L899 garLoopResultBuilder]: For program point L74-2(lines 70 92) no Hoare annotation was computed. [2023-11-06 22:05:21,361 INFO L899 garLoopResultBuilder]: For program point L136(lines 136 144) no Hoare annotation was computed. [2023-11-06 22:05:21,361 INFO L899 garLoopResultBuilder]: For program point L933(line 933) no Hoare annotation was computed. [2023-11-06 22:05:21,361 INFO L899 garLoopResultBuilder]: For program point L132(lines 132 149) no Hoare annotation was computed. [2023-11-06 22:05:21,361 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 929 936) the Hoare annotation is: (let ((.cse0 (< 2 |old(~waterLevel~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 .cse0) (or (not (= |old(~waterLevel~0)| 2)) .cse1 .cse2))) [2023-11-06 22:05:21,362 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 67 93) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse5) (or (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1))) [2023-11-06 22:05:21,362 INFO L895 garLoopResultBuilder]: At program point L393(line 393) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or (and (= ~pumpRunning~0 0) .cse3 .cse4) (not (= |old(~pumpRunning~0)| 0)) .cse5) (or (and .cse2 (= 2 ~waterLevel~0) .cse3) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1))) [2023-11-06 22:05:21,362 INFO L899 garLoopResultBuilder]: For program point L393-1(line 393) no Hoare annotation was computed. [2023-11-06 22:05:21,363 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 262 280) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-06 22:05:21,363 INFO L899 garLoopResultBuilder]: For program point L410(lines 410 420) no Hoare annotation was computed. [2023-11-06 22:05:21,363 INFO L899 garLoopResultBuilder]: For program point L406(lines 406 423) no Hoare annotation was computed. [2023-11-06 22:05:21,363 INFO L895 garLoopResultBuilder]: At program point L406-1(lines 398 426) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0)) (.cse11 (= |old(~waterLevel~0)| 2))) (let ((.cse5 (not .cse11)) (.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (not .cse7)) (.cse6 (< |old(~pumpRunning~0)| 1)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (<= ~waterLevel~0 2)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (and (let ((.cse1 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2) .cse5 .cse6 .cse7)) (or .cse8 (and .cse0 .cse9) .cse10 .cse3) (or .cse8 .cse5 (and (= 2 |timeShift_getWaterLevel_#res#1|) (= |timeShift___utac_acc__Specification5_spec__3_~tmp~6#1| 2))) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse11) .cse8 (and .cse0 .cse12 .cse9 .cse3) .cse7 .cse10) (or (< |old(~switchedOnBeforeTS~0)| 1) (and .cse0 .cse12 .cse2 .cse3) .cse6 .cse7 .cse10 (and .cse4 .cse12 .cse2))))) [2023-11-06 22:05:21,364 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 388 397) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< 2 |old(~waterLevel~0)|))) (and (or (and .cse0 (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or (and .cse0 .cse4 .cse1) (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse3 .cse5) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) .cse5))) [2023-11-06 22:05:21,364 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-06 22:05:21,364 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 67 93) no Hoare annotation was computed. [2023-11-06 22:05:21,365 INFO L895 garLoopResultBuilder]: At program point L138(line 138) the Hoare annotation is: (let ((.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2 (and .cse3 (<= ~waterLevel~0 2) .cse4)) (or (and .cse3 (= ~waterLevel~0 1) .cse4) (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse2))) [2023-11-06 22:05:21,365 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 933) no Hoare annotation was computed. [2023-11-06 22:05:21,365 INFO L899 garLoopResultBuilder]: For program point L320(lines 320 324) no Hoare annotation was computed. [2023-11-06 22:05:21,365 INFO L895 garLoopResultBuilder]: At program point L287(line 287) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0) .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4))) [2023-11-06 22:05:21,366 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 296 303) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-06 22:05:21,366 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 856 866) the Hoare annotation is: true [2023-11-06 22:05:21,366 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 905 911) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:05:21,366 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 870 892) the Hoare annotation is: true [2023-11-06 22:05:21,366 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:05:21,367 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:05:21,367 INFO L902 garLoopResultBuilder]: At program point L371(lines 308 375) the Hoare annotation is: true [2023-11-06 22:05:21,367 INFO L899 garLoopResultBuilder]: For program point L338(lines 338 344) no Hoare annotation was computed. [2023-11-06 22:05:21,367 INFO L899 garLoopResultBuilder]: For program point L338-1(lines 338 344) no Hoare annotation was computed. [2023-11-06 22:05:21,367 INFO L895 garLoopResultBuilder]: At program point L330(line 330) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-06 22:05:21,368 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 849 855) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:05:21,368 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:05:21,368 INFO L899 garLoopResultBuilder]: For program point L285(lines 285 291) no Hoare annotation was computed. [2023-11-06 22:05:21,368 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2023-11-06 22:05:21,368 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 380 387) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:05:21,368 INFO L899 garLoopResultBuilder]: For program point L880(lines 880 887) no Hoare annotation was computed. [2023-11-06 22:05:21,369 INFO L895 garLoopResultBuilder]: At program point L368(lines 317 369) the Hoare annotation is: false [2023-11-06 22:05:21,369 INFO L899 garLoopResultBuilder]: For program point L880-2(lines 880 887) no Hoare annotation was computed. [2023-11-06 22:05:21,369 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:05:21,369 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:05:21,369 INFO L899 garLoopResultBuilder]: For program point L356(lines 356 362) no Hoare annotation was computed. [2023-11-06 22:05:21,370 INFO L895 garLoopResultBuilder]: At program point L356-2(lines 348 363) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-06 22:05:21,370 INFO L899 garLoopResultBuilder]: For program point L319(lines 318 367) no Hoare annotation was computed. [2023-11-06 22:05:21,370 INFO L899 garLoopResultBuilder]: For program point L348(lines 348 363) no Hoare annotation was computed. [2023-11-06 22:05:21,370 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-06 22:05:21,370 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 281 295) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (<= ~waterLevel~0 2) (= 0 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2023-11-06 22:05:21,371 INFO L895 garLoopResultBuilder]: At program point L365(lines 318 367) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 2)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4 .cse5) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse4 .cse5))) [2023-11-06 22:05:21,371 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 919 927) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 22:05:21,371 INFO L899 garLoopResultBuilder]: For program point L328(lines 328 334) no Hoare annotation was computed. [2023-11-06 22:05:21,371 INFO L899 garLoopResultBuilder]: For program point L328-1(lines 328 334) no Hoare annotation was computed. [2023-11-06 22:05:21,371 INFO L899 garLoopResultBuilder]: For program point L252(lines 252 256) no Hoare annotation was computed. [2023-11-06 22:05:21,371 INFO L899 garLoopResultBuilder]: For program point L252-2(lines 252 256) no Hoare annotation was computed. [2023-11-06 22:05:21,372 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) .cse1) (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1))) [2023-11-06 22:05:21,372 INFO L899 garLoopResultBuilder]: For program point L110(lines 110 118) no Hoare annotation was computed. [2023-11-06 22:05:21,372 INFO L899 garLoopResultBuilder]: For program point L106(lines 106 123) no Hoare annotation was computed. [2023-11-06 22:05:21,372 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 102 126) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse1))) [2023-11-06 22:05:21,372 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 1017 1030) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0))) (and .cse2 (= 2 ~waterLevel~0)) .cse1)))) [2023-11-06 22:05:21,373 INFO L899 garLoopResultBuilder]: For program point L1021(lines 1021 1027) no Hoare annotation was computed. [2023-11-06 22:05:21,373 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 243 261) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0))) (and .cse2 (= 2 ~waterLevel~0)) .cse1)))) [2023-11-06 22:05:21,373 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 102 126) no Hoare annotation was computed. [2023-11-06 22:05:21,373 INFO L895 garLoopResultBuilder]: At program point L121(line 121) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1))) [2023-11-06 22:05:21,373 INFO L899 garLoopResultBuilder]: For program point L121-1(lines 102 126) no Hoare annotation was computed. [2023-11-06 22:05:21,374 INFO L895 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 976 984) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) .cse1))) [2023-11-06 22:05:21,374 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 187 197) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) .cse1))) [2023-11-06 22:05:21,374 INFO L899 garLoopResultBuilder]: For program point L169(lines 169 175) no Hoare annotation was computed. [2023-11-06 22:05:21,374 INFO L895 garLoopResultBuilder]: At program point L169-2(lines 162 178) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (let ((.cse2 (= 2 ~waterLevel~0))) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) .cse2) (and (= ~pumpRunning~0 0) .cse2) .cse1)))) [2023-11-06 22:05:21,374 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 153 160) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1) (or .cse0 (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) .cse1))) [2023-11-06 22:05:21,375 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 952 963) no Hoare annotation was computed. [2023-11-06 22:05:21,375 INFO L899 garLoopResultBuilder]: For program point L956-1(lines 952 963) no Hoare annotation was computed. [2023-11-06 22:05:21,375 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 952 963) the Hoare annotation is: (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse0 (< ~pumpRunning~0 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (< ~switchedOnBeforeTS~0 1) .cse1 .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse1 .cse3) (or .cse0 (= 2 ~waterLevel~0) (not (= |old(~waterLevel~0)| 2)) .cse2))) [2023-11-06 22:05:21,375 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 198 206) no Hoare annotation was computed. [2023-11-06 22:05:21,375 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 198 206) no Hoare annotation was computed. [2023-11-06 22:05:21,375 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 198 206) the Hoare annotation is: true [2023-11-06 22:05:21,378 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:05:21,381 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:05:21,443 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:05:21 BoogieIcfgContainer [2023-11-06 22:05:21,451 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:05:21,452 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:05:21,452 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:05:21,452 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:05:21,453 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:05:07" (3/4) ... [2023-11-06 22:05:21,455 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:05:21,459 