./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 23:00:18,473 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 23:00:18,598 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 23:00:18,607 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 23:00:18,608 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 23:00:18,649 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 23:00:18,650 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 23:00:18,651 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 23:00:18,652 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 23:00:18,657 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 23:00:18,659 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 23:00:18,659 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 23:00:18,660 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 23:00:18,662 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 23:00:18,662 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 23:00:18,663 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 23:00:18,663 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 23:00:18,663 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 23:00:18,664 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 23:00:18,664 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 23:00:18,665 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 23:00:18,665 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 23:00:18,666 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 23:00:18,666 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 23:00:18,667 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 23:00:18,668 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 23:00:18,668 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 23:00:18,669 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 23:00:18,669 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:00:18,670 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 23:00:18,671 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 23:00:18,671 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 23:00:18,672 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 23:00:18,672 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 23:00:18,672 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 23:00:18,672 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 23:00:18,673 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 23:00:18,673 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 23:00:18,673 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 23:00:18,674 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 323b2112d56f35ec9fc5a7837411d8e54d2d46e3d8981d77e080eaf0dd99497b [2023-11-06 23:00:18,989 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 23:00:19,017 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 23:00:19,021 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 23:00:19,023 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 23:00:19,023 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 23:00:19,025 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2023-11-06 23:00:22,486 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 23:00:22,813 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 23:00:22,814 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c [2023-11-06 23:00:22,833 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/data/869c9430d/f79314fa27cf482fab051b156fe4c4c8/FLAG6b88e9227 [2023-11-06 23:00:22,859 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/data/869c9430d/f79314fa27cf482fab051b156fe4c4c8 [2023-11-06 23:00:22,863 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 23:00:22,867 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 23:00:22,869 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 23:00:22,869 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 23:00:22,876 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 23:00:22,877 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:00:22" (1/1) ... [2023-11-06 23:00:22,879 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5f1d7489 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:22, skipping insertion in model container [2023-11-06 23:00:22,879 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 11:00:22" (1/1) ... [2023-11-06 23:00:22,951 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 23:00:23,201 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2023-11-06 23:00:23,270 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:00:23,285 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 23:00:23,311 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] [2023-11-06 23:00:23,313 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [101] [2023-11-06 23:00:23,313 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [176] [2023-11-06 23:00:23,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [450] [2023-11-06 23:00:23,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [553] [2023-11-06 23:00:23,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [653] [2023-11-06 23:00:23,315 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [662] [2023-11-06 23:00:23,315 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [697] [2023-11-06 23:00:23,376 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/sv-benchmarks/c/product-lines/minepump_spec5_product64.cil.c[9626,9639] [2023-11-06 23:00:23,454 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 23:00:23,486 INFO L206 MainTranslator]: Completed translation [2023-11-06 23:00:23,486 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23 WrapperNode [2023-11-06 23:00:23,487 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 23:00:23,488 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 23:00:23,488 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 23:00:23,489 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 23:00:23,499 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,535 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,613 INFO L138 Inliner]: procedures = 61, calls = 110, calls flagged for inlining = 27, calls inlined = 24, statements flattened = 249 [2023-11-06 23:00:23,614 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 23:00:23,615 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 23:00:23,615 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 23:00:23,616 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 23:00:23,628 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,629 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,644 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,649 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,673 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,682 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,685 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,687 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,704 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 23:00:23,705 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 23:00:23,706 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 23:00:23,706 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 23:00:23,707 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (1/1) ... [2023-11-06 23:00:23,716 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 23:00:23,733 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:00:23,761 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 23:00:23,786 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 23:00:23,822 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 23:00:23,822 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 23:00:23,822 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 23:00:23,823 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 23:00:23,825 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 23:00:23,826 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 23:00:23,827 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 23:00:23,827 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:00:23,827 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:00:23,827 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 23:00:23,828 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 23:00:23,828 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 23:00:23,828 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 23:00:23,828 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-06 23:00:23,829 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-06 23:00:23,829 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 23:00:23,830 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 23:00:23,830 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 23:00:23,830 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 23:00:23,831 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 23:00:23,832 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 23:00:23,832 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 23:00:23,835 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 23:00:23,835 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 23:00:23,986 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 23:00:23,992 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 23:00:24,408 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 23:00:24,417 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 23:00:24,418 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 23:00:24,420 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:00:24 BoogieIcfgContainer [2023-11-06 23:00:24,420 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 23:00:24,423 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 23:00:24,423 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 23:00:24,427 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 23:00:24,427 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 11:00:22" (1/3) ... [2023-11-06 23:00:24,428 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5fc9ebb6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:00:24, skipping insertion in model container [2023-11-06 23:00:24,428 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 11:00:23" (2/3) ... [2023-11-06 23:00:24,428 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5fc9ebb6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 11:00:24, skipping insertion in model container [2023-11-06 23:00:24,429 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:00:24" (3/3) ... [2023-11-06 23:00:24,430 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product64.cil.c [2023-11-06 23:00:24,452 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 23:00:24,453 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 23:00:24,520 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 23:00:24,529 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6437a737, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 23:00:24,529 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 23:00:24,535 INFO L276 IsEmpty]: Start isEmpty. Operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-06 23:00:24,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 23:00:24,551 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:24,552 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:24,553 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:24,559 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:24,559 INFO L85 PathProgramCache]: Analyzing trace with hash 1423497268, now seen corresponding path program 1 times [2023-11-06 23:00:24,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:24,569 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1719600471] [2023-11-06 23:00:24,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:24,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:24,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:24,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-06 23:00:24,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:24,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2023-11-06 23:00:24,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:24,855 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:24,856 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:24,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1719600471] [2023-11-06 23:00:24,857 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1719600471] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:24,858 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:24,858 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 23:00:24,860 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1988152845] [2023-11-06 23:00:24,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:24,868 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 23:00:24,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:24,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 23:00:24,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:00:24,909 INFO L87 Difference]: Start difference. First operand has 118 states, 87 states have (on average 1.3563218390804597) internal successors, (118), 98 states have internal predecessors, (118), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:24,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:24,978 INFO L93 Difference]: Finished difference Result 227 states and 306 transitions. [2023-11-06 23:00:24,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 23:00:24,981 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2023-11-06 23:00:24,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:24,992 INFO L225 Difference]: With dead ends: 227 [2023-11-06 23:00:24,993 INFO L226 Difference]: Without dead ends: 109 [2023-11-06 23:00:24,998 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 23:00:25,002 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:25,003 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:00:25,024 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109 states. [2023-11-06 23:00:25,056 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109 to 109. [2023-11-06 23:00:25,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109 states, 80 states have (on average 1.3) internal successors, (104), 90 states have internal predecessors, (104), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 23:00:25,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109 states to 109 states and 141 transitions. [2023-11-06 23:00:25,064 INFO L78 Accepts]: Start accepts. Automaton has 109 states and 141 transitions. Word has length 32 [2023-11-06 23:00:25,065 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:25,065 INFO L495 AbstractCegarLoop]: Abstraction has 109 states and 141 transitions. [2023-11-06 23:00:25,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:25,066 INFO L276 IsEmpty]: Start isEmpty. Operand 109 states and 141 transitions. [2023-11-06 23:00:25,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2023-11-06 23:00:25,071 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:25,071 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:25,072 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 23:00:25,072 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:25,073 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:25,073 INFO L85 PathProgramCache]: Analyzing trace with hash -1062885571, now seen corresponding path program 1 times [2023-11-06 23:00:25,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:25,074 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128724941] [2023-11-06 23:00:25,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:25,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:25,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 23:00:25,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 23:00:25,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,305 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:25,308 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:25,313 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128724941] [2023-11-06 23:00:25,314 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128724941] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:25,314 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:25,314 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 23:00:25,315 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [168873800] [2023-11-06 23:00:25,315 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:25,316 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 23:00:25,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:25,317 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 23:00:25,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:00:25,318 INFO L87 Difference]: Start difference. First operand 109 states and 141 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:25,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:25,348 INFO L93 Difference]: Finished difference Result 178 states and 230 transitions. [2023-11-06 23:00:25,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 23:00:25,349 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 33 [2023-11-06 23:00:25,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:25,351 INFO L225 Difference]: With dead ends: 178 [2023-11-06 23:00:25,352 INFO L226 Difference]: Without dead ends: 100 [2023-11-06 23:00:25,353 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 23:00:25,355 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 17 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:25,356 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 234 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 23:00:25,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2023-11-06 23:00:25,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 100. [2023-11-06 23:00:25,372 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 23:00:25,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100 states to 100 states and 129 transitions. [2023-11-06 23:00:25,375 INFO L78 Accepts]: Start accepts. Automaton has 100 states and 129 transitions. Word has length 33 [2023-11-06 23:00:25,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:25,376 INFO L495 AbstractCegarLoop]: Abstraction has 100 states and 129 transitions. [2023-11-06 23:00:25,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:25,376 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 129 transitions. [2023-11-06 23:00:25,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2023-11-06 23:00:25,379 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:25,379 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:25,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 23:00:25,380 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:25,380 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:25,380 INFO L85 PathProgramCache]: Analyzing trace with hash 214115468, now seen corresponding path program 1 times [2023-11-06 23:00:25,381 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:25,381 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [865643632] [2023-11-06 23:00:25,381 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:25,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:25,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:25,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2023-11-06 23:00:25,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:25,640 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:25,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:25,641 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [865643632] [2023-11-06 23:00:25,641 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [865643632] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:25,641 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:25,641 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:00:25,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106508021] [2023-11-06 23:00:25,642 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:25,646 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:00:25,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:25,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:00:25,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:00:25,648 INFO L87 Difference]: Start difference. First operand 100 states and 129 transitions. Second operand has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:00:25,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:25,852 INFO L93 Difference]: Finished difference Result 239 states and 312 transitions. [2023-11-06 23:00:25,852 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 23:00:25,853 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 38 [2023-11-06 23:00:25,853 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:25,856 INFO L225 Difference]: With dead ends: 239 [2023-11-06 23:00:25,856 INFO L226 Difference]: Without dead ends: 147 [2023-11-06 23:00:25,858 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2023-11-06 23:00:25,860 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 190 mSDsluCounter, 287 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:25,861 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 424 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:00:25,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 147 states. [2023-11-06 23:00:25,913 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 147 to 144. [2023-11-06 23:00:25,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 107 states have (on average 1.3271028037383177) internal successors, (142), 120 states have internal predecessors, (142), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (23), 16 states have call predecessors, (23), 22 states have call successors, (23) [2023-11-06 23:00:25,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 187 transitions. [2023-11-06 23:00:25,917 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 187 transitions. Word has length 38 [2023-11-06 23:00:25,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:25,918 INFO L495 AbstractCegarLoop]: Abstraction has 144 states and 187 transitions. [2023-11-06 23:00:25,919 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.2) internal successors, (31), 5 states have internal predecessors, (31), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-06 23:00:25,919 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 187 transitions. [2023-11-06 23:00:25,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2023-11-06 23:00:25,922 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:25,923 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:25,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 23:00:25,923 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:25,924 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:25,924 INFO L85 PathProgramCache]: Analyzing trace with hash 384205224, now seen corresponding path program 1 times [2023-11-06 23:00:25,925 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:25,925 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524623247] [2023-11-06 23:00:25,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:25,926 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:25,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 23:00:26,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2023-11-06 23:00:26,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,133 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 23:00:26,134 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:26,134 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524623247] [2023-11-06 23:00:26,134 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [524623247] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:26,135 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:26,135 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:00:26,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149770423] [2023-11-06 23:00:26,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:26,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:00:26,137 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:26,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:00:26,138 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:00:26,138 INFO L87 Difference]: Start difference. First operand 144 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:26,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:26,418 INFO L93 Difference]: Finished difference Result 331 states and 439 transitions. [2023-11-06 23:00:26,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 23:00:26,419 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 41 [2023-11-06 23:00:26,420 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:26,429 INFO L225 Difference]: With dead ends: 331 [2023-11-06 23:00:26,430 INFO L226 Difference]: Without dead ends: 195 [2023-11-06 23:00:26,433 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-06 23:00:26,437 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 65 mSDsluCounter, 417 mSDsCounter, 0 mSdLazyCounter, 82 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 544 SdHoareTripleChecker+Invalid, 94 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 82 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:26,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 544 Invalid, 94 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 82 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:00:26,446 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195 states. [2023-11-06 23:00:26,509 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195 to 191. [2023-11-06 23:00:26,510 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 191 states, 143 states have (on average 1.2587412587412588) internal successors, (180), 155 states have internal predecessors, (180), 26 states have call successors, (26), 21 states have call predecessors, (26), 21 states have return successors, (34), 24 states have call predecessors, (34), 26 states have call successors, (34) [2023-11-06 23:00:26,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 240 transitions. [2023-11-06 23:00:26,515 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 240 transitions. Word has length 41 [2023-11-06 23:00:26,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:26,518 INFO L495 AbstractCegarLoop]: Abstraction has 191 states and 240 transitions. [2023-11-06 23:00:26,519 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.0) internal successors, (36), 5 states have internal predecessors, (36), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-06 23:00:26,519 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 240 transitions. [2023-11-06 23:00:26,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-06 23:00:26,535 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:26,535 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:26,535 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 23:00:26,536 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:26,536 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:26,538 INFO L85 PathProgramCache]: Analyzing trace with hash -578050563, now seen corresponding path program 1 times [2023-11-06 23:00:26,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:26,539 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851096014] [2023-11-06 23:00:26,539 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:26,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:26,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:26,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 23:00:26,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:26,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:26,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-06 23:00:26,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:26,830 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:26,831 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:26,831 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851096014] [2023-11-06 23:00:26,831 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851096014] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:26,832 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:26,832 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 23:00:26,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1698239888] [2023-11-06 23:00:26,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:26,835 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 23:00:26,835 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:26,836 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 23:00:26,836 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 23:00:26,837 INFO L87 Difference]: Start difference. First operand 191 states and 240 transitions. Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:00:27,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:27,109 INFO L93 Difference]: Finished difference Result 411 states and 532 transitions. [2023-11-06 23:00:27,110 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:00:27,110 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2023-11-06 23:00:27,111 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:27,113 INFO L225 Difference]: With dead ends: 411 [2023-11-06 23:00:27,114 INFO L226 Difference]: Without dead ends: 228 [2023-11-06 23:00:27,115 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 23:00:27,117 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 77 mSDsluCounter, 340 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:27,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 444 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 23:00:27,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 228 states. [2023-11-06 23:00:27,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 228 to 221. [2023-11-06 23:00:27,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 166 states have (on average 1.2469879518072289) internal successors, (207), 178 states have internal predecessors, (207), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (41), 30 states have call predecessors, (41), 28 states have call successors, (41) [2023-11-06 23:00:27,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 276 transitions. [2023-11-06 23:00:27,178 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 276 transitions. Word has length 65 [2023-11-06 23:00:27,178 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:27,179 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 276 transitions. [2023-11-06 23:00:27,179 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 5 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:00:27,180 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 276 transitions. [2023-11-06 23:00:27,185 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2023-11-06 23:00:27,185 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:27,185 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:27,186 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 23:00:27,186 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:27,186 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:27,187 INFO L85 PathProgramCache]: Analyzing trace with hash 783466595, now seen corresponding path program 1 times [2023-11-06 23:00:27,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:27,187 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921283790] [2023-11-06 23:00:27,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:27,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:27,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-06 23:00:27,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2023-11-06 23:00:27,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:27,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:27,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-06 23:00:27,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,295 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:27,295 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:27,295 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921283790] [2023-11-06 23:00:27,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921283790] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:27,296 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:27,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-06 23:00:27,296 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [406044820] [2023-11-06 23:00:27,297 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:27,297 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2023-11-06 23:00:27,297 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:27,298 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-06 23:00:27,299 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-06 23:00:27,299 INFO L87 Difference]: Start difference. First operand 221 states and 276 transitions. Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 23:00:27,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:27,491 INFO L93 Difference]: Finished difference Result 438 states and 547 transitions. [2023-11-06 23:00:27,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 23:00:27,492 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 68 [2023-11-06 23:00:27,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:27,494 INFO L225 Difference]: With dead ends: 438 [2023-11-06 23:00:27,495 INFO L226 Difference]: Without dead ends: 225 [2023-11-06 23:00:27,496 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:00:27,497 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 107 mSDsluCounter, 153 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:27,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 282 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:00:27,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2023-11-06 23:00:27,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 221. [2023-11-06 23:00:27,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 221 states, 166 states have (on average 1.2409638554216869) internal successors, (206), 178 states have internal predecessors, (206), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2023-11-06 23:00:27,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 273 transitions. [2023-11-06 23:00:27,533 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 273 transitions. Word has length 68 [2023-11-06 23:00:27,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:27,533 INFO L495 AbstractCegarLoop]: Abstraction has 221 states and 273 transitions. [2023-11-06 23:00:27,534 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 13.75) internal successors, (55), 3 states have internal predecessors, (55), 3 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 23:00:27,534 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 273 transitions. [2023-11-06 23:00:27,535 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-06 23:00:27,535 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:27,536 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:27,536 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 23:00:27,536 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:27,537 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:27,537 INFO L85 PathProgramCache]: Analyzing trace with hash 808152831, now seen corresponding path program 1 times [2023-11-06 23:00:27,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:27,538 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1156926633] [2023-11-06 23:00:27,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:27,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:27,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:27,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 23:00:27,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:27,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:27,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-06 23:00:27,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:27,697 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:27,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:27,698 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1156926633] [2023-11-06 23:00:27,698 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1156926633] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:27,698 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:27,699 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:00:27,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1955277004] [2023-11-06 23:00:27,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:27,700 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:00:27,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:27,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:00:27,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:00:27,701 INFO L87 Difference]: Start difference. First operand 221 states and 273 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:00:27,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:27,915 INFO L93 Difference]: Finished difference Result 444 states and 562 transitions. [2023-11-06 23:00:27,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 23:00:27,916 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 65 [2023-11-06 23:00:27,916 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:27,919 INFO L225 Difference]: With dead ends: 444 [2023-11-06 23:00:27,919 INFO L226 Difference]: Without dead ends: 231 [2023-11-06 23:00:27,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:00:27,922 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 81 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 145 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:27,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 345 Invalid, 145 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 23:00:27,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 231 states. [2023-11-06 23:00:27,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 231 to 223. [2023-11-06 23:00:27,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 223 states, 168 states have (on average 1.2380952380952381) internal successors, (208), 180 states have internal predecessors, (208), 28 states have call successors, (28), 21 states have call predecessors, (28), 26 states have return successors, (39), 30 states have call predecessors, (39), 28 states have call successors, (39) [2023-11-06 23:00:27,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 223 states to 223 states and 275 transitions. [2023-11-06 23:00:27,956 INFO L78 Accepts]: Start accepts. Automaton has 223 states and 275 transitions. Word has length 65 [2023-11-06 23:00:27,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:27,957 INFO L495 AbstractCegarLoop]: Abstraction has 223 states and 275 transitions. [2023-11-06 23:00:27,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 23:00:27,958 INFO L276 IsEmpty]: Start isEmpty. Operand 223 states and 275 transitions. [2023-11-06 23:00:27,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2023-11-06 23:00:27,959 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:27,959 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:27,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 23:00:27,960 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:27,961 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:27,961 INFO L85 PathProgramCache]: Analyzing trace with hash 1509752705, now seen corresponding path program 1 times [2023-11-06 23:00:27,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:27,961 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2080399582] [2023-11-06 23:00:27,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:27,962 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:27,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:28,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2023-11-06 23:00:28,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:28,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:28,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 57 [2023-11-06 23:00:28,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,142 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:28,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:28,143 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2080399582] [2023-11-06 23:00:28,143 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2080399582] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:28,143 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:28,143 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 23:00:28,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1734210254] [2023-11-06 23:00:28,144 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:28,144 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 23:00:28,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:28,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 23:00:28,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 23:00:28,146 INFO L87 Difference]: Start difference. First operand 223 states and 275 transitions. Second operand has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 23:00:28,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:28,511 INFO L93 Difference]: Finished difference Result 661 states and 844 transitions. [2023-11-06 23:00:28,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 23:00:28,512 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 65 [2023-11-06 23:00:28,513 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:28,517 INFO L225 Difference]: With dead ends: 661 [2023-11-06 23:00:28,518 INFO L226 Difference]: Without dead ends: 446 [2023-11-06 23:00:28,519 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 14 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 23:00:28,521 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 259 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 267 SdHoareTripleChecker+Valid, 363 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:28,521 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [267 Valid, 363 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 23:00:28,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 446 states. [2023-11-06 23:00:28,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 446 to 444. [2023-11-06 23:00:28,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 444 states, 334 states have (on average 1.2125748502994012) internal successors, (405), 354 states have internal predecessors, (405), 59 states have call successors, (59), 48 states have call predecessors, (59), 50 states have return successors, (86), 59 states have call predecessors, (86), 59 states have call successors, (86) [2023-11-06 23:00:28,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 444 states to 444 states and 550 transitions. [2023-11-06 23:00:28,580 INFO L78 Accepts]: Start accepts. Automaton has 444 states and 550 transitions. Word has length 65 [2023-11-06 23:00:28,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:28,580 INFO L495 AbstractCegarLoop]: Abstraction has 444 states and 550 transitions. [2023-11-06 23:00:28,581 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 10.4) internal successors, (52), 4 states have internal predecessors, (52), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 23:00:28,581 INFO L276 IsEmpty]: Start isEmpty. Operand 444 states and 550 transitions. [2023-11-06 23:00:28,582 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2023-11-06 23:00:28,582 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:28,583 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:28,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 23:00:28,583 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:28,584 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:28,584 INFO L85 PathProgramCache]: Analyzing trace with hash 920584039, now seen corresponding path program 1 times [2023-11-06 23:00:28,584 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:28,584 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707213952] [2023-11-06 23:00:28,584 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:28,585 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:28,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:28,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 23:00:28,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2023-11-06 23:00:28,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:28,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:28,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-06 23:00:28,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:28,936 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 23:00:28,937 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:28,937 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707213952] [2023-11-06 23:00:28,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707213952] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 23:00:28,938 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 23:00:28,938 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2023-11-06 23:00:28,938 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744495729] [2023-11-06 23:00:28,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 23:00:28,939 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2023-11-06 23:00:28,939 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:28,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2023-11-06 23:00:28,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2023-11-06 23:00:28,941 INFO L87 Difference]: Start difference. First operand 444 states and 550 transitions. Second operand has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 23:00:30,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:30,157 INFO L93 Difference]: Finished difference Result 1308 states and 1670 transitions. [2023-11-06 23:00:30,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2023-11-06 23:00:30,159 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) Word has length 69 [2023-11-06 23:00:30,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:30,169 INFO L225 Difference]: With dead ends: 1308 [2023-11-06 23:00:30,170 INFO L226 Difference]: Without dead ends: 965 [2023-11-06 23:00:30,173 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 41 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=153, Invalid=549, Unknown=0, NotChecked=0, Total=702 [2023-11-06 23:00:30,176 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 590 mSDsluCounter, 470 mSDsCounter, 0 mSdLazyCounter, 605 mSolverCounterSat, 198 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 598 SdHoareTripleChecker+Valid, 581 SdHoareTripleChecker+Invalid, 803 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 605 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:30,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [598 Valid, 581 Invalid, 803 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 605 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2023-11-06 23:00:30,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 965 states. [2023-11-06 23:00:30,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 965 to 822. [2023-11-06 23:00:30,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 822 states, 617 states have (on average 1.2106969205834683) internal successors, (747), 658 states have internal predecessors, (747), 109 states have call successors, (109), 83 states have call predecessors, (109), 95 states have return successors, (160), 110 states have call predecessors, (160), 109 states have call successors, (160) [2023-11-06 23:00:30,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 822 states to 822 states and 1016 transitions. [2023-11-06 23:00:30,352 INFO L78 Accepts]: Start accepts. Automaton has 822 states and 1016 transitions. Word has length 69 [2023-11-06 23:00:30,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:30,353 INFO L495 AbstractCegarLoop]: Abstraction has 822 states and 1016 transitions. [2023-11-06 23:00:30,353 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.0) internal successors, (54), 7 states have internal predecessors, (54), 4 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 4 states have call successors, (6) [2023-11-06 23:00:30,354 INFO L276 IsEmpty]: Start isEmpty. Operand 822 states and 1016 transitions. [2023-11-06 23:00:30,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2023-11-06 23:00:30,362 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:30,363 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:30,363 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-06 23:00:30,364 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:30,364 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:30,364 INFO L85 PathProgramCache]: Analyzing trace with hash 1227003405, now seen corresponding path program 1 times [2023-11-06 23:00:30,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:30,365 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [435367396] [2023-11-06 23:00:30,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:30,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:30,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:30,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 23:00:30,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 23:00:30,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 23:00:30,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:30,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:30,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2023-11-06 23:00:30,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2023-11-06 23:00:30,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 93 [2023-11-06 23:00:30,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 23:00:30,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:30,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2023-11-06 23:00:30,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,814 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 18 proven. 11 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 23:00:30,814 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:30,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [435367396] [2023-11-06 23:00:30,814 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [435367396] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:00:30,814 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783812530] [2023-11-06 23:00:30,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:30,815 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:00:30,815 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:00:30,823 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:00:30,851 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 23:00:30,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:30,965 INFO L262 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 23:00:30,975 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:00:31,225 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 31 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 23:00:31,226 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 23:00:31,528 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 19 proven. 10 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2023-11-06 23:00:31,528 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1783812530] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 23:00:31,528 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 23:00:31,529 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 6, 6] total 16 [2023-11-06 23:00:31,529 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672636149] [2023-11-06 23:00:31,529 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 23:00:31,530 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2023-11-06 23:00:31,530 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:31,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2023-11-06 23:00:31,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-06 23:00:31,532 INFO L87 Difference]: Start difference. First operand 822 states and 1016 transitions. Second operand has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2023-11-06 23:00:33,505 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:33,505 INFO L93 Difference]: Finished difference Result 1858 states and 2365 transitions. [2023-11-06 23:00:33,506 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2023-11-06 23:00:33,506 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) Word has length 123 [2023-11-06 23:00:33,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:33,517 INFO L225 Difference]: With dead ends: 1858 [2023-11-06 23:00:33,517 INFO L226 Difference]: Without dead ends: 1133 [2023-11-06 23:00:33,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 331 GetRequests, 278 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 682 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=429, Invalid=2121, Unknown=0, NotChecked=0, Total=2550 [2023-11-06 23:00:33,523 INFO L413 NwaCegarLoop]: 185 mSDtfsCounter, 556 mSDsluCounter, 1308 mSDsCounter, 0 mSdLazyCounter, 1437 mSolverCounterSat, 211 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 557 SdHoareTripleChecker+Valid, 1493 SdHoareTripleChecker+Invalid, 1648 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 211 IncrementalHoareTripleChecker+Valid, 1437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:33,525 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [557 Valid, 1493 Invalid, 1648 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [211 Valid, 1437 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-11-06 23:00:33,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1133 states. [2023-11-06 23:00:33,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1133 to 919. [2023-11-06 23:00:33,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 919 states, 682 states have (on average 1.187683284457478) internal successors, (810), 735 states have internal predecessors, (810), 126 states have call successors, (126), 104 states have call predecessors, (126), 110 states have return successors, (159), 116 states have call predecessors, (159), 126 states have call successors, (159) [2023-11-06 23:00:33,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 919 states to 919 states and 1095 transitions. [2023-11-06 23:00:33,699 INFO L78 Accepts]: Start accepts. Automaton has 919 states and 1095 transitions. Word has length 123 [2023-11-06 23:00:33,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:33,700 INFO L495 AbstractCegarLoop]: Abstraction has 919 states and 1095 transitions. [2023-11-06 23:00:33,701 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 9.0625) internal successors, (145), 11 states have internal predecessors, (145), 5 states have call successors, (29), 7 states have call predecessors, (29), 6 states have return successors, (23), 7 states have call predecessors, (23), 5 states have call successors, (23) [2023-11-06 23:00:33,701 INFO L276 IsEmpty]: Start isEmpty. Operand 919 states and 1095 transitions. [2023-11-06 23:00:33,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 220 [2023-11-06 23:00:33,710 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 23:00:33,710 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:33,723 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 23:00:33,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-06 23:00:33,923 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 23:00:33,924 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 23:00:33,924 INFO L85 PathProgramCache]: Analyzing trace with hash 190109661, now seen corresponding path program 1 times [2023-11-06 23:00:33,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 23:00:33,924 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2043725616] [2023-11-06 23:00:33,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:33,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 23:00:33,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:34,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2023-11-06 23:00:34,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 23:00:34,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2023-11-06 23:00:34,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:34,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:34,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 23:00:34,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 23:00:34,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:34,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:34,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 23:00:34,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:34,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 127 [2023-11-06 23:00:34,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 23:00:34,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2023-11-06 23:00:34,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 23:00:34,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2023-11-06 23:00:34,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2023-11-06 23:00:34,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,508 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 182 [2023-11-06 23:00:34,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 23:00:34,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 23:00:34,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 211 [2023-11-06 23:00:34,542 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,549 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 72 proven. 5 refuted. 0 times theorem prover too weak. 158 trivial. 0 not checked. [2023-11-06 23:00:34,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 23:00:34,549 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2043725616] [2023-11-06 23:00:34,550 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2043725616] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 23:00:34,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [930620623] [2023-11-06 23:00:34,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 23:00:34,550 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 23:00:34,551 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 23:00:34,552 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 23:00:34,579 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 23:00:34,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 23:00:34,760 INFO L262 TraceCheckSpWp]: Trace formula consists of 646 conjuncts, 13 conjunts are in the unsatisfiable core [2023-11-06 23:00:34,783 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 23:00:35,068 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 171 proven. 4 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2023-11-06 23:00:35,069 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-06 23:00:35,679 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 82 proven. 42 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2023-11-06 23:00:35,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [930620623] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-06 23:00:35,679 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-06 23:00:35,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 11] total 25 [2023-11-06 23:00:35,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266205381] [2023-11-06 23:00:35,680 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-06 23:00:35,682 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2023-11-06 23:00:35,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 23:00:35,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2023-11-06 23:00:35,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=481, Unknown=0, NotChecked=0, Total=600 [2023-11-06 23:00:35,685 INFO L87 Difference]: Start difference. First operand 919 states and 1095 transitions. Second operand has 25 states, 25 states have (on average 9.36) internal successors, (234), 22 states have internal predecessors, (234), 9 states have call successors, (44), 9 states have call predecessors, (44), 10 states have return successors, (43), 8 states have call predecessors, (43), 9 states have call successors, (43) [2023-11-06 23:00:37,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 23:00:37,694 INFO L93 Difference]: Finished difference Result 2013 states and 2471 transitions. [2023-11-06 23:00:37,694 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2023-11-06 23:00:37,695 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 25 states have (on average 9.36) internal successors, (234), 22 states have internal predecessors, (234), 9 states have call successors, (44), 9 states have call predecessors, (44), 10 states have return successors, (43), 8 states have call predecessors, (43), 9 states have call successors, (43) Word has length 219 [2023-11-06 23:00:37,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 23:00:37,697 INFO L225 Difference]: With dead ends: 2013 [2023-11-06 23:00:37,697 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 23:00:37,705 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 529 GetRequests, 476 SyntacticMatches, 3 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 549 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=575, Invalid=2077, Unknown=0, NotChecked=0, Total=2652 [2023-11-06 23:00:37,706 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 670 mSDsluCounter, 856 mSDsCounter, 0 mSdLazyCounter, 1416 mSolverCounterSat, 257 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 676 SdHoareTripleChecker+Valid, 964 SdHoareTripleChecker+Invalid, 1673 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 257 IncrementalHoareTripleChecker+Valid, 1416 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2023-11-06 23:00:37,707 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [676 Valid, 964 Invalid, 1673 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [257 Valid, 1416 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2023-11-06 23:00:37,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 23:00:37,708 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 23:00:37,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 23:00:37,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 23:00:37,709 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 219 [2023-11-06 23:00:37,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 23:00:37,709 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 23:00:37,710 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 25 states have (on average 9.36) internal successors, (234), 22 states have internal predecessors, (234), 9 states have call successors, (44), 9 states have call predecessors, (44), 10 states have return successors, (43), 8 states have call predecessors, (43), 9 states have call successors, (43) [2023-11-06 23:00:37,710 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 23:00:37,710 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 23:00:37,713 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 23:00:37,727 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 23:00:37,921 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 23:00:37,923 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 23:00:47,832 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 325 332) no Hoare annotation was computed. [2023-11-06 23:00:47,833 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 325 332) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (< |old(~pumpRunning~0)| 1)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (= 2 ~waterLevel~0)) .cse1 .cse2) (or .cse0 (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) .cse1 .cse2))) [2023-11-06 23:00:47,834 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 325 332) no Hoare annotation was computed. [2023-11-06 23:00:47,834 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 215 221) no Hoare annotation was computed. [2023-11-06 23:00:47,834 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 215 221) the Hoare annotation is: true [2023-11-06 23:00:47,834 INFO L899 garLoopResultBuilder]: For program point L417(lines 417 421) no Hoare annotation was computed. [2023-11-06 23:00:47,834 INFO L899 garLoopResultBuilder]: For program point L417-2(lines 417 421) no Hoare annotation was computed. [2023-11-06 23:00:47,835 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 544 552) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,835 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 249 273) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,835 INFO L895 garLoopResultBuilder]: At program point L263(line 263) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,836 INFO L895 garLoopResultBuilder]: At program point L259(line 259) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,836 INFO L899 garLoopResultBuilder]: For program point L257(lines 257 265) no Hoare annotation was computed. [2023-11-06 23:00:47,836 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 408 426) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,836 INFO L899 garLoopResultBuilder]: For program point L253(lines 253 270) no Hoare annotation was computed. [2023-11-06 23:00:47,837 INFO L895 garLoopResultBuilder]: At program point L268(line 268) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,837 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 249 273) no Hoare annotation was computed. [2023-11-06 23:00:47,837 INFO L899 garLoopResultBuilder]: For program point L268-1(lines 249 273) no Hoare annotation was computed. [2023-11-06 23:00:47,837 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 344 352) no Hoare annotation was computed. [2023-11-06 23:00:47,837 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 344 352) no Hoare annotation was computed. [2023-11-06 23:00:47,838 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 344 352) the Hoare annotation is: true [2023-11-06 23:00:47,838 INFO L899 garLoopResultBuilder]: For program point L481-1(lines 477 488) no Hoare annotation was computed. [2023-11-06 23:00:47,838 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 477 488) the Hoare annotation is: true [2023-11-06 23:00:47,838 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 477 488) no Hoare annotation was computed. [2023-11-06 23:00:47,838 INFO L899 garLoopResultBuilder]: For program point L576(line 576) no Hoare annotation was computed. [2023-11-06 23:00:47,839 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 555 584) no Hoare annotation was computed. [2023-11-06 23:00:47,839 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 573) no Hoare annotation was computed. [2023-11-06 23:00:47,839 INFO L902 garLoopResultBuilder]: At program point L569-1(lines 569 573) the Hoare annotation is: true [2023-11-06 23:00:47,839 INFO L899 garLoopResultBuilder]: For program point L566(line 566) no Hoare annotation was computed. [2023-11-06 23:00:47,839 INFO L902 garLoopResultBuilder]: At program point L565-2(lines 565 579) the Hoare annotation is: true [2023-11-06 23:00:47,839 INFO L902 garLoopResultBuilder]: At program point L561(line 561) the Hoare annotation is: true [2023-11-06 23:00:47,840 INFO L899 garLoopResultBuilder]: For program point L561-1(line 561) no Hoare annotation was computed. [2023-11-06 23:00:47,840 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 555 584) the Hoare annotation is: true [2023-11-06 23:00:47,840 INFO L902 garLoopResultBuilder]: At program point L580(lines 555 584) the Hoare annotation is: true [2023-11-06 23:00:47,840 INFO L899 garLoopResultBuilder]: For program point L283(lines 283 291) no Hoare annotation was computed. [2023-11-06 23:00:47,840 INFO L899 garLoopResultBuilder]: For program point L279(lines 279 296) no Hoare annotation was computed. [2023-11-06 23:00:47,840 INFO L899 garLoopResultBuilder]: For program point L85(lines 85 91) no Hoare annotation was computed. [2023-11-06 23:00:47,841 INFO L899 garLoopResultBuilder]: For program point L457(lines 457 461) no Hoare annotation was computed. [2023-11-06 23:00:47,841 INFO L895 garLoopResultBuilder]: At program point L457-2(lines 453 464) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 23:00:47,841 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 188 214) no Hoare annotation was computed. [2023-11-06 23:00:47,842 INFO L895 garLoopResultBuilder]: At program point getWaterLevel_returnLabel#1(lines 521 529) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse18 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse9 (<= 1 ~switchedOnBeforeTS~0)) (.cse7 (= ~pumpRunning~0 0)) (.cse14 (= 2 ~waterLevel~0)) (.cse15 (= 2 |timeShift_getWaterLevel_#res#1|))) (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse6 (< 1 |old(~waterLevel~0)|)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse13 (and .cse7 .cse14 .cse15)) (.cse1 (and .cse11 .cse16 .cse17 .cse18 .cse9)) (.cse5 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (and .cse16 .cse7 .cse17 .cse18 .cse9))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse2 .cse3 (= ~waterLevel~0 1)) (or .cse6 .cse0 .cse1 (and .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse8 .cse9 .cse10) .cse2 .cse3 .cse4) (or .cse6 (and .cse7 .cse8 .cse10) .cse12) (or .cse12 .cse13 .cse5 (and (<= 1 ~pumpRunning~0) .cse14 .cse15)) (or .cse12 .cse13 .cse5 (not .cse3)) (or .cse1 .cse5 .cse2 .cse3 .cse4)))) [2023-11-06 23:00:47,843 INFO L895 garLoopResultBuilder]: At program point L82(line 82) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse2 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse8 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse13 (and .cse0 .cse5 .cse16 .cse17 .cse7 .cse2)) (.cse15 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1)) (.cse4 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse9 (< |old(~pumpRunning~0)| 1)) (.cse10 (= 0 ~systemActive~0)) (.cse14 (and .cse5 .cse6 .cse16 .cse17 .cse7 .cse2))) (and (let ((.cse1 (= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse1 .cse2) .cse8 .cse9 .cse10)) (or .cse11 .cse8) (or (not (= |old(~waterLevel~0)| 1)) .cse12 .cse13 .cse9 .cse10 .cse14) (or (< 1 |old(~waterLevel~0)|) .cse11 (and .cse6 .cse15 .cse3 .cse4)) (or (and .cse6 .cse15 .cse2 .cse3 .cse4) .cse12 .cse13 (and .cse0 .cse15 .cse2 .cse3 .cse4) .cse9 .cse10 (< 2 |old(~waterLevel~0)|) .cse14)))) [2023-11-06 23:00:47,843 INFO L899 garLoopResultBuilder]: For program point L82-1(line 82) no Hoare annotation was computed. [2023-11-06 23:00:47,843 INFO L899 garLoopResultBuilder]: For program point L202-1(lines 202 208) no Hoare annotation was computed. [2023-11-06 23:00:47,844 INFO L895 garLoopResultBuilder]: At program point L289(line 289) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 23:00:47,844 INFO L895 garLoopResultBuilder]: At program point L285(line 285) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 23:00:47,845 INFO L895 garLoopResultBuilder]: At program point L281(line 281) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse7 (and .cse0 (<= ~waterLevel~0 1) (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse1)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or (and .cse0 (= ~waterLevel~0 1) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse2) (or (< 1 |old(~waterLevel~0)|) .cse5) (or (and .cse0 (= |old(~waterLevel~0)| ~waterLevel~0) .cse1) .cse6 .cse7 .cse3 .cse4 (< 2 |old(~waterLevel~0)|)) (or (not (= |old(~waterLevel~0)| 1)) .cse6 .cse7 .cse3 .cse4)))) [2023-11-06 23:00:47,845 INFO L899 garLoopResultBuilder]: For program point L281-1(line 281) no Hoare annotation was computed. [2023-11-06 23:00:47,845 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 654 661) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< 1 |old(~waterLevel~0)|)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1) (or .cse2 .cse0) (or .cse1 .cse3 .cse4) (or .cse2 (< |old(~switchedOnBeforeTS~0)| 1) .cse3 .cse4))) [2023-11-06 23:00:47,846 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 188 214) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-06 23:00:47,846 INFO L895 garLoopResultBuilder]: At program point L294(line 294) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< 2 |old(~waterLevel~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 2)) .cse0 .cse1) (or .cse2 .cse3 (not .cse1)) (or .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse3) (or (< 1 |old(~waterLevel~0)|) (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1))) [2023-11-06 23:00:47,847 INFO L895 garLoopResultBuilder]: At program point L294-1(lines 275 299) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= ~waterLevel~0 1)) (.cse14 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse7 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (and .cse5 .cse13 .cse14 .cse7)) (.cse4 (and .cse8 .cse13 .cse14 .cse7)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse11 (= |old(~waterLevel~0)| 2)) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (< 2 |old(~waterLevel~0)|)) (.cse3 (= 0 ~systemActive~0))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7) .cse0 .cse1 .cse2 (and .cse8 .cse6 .cse7) .cse3 .cse9 .cse4) (let ((.cse10 (= ~waterLevel~0 1))) (or (and .cse5 .cse10 .cse7) (not .cse11) .cse2 .cse3 (and .cse8 .cse10 .cse7))) (or (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse11) .cse12 (and .cse8 .cse6) .cse9) (or .cse12 .cse9 (not .cse3))))) [2023-11-06 23:00:47,848 INFO L895 garLoopResultBuilder]: At program point L67(line 67) the Hoare annotation is: (let ((.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (< |old(~pumpRunning~0)| 1)) (.cse1 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= 2 ~waterLevel~0)) (.cse3 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse8 (not (= |old(~waterLevel~0)| 2)))) (and (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 (and .cse2 .cse3 .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse5 .cse3 .cse4) .cse6) (or (and .cse2 .cse7 .cse3) .cse8 .cse0 .cse1) (or .cse6 (and .cse5 .cse7 .cse3) .cse8))) [2023-11-06 23:00:47,848 INFO L899 garLoopResultBuilder]: For program point L195(lines 195 201) no Hoare annotation was computed. [2023-11-06 23:00:47,848 INFO L899 garLoopResultBuilder]: For program point L67-1(line 67) no Hoare annotation was computed. [2023-11-06 23:00:47,848 INFO L899 garLoopResultBuilder]: For program point L195-2(lines 191 213) no Hoare annotation was computed. [2023-11-06 23:00:47,848 INFO L899 garLoopResultBuilder]: For program point L84(lines 84 94) no Hoare annotation was computed. [2023-11-06 23:00:47,848 INFO L899 garLoopResultBuilder]: For program point L658(line 658) no Hoare annotation was computed. [2023-11-06 23:00:47,849 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__2_returnLabel#1(lines 62 71) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (= 0 ~systemActive~0))) (and (or (and .cse0 (= 2 ~waterLevel~0) .cse1) (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse4) (< 2 |old(~waterLevel~0)|)) (or (< 1 |old(~waterLevel~0)|) (and .cse0 .cse4 .cse1) (< |old(~switchedOnBeforeTS~0)| 1) .cse2 .cse3))) [2023-11-06 23:00:47,849 INFO L899 garLoopResultBuilder]: For program point L80(lines 80 97) no Hoare annotation was computed. [2023-11-06 23:00:47,850 INFO L895 garLoopResultBuilder]: At program point L80-1(lines 72 100) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (not .cse9)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (<= |timeShift_getWaterLevel_#res#1| ~waterLevel~0)) (.cse21 (<= ~waterLevel~0 1)) (.cse22 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|)) (.cse14 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| ~waterLevel~0)) (.cse5 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse6 (<= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 1)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse16 (not (= |old(~waterLevel~0)| 2))) (.cse17 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse18 (= 2 ~waterLevel~0)) (.cse19 (= 2 |timeShift_getWaterLevel_#res#1|)) (.cse20 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~0#1| 2)) (.cse1 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (and .cse3 .cse13 .cse21 .cse22 .cse14 .cse5)) (.cse8 (< |old(~pumpRunning~0)| 1)) (.cse12 (and .cse13 .cse10 .cse21 .cse22 .cse14 .cse5 .cse11))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 .cse9 (and .cse10 .cse4 .cse5 .cse6 .cse7 .cse11) .cse12) (let ((.cse15 (= ~waterLevel~0 1))) (or (and .cse3 .cse13 .cse14 .cse15 .cse5) .cse16 .cse8 (and .cse13 .cse10 .cse14 .cse15 .cse5 .cse11) .cse9)) (or .cse0 .cse17 (and .cse10 .cse4 .cse6 .cse7)) (or .cse17 (and .cse10 .cse18 .cse19 .cse20) .cse16 .cse11) (or .cse17 (and .cse21 .cse4) (and (<= 1 ~pumpRunning~0) .cse18 .cse19 .cse20) .cse9 (< 2 |old(~waterLevel~0)|) (and .cse10 .cse18 .cse19 .cse11 .cse20)) (or (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse8 .cse9 .cse12))))) [2023-11-06 23:00:47,850 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 188 214) no Hoare annotation was computed. [2023-11-06 23:00:47,850 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 658) no Hoare annotation was computed. [2023-11-06 23:00:47,851 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 442 449) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 (<= ~waterLevel~0 2) .cse4))) [2023-11-06 23:00:47,851 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 616 626) the Hoare annotation is: true [2023-11-06 23:00:47,851 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 674 680) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:47,851 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 630 652) the Hoare annotation is: true [2023-11-06 23:00:47,852 INFO L895 garLoopResultBuilder]: At program point L168(lines 117 169) the Hoare annotation is: false [2023-11-06 23:00:47,852 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 23:00:47,852 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 23:00:47,852 INFO L899 garLoopResultBuilder]: For program point L156(lines 156 162) no Hoare annotation was computed. [2023-11-06 23:00:47,852 INFO L895 garLoopResultBuilder]: At program point L156-2(lines 148 163) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2023-11-06 23:00:47,853 INFO L899 garLoopResultBuilder]: For program point L119(lines 118 167) no Hoare annotation was computed. [2023-11-06 23:00:47,853 INFO L899 garLoopResultBuilder]: For program point L148(lines 148 163) no Hoare annotation was computed. [2023-11-06 23:00:47,853 INFO L895 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2023-11-06 23:00:47,853 INFO L895 garLoopResultBuilder]: At program point L140(line 140) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3 (<= ~waterLevel~0 2)) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0) .cse4))) [2023-11-06 23:00:47,854 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 609 615) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:47,854 INFO L895 garLoopResultBuilder]: At program point L165(lines 118 167) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse7 .cse2 .cse6 .cse3 .cse4) (and .cse7 .cse1 .cse2 .cse3 .cse4))) [2023-11-06 23:00:47,854 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 23:00:47,854 INFO L899 garLoopResultBuilder]: For program point L640(lines 640 647) no Hoare annotation was computed. [2023-11-06 23:00:47,854 INFO L899 garLoopResultBuilder]: For program point L128(lines 128 134) no Hoare annotation was computed. [2023-11-06 23:00:47,855 INFO L899 garLoopResultBuilder]: For program point L128-1(lines 128 134) no Hoare annotation was computed. [2023-11-06 23:00:47,855 INFO L899 garLoopResultBuilder]: For program point L640-2(lines 640 647) no Hoare annotation was computed. [2023-11-06 23:00:47,855 INFO L899 garLoopResultBuilder]: For program point L120(lines 120 124) no Hoare annotation was computed. [2023-11-06 23:00:47,855 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification5_spec__1_returnLabel#1(lines 54 61) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~8#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:47,855 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 23:00:47,856 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 681 687) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:47,856 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 427 441) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= 0 ~systemActive~0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4))) [2023-11-06 23:00:47,856 INFO L899 garLoopResultBuilder]: For program point L431(lines 431 437) no Hoare annotation was computed. [2023-11-06 23:00:47,856 INFO L899 garLoopResultBuilder]: For program point L431-1(lines 431 437) no Hoare annotation was computed. [2023-11-06 23:00:47,856 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 688 696) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2023-11-06 23:00:47,857 INFO L902 garLoopResultBuilder]: At program point L171(lines 108 175) the Hoare annotation is: true [2023-11-06 23:00:47,857 INFO L899 garLoopResultBuilder]: For program point L138(lines 138 144) no Hoare annotation was computed. [2023-11-06 23:00:47,857 INFO L899 garLoopResultBuilder]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2023-11-06 23:00:47,857 INFO L895 garLoopResultBuilder]: At program point L130(line 130) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~8#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse6 .cse3 .cse4 (<= 1 ~switchedOnBeforeTS~0) .cse5) (and .cse7 .cse2 .cse6 .cse3 .cse4) (and .cse7 .cse1 .cse2 .cse3 .cse4))) [2023-11-06 23:00:47,858 INFO L895 garLoopResultBuilder]: At program point L242(line 242) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= 2 ~waterLevel~0)) .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,858 INFO L899 garLoopResultBuilder]: For program point L242-1(lines 223 247) no Hoare annotation was computed. [2023-11-06 23:00:47,858 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 223 247) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,858 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 530 543) the Hoare annotation is: (let ((.cse1 (= 0 ~systemActive~0))) (and (let ((.cse0 (= ~pumpRunning~0 0))) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and .cse0 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (and .cse0 (= 2 ~waterLevel~0)) .cse1)) (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse1))) [2023-11-06 23:00:47,859 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 389 407) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse3 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2) (or .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,859 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 223 247) no Hoare annotation was computed. [2023-11-06 23:00:47,859 INFO L899 garLoopResultBuilder]: For program point L315(lines 315 321) no Hoare annotation was computed. [2023-11-06 23:00:47,859 INFO L895 garLoopResultBuilder]: At program point L313(line 313) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0)) .cse0) (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse0))) [2023-11-06 23:00:47,859 INFO L895 garLoopResultBuilder]: At program point L315-2(lines 308 324) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< 1 ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or (<= 1 ~pumpRunning~0) .cse0 (= ~pumpRunning~0 0) (not (= 2 ~waterLevel~0)) .cse2) (or .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2))) [2023-11-06 23:00:47,860 INFO L899 garLoopResultBuilder]: For program point L313-1(line 313) no Hoare annotation was computed. [2023-11-06 23:00:47,860 INFO L899 garLoopResultBuilder]: For program point L534(lines 534 540) no Hoare annotation was computed. [2023-11-06 23:00:47,860 INFO L899 garLoopResultBuilder]: For program point L398(lines 398 402) no Hoare annotation was computed. [2023-11-06 23:00:47,860 INFO L895 garLoopResultBuilder]: At program point L237(line 237) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse4 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse4)) (.cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse4 (not .cse2))) (.cse3 (< 1 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2) (or .cse0 .cse1 .cse3 .cse2) (or .cse3 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse2)))) [2023-11-06 23:00:47,860 INFO L899 garLoopResultBuilder]: For program point L398-2(lines 398 402) no Hoare annotation was computed. [2023-11-06 23:00:47,861 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 239) no Hoare annotation was computed. [2023-11-06 23:00:47,861 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 300 307) the Hoare annotation is: (let ((.cse0 (= 0 ~systemActive~0))) (and (or (< 1 ~waterLevel~0) (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1) .cse0) (or (< 2 ~waterLevel~0) (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) .cse0))) [2023-11-06 23:00:47,861 INFO L899 garLoopResultBuilder]: For program point L227(lines 227 244) no Hoare annotation was computed. [2023-11-06 23:00:47,861 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 465 476) no Hoare annotation was computed. [2023-11-06 23:00:47,861 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 465 476) the Hoare annotation is: (let ((.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= 2 ~waterLevel~0)) (.cse2 (not (= |old(~waterLevel~0)| 2))) (.cse3 (< 1 |old(~waterLevel~0)|)) (.cse5 (< ~pumpRunning~0 1)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse0 .cse4) (or .cse5 .cse1 .cse2 .cse6) (or .cse3 .cse5 (< ~switchedOnBeforeTS~0 1) .cse4 .cse6))) [2023-11-06 23:00:47,862 INFO L899 garLoopResultBuilder]: For program point L469-1(lines 465 476) no Hoare annotation was computed. [2023-11-06 23:00:47,862 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCritical_returnLabel#1(lines 489 497) the Hoare annotation is: true [2023-11-06 23:00:47,862 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 333 343) no Hoare annotation was computed. [2023-11-06 23:00:47,862 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 333 343) the Hoare annotation is: true [2023-11-06 23:00:47,862 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 333 343) no Hoare annotation was computed. [2023-11-06 23:00:47,865 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 23:00:47,867 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 23:00:47,960 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 11:00:47 BoogieIcfgContainer [2023-11-06 23:00:47,968 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 23:00:47,969 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 23:00:47,969 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 23:00:47,969 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 23:00:47,970 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 11:00:24" (3/4) ... [2023-11-06 23:00:47,972 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 23:00:47,977 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 23:00:47,977 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 23:00:47,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 23:00:47,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 23:00:47,978 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 23:00:47,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 23:00:47,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 23:00:47,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 23:00:47,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-06 23:00:47,979 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 23:00:47,997 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 23:00:47,998 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 23:00:47,999 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 23:00:48,000 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:00:48,001 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 23:00:48,037 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,038 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,038 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,038 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 23:00:48,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,041 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1)) && !((0 == systemActive)))) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || ((((((\result <= waterLevel) && (pumpRunning == 0)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (tmp <= 1)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || ((waterLevel <= 1) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && !((0 == systemActive))) && (tmp == 2)))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) [2023-11-06 23:00:48,043 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) [2023-11-06 23:00:48,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) [2023-11-06 23:00:48,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,044 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) [2023-11-06 23:00:48,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (waterLevel == 1))) && ((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || ((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((1 < \old(waterLevel)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || !((\old(pumpRunning) == 0)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) [2023-11-06 23:00:48,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,045 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && (((((1 <= pumpRunning) || !((\old(pumpRunning) == 0))) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 23:00:48,046 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,047 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,118 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,119 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,119 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) [2023-11-06 23:00:48,119 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) [2023-11-06 23:00:48,120 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,121 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,121 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1)) && !((0 == systemActive)))) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || ((((((\result <= waterLevel) && (pumpRunning == 0)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (tmp <= 1)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || ((waterLevel <= 1) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && !((0 == systemActive))) && (tmp == 2)))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) [2023-11-06 23:00:48,121 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) [2023-11-06 23:00:48,121 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) [2023-11-06 23:00:48,122 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,122 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) [2023-11-06 23:00:48,122 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (waterLevel == 1))) && ((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || ((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((1 < \old(waterLevel)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || !((\old(pumpRunning) == 0)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) [2023-11-06 23:00:48,123 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,125 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,125 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && (((((1 <= pumpRunning) || !((\old(pumpRunning) == 0))) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,125 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) [2023-11-06 23:00:48,125 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,127 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) [2023-11-06 23:00:48,150 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 23:00:48,150 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 23:00:48,151 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 23:00:48,151 INFO L158 Benchmark]: Toolchain (without parser) took 25284.50ms. Allocated memory was 132.1MB in the beginning and 371.2MB in the end (delta: 239.1MB). Free memory was 88.3MB in the beginning and 334.4MB in the end (delta: -246.1MB). Peak memory consumption was 173.2MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,152 INFO L158 Benchmark]: CDTParser took 0.34ms. Allocated memory is still 104.9MB. Free memory is still 58.1MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 23:00:48,152 INFO L158 Benchmark]: CACSL2BoogieTranslator took 618.57ms. Allocated memory is still 132.1MB. Free memory was 88.1MB in the beginning and 68.1MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,152 INFO L158 Benchmark]: Boogie Procedure Inliner took 125.61ms. Allocated memory is still 132.1MB. Free memory was 68.1MB in the beginning and 101.2MB in the end (delta: -33.1MB). Peak memory consumption was 6.5MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,153 INFO L158 Benchmark]: Boogie Preprocessor took 89.62ms. Allocated memory was 132.1MB in the beginning and 176.2MB in the end (delta: 44.0MB). Free memory was 101.2MB in the beginning and 146.9MB in the end (delta: -45.7MB). Peak memory consumption was 4.9MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,154 INFO L158 Benchmark]: RCFGBuilder took 714.79ms. Allocated memory is still 176.2MB. Free memory was 146.9MB in the beginning and 127.0MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,154 INFO L158 Benchmark]: TraceAbstraction took 23545.17ms. Allocated memory was 176.2MB in the beginning and 308.3MB in the end (delta: 132.1MB). Free memory was 127.0MB in the beginning and 101.6MB in the end (delta: 25.4MB). Peak memory consumption was 169.1MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,155 INFO L158 Benchmark]: Witness Printer took 182.02ms. Allocated memory was 308.3MB in the beginning and 371.2MB in the end (delta: 62.9MB). Free memory was 101.6MB in the beginning and 334.4MB in the end (delta: -232.7MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. [2023-11-06 23:00:48,158 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34ms. Allocated memory is still 104.9MB. Free memory is still 58.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 618.57ms. Allocated memory is still 132.1MB. Free memory was 88.1MB in the beginning and 68.1MB in the end (delta: 20.0MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 125.61ms. Allocated memory is still 132.1MB. Free memory was 68.1MB in the beginning and 101.2MB in the end (delta: -33.1MB). Peak memory consumption was 6.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 89.62ms. Allocated memory was 132.1MB in the beginning and 176.2MB in the end (delta: 44.0MB). Free memory was 101.2MB in the beginning and 146.9MB in the end (delta: -45.7MB). Peak memory consumption was 4.9MB. Max. memory is 16.1GB. * RCFGBuilder took 714.79ms. Allocated memory is still 176.2MB. Free memory was 146.9MB in the beginning and 127.0MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 23545.17ms. Allocated memory was 176.2MB in the beginning and 308.3MB in the end (delta: 132.1MB). Free memory was 127.0MB in the beginning and 101.6MB in the end (delta: 25.4MB). Peak memory consumption was 169.1MB. Max. memory is 16.1GB. * Witness Printer took 182.02ms. Allocated memory was 308.3MB in the beginning and 371.2MB in the end (delta: 62.9MB). Free memory was 101.6MB in the beginning and 334.4MB in the end (delta: -232.7MB). Peak memory consumption was 6.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [49] - GenericResultAtLocation [Line: 101]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [101] - GenericResultAtLocation [Line: 176]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [176] - GenericResultAtLocation [Line: 450]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [450] - GenericResultAtLocation [Line: 553]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [553] - GenericResultAtLocation [Line: 653]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [653] - GenericResultAtLocation [Line: 662]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [662] - GenericResultAtLocation [Line: 697]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [697] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 658]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 118 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 23.4s, OverallIterations: 11, TraceHistogramMax: 5, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 7.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 9.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2660 SdHoareTripleChecker+Valid, 4.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2612 mSDsluCounter, 5824 SdHoareTripleChecker+Invalid, 3.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4389 mSDsCounter, 849 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4107 IncrementalHoareTripleChecker+Invalid, 4956 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 849 mSolverCounterUnsat, 1435 mSDtfsCounter, 4107 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1015 GetRequests, 848 SyntacticMatches, 8 SemanticMatches, 159 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1393 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=919occurred in iteration=10, InterpolantAutomatonStates: 141, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 11 MinimizatonAttempts, 385 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 55 LocationsWithAnnotation, 2234 PreInvPairs, 2605 NumberOfFragments, 2874 HoareAnnotationTreeSize, 2234 FomulaSimplifications, 10187 FormulaSimplificationTreeSizeReduction, 1.1s HoareSimplificationTime, 55 FomulaSimplificationsInter, 22691 FormulaSimplificationTreeSizeReductionInter, 8.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 4.1s InterpolantComputationTime, 1160 NumberOfCodeBlocks, 1160 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 1487 ConstructedInterpolants, 0 QuantifiedInterpolants, 2760 SizeOfPredicates, 6 NumberOfNonLiveVariables, 1045 ConjunctsInSsa, 21 ConjunctsInUnsatCore, 15 InterpolantComputations, 9 PerfectInterpolantSequences, 775/858 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 609]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 300]: Loop Invariant Derived loop invariant: (((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((1 <= pumpRunning) && (2 == waterLevel))) || (0 == systemActive))) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 275]: Loop Invariant Derived loop invariant: (((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && ((((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (0 == systemActive)) || (2 < \old(waterLevel))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((pumpRunning == 0) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)))) && ((((((1 <= pumpRunning) && (2 == waterLevel)) && (\old(waterLevel) == 2)) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (2 < \old(waterLevel))) || !((0 == systemActive)))) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 108]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 544]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0))) - InvariantResult [Line: 530]: Loop Invariant Derived loop invariant: ((((((2 < waterLevel) || !((\old(pumpRunning) == 0))) || ((pumpRunning == 0) && (\result == 1))) || ((pumpRunning == 0) && (2 == waterLevel))) || (0 == systemActive)) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 453]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && (!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2)))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((((((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (2 < \old(waterLevel)))) && ((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((pumpRunning == \old(pumpRunning)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 308]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && (((((1 <= pumpRunning) || !((\old(pumpRunning) == 0))) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 389]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || !((2 == waterLevel))) || (0 == systemActive)) && (((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (((pumpRunning == 0) && (tmp___0 == 0)) && (\result == 0))) || (0 == systemActive))) && ((((1 < waterLevel) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((((pumpRunning == 0) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 489]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 442]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning) && (2 == waterLevel)) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && !((0 == systemActive))) || (((((((1 <= pumpRunning) && (\result == 1)) && (waterLevel <= 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || ((((((pumpRunning == 0) && (\result == 1)) && (tmp == 1)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && !((0 == systemActive)))) - InvariantResult [Line: 654]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 2))) && ((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0)))) && ((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) && ((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((((((((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) && (((!((\old(waterLevel) == 2)) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (waterLevel == 1))) && ((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || (((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || ((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) && (((1 < \old(waterLevel)) || (((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (\result <= 1))) || !((\old(pumpRunning) == 0)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || (((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (1 <= switchedOnBeforeTS)))) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (\result == 1)) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: (((((((((((((1 < \old(waterLevel)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (((((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || ((((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS)) && (tmp <= 1)) && (\result <= 1)) && !((0 == systemActive)))) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) && (((((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || ((((((\result <= waterLevel) && (pumpRunning == 0)) && (tmp <= waterLevel)) && (waterLevel == 1)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive)))) || (0 == systemActive))) && (((1 < \old(waterLevel)) || !((\old(pumpRunning) == 0))) || ((((pumpRunning == 0) && (\old(waterLevel) == waterLevel)) && (tmp <= 1)) && (\result <= 1)))) && (((!((\old(pumpRunning) == 0)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || !((\old(waterLevel) == 2))) || !((0 == systemActive)))) && (((((!((\old(pumpRunning) == 0)) || ((waterLevel <= 1) && (\old(waterLevel) == waterLevel))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (2 == \result)) && (tmp == 2))) || (0 == systemActive)) || (2 < \old(waterLevel))) || (((((pumpRunning == 0) && (2 == waterLevel)) && (2 == \result)) && !((0 == systemActive))) && (tmp == 2)))) && (((((!((\old(waterLevel) == 1)) || (\old(switchedOnBeforeTS) < 1)) || ((((((pumpRunning == \old(pumpRunning)) && (\result <= waterLevel)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) || (((((((\result <= waterLevel) && (pumpRunning == 0)) && (waterLevel <= 1)) && ((waterLevel + 1) <= \old(waterLevel))) && (tmp <= waterLevel)) && (1 <= switchedOnBeforeTS)) && !((0 == systemActive))))) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: (((pumpRunning == 0) && (waterLevel == 1)) && !((0 == systemActive))) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == \old(pumpRunning)) && (2 == waterLevel)) && (1 <= switchedOnBeforeTS)) || !((\old(waterLevel) == 2))) || (\old(pumpRunning) < 1)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (2 < \old(waterLevel)))) && (((((1 < \old(waterLevel)) || (((pumpRunning == \old(pumpRunning)) && (\old(waterLevel) == waterLevel)) && (1 <= switchedOnBeforeTS))) || (\old(switchedOnBeforeTS) < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 408]: Loop Invariant Derived loop invariant: ((((!((\old(pumpRunning) == 0)) || (1 < waterLevel)) || (0 == systemActive)) && ((!((\old(pumpRunning) == 0)) || !((2 == waterLevel))) || (0 == systemActive))) && (((((pumpRunning == \old(pumpRunning)) || (1 < waterLevel)) || (switchedOnBeforeTS < 1)) || (\old(pumpRunning) < 1)) || (0 == systemActive))) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 23:00:48,230 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1a38f273-6a95-41f1-9408-03d9aab6241b/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE