./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-26 11:48:12,504 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-26 11:48:12,631 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-26 11:48:12,640 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-26 11:48:12,641 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-26 11:48:12,685 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-26 11:48:12,687 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-26 11:48:12,687 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-26 11:48:12,688 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-26 11:48:12,694 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-26 11:48:12,694 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-26 11:48:12,696 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-26 11:48:12,696 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-26 11:48:12,698 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-26 11:48:12,699 INFO L153 SettingsManager]: * Use SBE=true [2023-11-26 11:48:12,699 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-26 11:48:12,700 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-26 11:48:12,700 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-26 11:48:12,700 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-26 11:48:12,701 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-26 11:48:12,703 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-26 11:48:12,703 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-26 11:48:12,704 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-26 11:48:12,704 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-26 11:48:12,705 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-26 11:48:12,705 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-26 11:48:12,706 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-26 11:48:12,706 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-26 11:48:12,707 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-26 11:48:12,707 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-26 11:48:12,709 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-26 11:48:12,709 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:48:12,709 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-26 11:48:12,710 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-26 11:48:12,710 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-26 11:48:12,710 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-26 11:48:12,711 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-26 11:48:12,711 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-26 11:48:12,711 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-26 11:48:12,711 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-26 11:48:12,712 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-26 11:48:12,712 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-26 11:48:12,712 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2023-11-26 11:48:13,092 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-26 11:48:13,134 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-26 11:48:13,138 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-26 11:48:13,140 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-26 11:48:13,140 INFO L274 PluginConnector]: CDTParser initialized [2023-11-26 11:48:13,142 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-11-26 11:48:16,490 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-26 11:48:16,820 INFO L384 CDTParser]: Found 1 translation units. [2023-11-26 11:48:16,821 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-11-26 11:48:16,844 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/data/2ea573219/bdaeccf5d13b4930a1353b35360d04fa/FLAG5dd03c1a9 [2023-11-26 11:48:16,863 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/data/2ea573219/bdaeccf5d13b4930a1353b35360d04fa [2023-11-26 11:48:16,865 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-26 11:48:16,867 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-26 11:48:16,868 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-26 11:48:16,869 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-26 11:48:16,884 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-26 11:48:16,885 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:48:16" (1/1) ... [2023-11-26 11:48:16,886 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5bcc3f45 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:16, skipping insertion in model container [2023-11-26 11:48:16,887 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 26.11 11:48:16" (1/1) ... [2023-11-26 11:48:16,947 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-26 11:48:17,236 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-11-26 11:48:17,300 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:48:17,315 INFO L202 MainTranslator]: Completed pre-run [2023-11-26 11:48:17,328 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-26 11:48:17,331 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] [2023-11-26 11:48:17,332 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] [2023-11-26 11:48:17,333 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] [2023-11-26 11:48:17,334 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] [2023-11-26 11:48:17,334 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] [2023-11-26 11:48:17,334 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] [2023-11-26 11:48:17,335 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] [2023-11-26 11:48:17,438 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-11-26 11:48:17,488 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-26 11:48:17,518 INFO L206 MainTranslator]: Completed translation [2023-11-26 11:48:17,519 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17 WrapperNode [2023-11-26 11:48:17,519 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-26 11:48:17,521 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-26 11:48:17,521 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-26 11:48:17,522 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-26 11:48:17,531 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,563 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,618 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 217 [2023-11-26 11:48:17,619 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-26 11:48:17,620 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-26 11:48:17,620 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-26 11:48:17,620 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-26 11:48:17,635 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,636 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,650 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,673 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-26 11:48:17,673 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,674 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,679 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,685 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,686 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,688 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,691 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-26 11:48:17,693 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-26 11:48:17,693 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-26 11:48:17,693 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-26 11:48:17,694 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (1/1) ... [2023-11-26 11:48:17,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-26 11:48:17,716 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:48:17,734 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-26 11:48:17,757 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-26 11:48:17,784 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-26 11:48:17,784 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-26 11:48:17,785 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-26 11:48:17,785 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-26 11:48:17,785 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-26 11:48:17,785 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-26 11:48:17,786 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-26 11:48:17,786 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-26 11:48:17,786 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-26 11:48:17,786 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:48:17,787 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:48:17,787 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-26 11:48:17,787 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-26 11:48:17,788 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-26 11:48:17,788 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-26 11:48:17,789 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-26 11:48:17,790 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-26 11:48:17,791 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-26 11:48:17,792 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-26 11:48:17,792 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-26 11:48:17,792 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-26 11:48:17,793 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-26 11:48:17,897 INFO L241 CfgBuilder]: Building ICFG [2023-11-26 11:48:17,900 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-26 11:48:18,225 INFO L282 CfgBuilder]: Performing block encoding [2023-11-26 11:48:18,291 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-26 11:48:18,291 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-26 11:48:18,292 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:48:18 BoogieIcfgContainer [2023-11-26 11:48:18,292 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-26 11:48:18,295 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-26 11:48:18,295 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-26 11:48:18,298 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-26 11:48:18,298 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 26.11 11:48:16" (1/3) ... [2023-11-26 11:48:18,299 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@146934ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:48:18, skipping insertion in model container [2023-11-26 11:48:18,299 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 26.11 11:48:17" (2/3) ... [2023-11-26 11:48:18,300 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@146934ad and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 26.11 11:48:18, skipping insertion in model container [2023-11-26 11:48:18,300 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:48:18" (3/3) ... [2023-11-26 11:48:18,301 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2023-11-26 11:48:18,320 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-26 11:48:18,321 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-26 11:48:18,368 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-26 11:48:18,374 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@56be59bd, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-26 11:48:18,374 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-26 11:48:18,378 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 56 states have (on average 1.5) internal successors, (84), 65 states have internal predecessors, (84), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-26 11:48:18,386 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-26 11:48:18,386 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:18,387 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:18,387 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:18,393 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:18,393 INFO L85 PathProgramCache]: Analyzing trace with hash -449197899, now seen corresponding path program 1 times [2023-11-26 11:48:18,403 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:18,403 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1589634464] [2023-11-26 11:48:18,404 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:18,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:18,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:18,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:18,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:18,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 11:48:18,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:18,714 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:18,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:18,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1589634464] [2023-11-26 11:48:18,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1589634464] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:18,718 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:18,719 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-26 11:48:18,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50576535] [2023-11-26 11:48:18,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:18,727 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-26 11:48:18,728 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:18,779 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-26 11:48:18,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:48:18,782 INFO L87 Difference]: Start difference. First operand has 83 states, 56 states have (on average 1.5) internal successors, (84), 65 states have internal predecessors, (84), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:18,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:18,882 INFO L93 Difference]: Finished difference Result 164 states and 233 transitions. [2023-11-26 11:48:18,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-26 11:48:18,887 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-26 11:48:18,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:18,899 INFO L225 Difference]: With dead ends: 164 [2023-11-26 11:48:18,900 INFO L226 Difference]: Without dead ends: 78 [2023-11-26 11:48:18,905 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-26 11:48:18,910 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:18,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 95 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-26 11:48:18,935 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-26 11:48:18,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-26 11:48:18,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 53 states have (on average 1.3962264150943395) internal successors, (74), 61 states have internal predecessors, (74), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-26 11:48:18,980 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 105 transitions. [2023-11-26 11:48:18,981 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 105 transitions. Word has length 22 [2023-11-26 11:48:18,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:18,982 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 105 transitions. [2023-11-26 11:48:18,982 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:18,982 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 105 transitions. [2023-11-26 11:48:18,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-26 11:48:18,986 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:18,986 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:18,986 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-26 11:48:18,987 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:18,987 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:18,987 INFO L85 PathProgramCache]: Analyzing trace with hash -202773606, now seen corresponding path program 1 times [2023-11-26 11:48:18,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:18,988 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1027728887] [2023-11-26 11:48:18,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:18,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:19,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 11:48:19,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:48:19,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,159 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:19,160 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:19,160 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1027728887] [2023-11-26 11:48:19,161 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1027728887] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:19,161 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:19,161 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:48:19,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289969563] [2023-11-26 11:48:19,162 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:19,164 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:48:19,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:19,165 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:48:19,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:48:19,166 INFO L87 Difference]: Start difference. First operand 78 states and 105 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:19,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:19,206 INFO L93 Difference]: Finished difference Result 126 states and 168 transitions. [2023-11-26 11:48:19,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:48:19,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-26 11:48:19,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:19,211 INFO L225 Difference]: With dead ends: 126 [2023-11-26 11:48:19,212 INFO L226 Difference]: Without dead ends: 70 [2023-11-26 11:48:19,215 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:48:19,217 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 14 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:19,219 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 146 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:48:19,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2023-11-26 11:48:19,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2023-11-26 11:48:19,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 56 states have internal predecessors, (68), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-26 11:48:19,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 94 transitions. [2023-11-26 11:48:19,236 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 94 transitions. Word has length 23 [2023-11-26 11:48:19,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:19,236 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 94 transitions. [2023-11-26 11:48:19,237 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:19,237 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 94 transitions. [2023-11-26 11:48:19,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-26 11:48:19,239 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:19,239 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:19,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-26 11:48:19,240 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:19,240 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:19,240 INFO L85 PathProgramCache]: Analyzing trace with hash 1368182408, now seen corresponding path program 1 times [2023-11-26 11:48:19,241 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:19,241 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1855533669] [2023-11-26 11:48:19,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:19,242 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:19,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:48:19,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-26 11:48:19,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,328 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:19,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:19,329 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1855533669] [2023-11-26 11:48:19,329 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1855533669] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:19,329 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:19,329 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-26 11:48:19,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [749874739] [2023-11-26 11:48:19,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:19,330 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-26 11:48:19,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:19,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-26 11:48:19,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:48:19,332 INFO L87 Difference]: Start difference. First operand 70 states and 94 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 11:48:19,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:19,394 INFO L93 Difference]: Finished difference Result 206 states and 279 transitions. [2023-11-26 11:48:19,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-26 11:48:19,395 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-26 11:48:19,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:19,398 INFO L225 Difference]: With dead ends: 206 [2023-11-26 11:48:19,398 INFO L226 Difference]: Without dead ends: 138 [2023-11-26 11:48:19,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-26 11:48:19,401 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 85 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:19,401 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 171 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-26 11:48:19,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138 states. [2023-11-26 11:48:19,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138 to 135. [2023-11-26 11:48:19,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135 states, 92 states have (on average 1.423913043478261) internal successors, (131), 107 states have internal predecessors, (131), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2023-11-26 11:48:19,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 183 transitions. [2023-11-26 11:48:19,427 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 183 transitions. Word has length 26 [2023-11-26 11:48:19,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:19,427 INFO L495 AbstractCegarLoop]: Abstraction has 135 states and 183 transitions. [2023-11-26 11:48:19,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-26 11:48:19,428 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 183 transitions. [2023-11-26 11:48:19,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-26 11:48:19,430 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:19,430 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:19,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-26 11:48:19,431 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:19,431 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:19,431 INFO L85 PathProgramCache]: Analyzing trace with hash 36370968, now seen corresponding path program 1 times [2023-11-26 11:48:19,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:19,432 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1081318025] [2023-11-26 11:48:19,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:19,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:19,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-26 11:48:19,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-26 11:48:19,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:19,672 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-26 11:48:19,672 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:19,673 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1081318025] [2023-11-26 11:48:19,673 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1081318025] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:19,673 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:19,673 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-26 11:48:19,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1311510705] [2023-11-26 11:48:19,673 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:19,674 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-26 11:48:19,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:19,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-26 11:48:19,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-26 11:48:19,675 INFO L87 Difference]: Start difference. First operand 135 states and 183 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:19,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:19,905 INFO L93 Difference]: Finished difference Result 358 states and 489 transitions. [2023-11-26 11:48:19,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-26 11:48:19,907 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2023-11-26 11:48:19,907 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:19,917 INFO L225 Difference]: With dead ends: 358 [2023-11-26 11:48:19,917 INFO L226 Difference]: Without dead ends: 225 [2023-11-26 11:48:19,919 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-26 11:48:19,920 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 51 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:19,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 345 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:48:19,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2023-11-26 11:48:19,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 220. [2023-11-26 11:48:19,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 220 states, 153 states have (on average 1.3529411764705883) internal successors, (207), 170 states have internal predecessors, (207), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2023-11-26 11:48