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:05:21,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:05:21,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:05:21,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:05:21,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:05:21,460 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:05:21,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:05:21,461 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 22:05:21,481 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 22:05:21,482 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:05:21,482 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:05:21,483 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:05:21,484 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:05:21,514 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,515 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:05:21,516 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,517 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || ((2 == \result) && (tmp == 2)))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:05:21,518 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:05:21,518 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) [2023-11-06 22:05:21,518 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) && ((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:05:21,519 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) && (tmp == 1)) [2023-11-06 22:05:21,519 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && !((0 == systemActive))) && (\old(waterLevel) == 2))) || (2 < \old(waterLevel))) && ((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 == \result)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:05:21,520 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,520 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,520 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,521 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0)) && !((tmp == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,521 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,522 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,565 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) [2023-11-06 22:05:21,566 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:05:21,567 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,567 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,567 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || ((2 == \result) && (tmp == 2)))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) [2023-11-06 22:05:21,567 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) [2023-11-06 22:05:21,568 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) [2023-11-06 22:05:21,568 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) && ((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 22:05:21,568 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) && (tmp == 1)) [2023-11-06 22:05:21,568 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && !((0 == systemActive))) && (\old(waterLevel) == 2))) || (2 < \old(waterLevel))) && ((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 == \result)) || !((\old(waterLevel) == 2)))) [2023-11-06 22:05:21,569 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,569 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,569 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) [2023-11-06 22:05:21,569 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0)) && !((tmp == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,570 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,570 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,570 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,570 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 22:05:21,592 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:05:21,593 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:05:21,593 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:05:21,594 INFO L158 Benchmark]: Toolchain (without parser) took 15740.72ms. Allocated memory was 127.9MB in the beginning and 224.4MB in the end (delta: 96.5MB). Free memory was 90.8MB in the beginning and 131.4MB in the end (delta: -40.6MB). Peak memory consumption was 57.3MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,594 INFO L158 Benchmark]: CDTParser took 0.38ms. Allocated memory is still 127.9MB. Free memory is still 97.2MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:05:21,594 INFO L158 Benchmark]: CACSL2BoogieTranslator took 579.44ms. Allocated memory is still 127.9MB. Free memory was 90.4MB in the beginning and 70.5MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,595 INFO L158 Benchmark]: Boogie Procedure Inliner took 78.58ms. Allocated memory is still 127.9MB. Free memory was 70.5MB in the beginning and 68.2MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,595 INFO L158 Benchmark]: Boogie Preprocessor took 43.49ms. Allocated memory is still 127.9MB. Free memory was 68.2MB in the beginning and 66.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,596 INFO L158 Benchmark]: RCFGBuilder took 604.01ms. Allocated memory was 127.9MB in the beginning and 186.6MB in the end (delta: 58.7MB). Free memory was 66.5MB in the beginning and 158.5MB in the end (delta: -92.0MB). Peak memory consumption was 26.0MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,596 INFO L158 Benchmark]: TraceAbstraction took 14285.33ms. Allocated memory was 186.6MB in the beginning and 224.4MB in the end (delta: 37.7MB). Free memory was 157.6MB in the beginning and 139.8MB in the end (delta: 17.8MB). Peak memory consumption was 134.4MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,596 INFO L158 Benchmark]: Witness Printer took 141.23ms. Allocated memory is still 224.4MB. Free memory was 139.8MB in the beginning and 131.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:05:21,598 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.38ms. Allocated memory is still 127.9MB. Free memory is still 97.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 579.44ms. Allocated memory is still 127.9MB. Free memory was 90.4MB in the beginning and 70.5MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 78.58ms. Allocated memory is still 127.9MB. Free memory was 70.5MB in the beginning and 68.2MB in the end (delta: 2.2MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 43.49ms. Allocated memory is still 127.9MB. Free memory was 68.2MB in the beginning and 66.5MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 604.01ms. Allocated memory was 127.9MB in the beginning and 186.6MB in the end (delta: 58.7MB). Free memory was 66.5MB in the beginning and 158.5MB in the end (delta: -92.0MB). Peak memory consumption was 26.0MB. Max. memory is 16.1GB. * TraceAbstraction took 14285.33ms. Allocated memory was 186.6MB in the beginning and 224.4MB in the end (delta: 37.7MB). Free memory was 157.6MB in the beginning and 139.8MB in the end (delta: 17.8MB). Peak memory consumption was 134.4MB. Max. memory is 16.1GB. * Witness Printer took 141.23ms. Allocated memory is still 224.4MB. Free memory was 139.8MB in the beginning and 131.4MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 304]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [304] - GenericResultAtLocation [Line: 376]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [376] - GenericResultAtLocation [Line: 427]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [427] - GenericResultAtLocation [Line: 793]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [793] - GenericResultAtLocation [Line: 893]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [893] - GenericResultAtLocation [Line: 928]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [928] - GenericResultAtLocation [Line: 937]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [937] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 933]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 104 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.1s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1881 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1848 mSDsluCounter, 4705 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3512 mSDsCounter, 492 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2334 IncrementalHoareTripleChecker+Invalid, 2826 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 492 mSolverCounterUnsat, 1193 mSDtfsCounter, 2334 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 417 GetRequests, 299 SyntacticMatches, 4 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 707 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=604occurred in iteration=9, InterpolantAutomatonStates: 110, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 10 MinimizatonAttempts, 176 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 1597 PreInvPairs, 1905 NumberOfFragments, 1834 HoareAnnotationTreeSize, 1597 FomulaSimplifications, 5765 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 49 FomulaSimplificationsInter, 11992 FormulaSimplificationTreeSizeReductionInter, 5.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 639 NumberOfCodeBlocks, 639 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 729 ConstructedInterpolants, 0 QuantifiedInterpolants, 1403 SizeOfPredicates, 3 NumberOfNonLiveVariables, 352 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 103/129 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 398]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) || ((2 == \result) && (tmp == 2)))) && (((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (\old(waterLevel) == waterLevel)) && !((0 == systemActive)))) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 317]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 262]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 940]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 795]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 805]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1017]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && !((\result == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 1031]: Loop Invariant Derived loop invariant: (((((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && (!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel)))) - InvariantResult [Line: 243]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\result == 0)) && (tmp___0 == 0)) && !((tmp == 0)))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 856]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && (tmp == 1)) && !((0 == systemActive))) - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) && (tmp == 1)) - InvariantResult [Line: 318]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || (((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 296]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && (tmp == 1)) && !((0 == systemActive))) || ((((((pumpRunning == 0) && (\result == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (tmp == 1)) && !((0 == systemActive)))) || ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (splverifierCounter == 0)) && (tmp == 1)) && !((0 == systemActive)))) - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) && ((((\old(switchedOnBeforeTS) < 1) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: ((((((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && !((0 == systemActive))) && (\old(waterLevel) == 2))) || (2 < \old(waterLevel))) && ((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 == \result)) || !((\old(waterLevel) == 2)))) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 388]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) - InvariantResult [Line: 187]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: (((((2 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 128]: Loop Invariant Derived loop invariant: (((((((((((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS))) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((((((\old(switchedOnBeforeTS) < 1) || ((((pumpRunning == 0) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) RESULT: Ultimate proved your program to be correct! [2023-11-06 22:05:21,639 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d2185910-fc3f-48e9-afdf-9421d6efe27a/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE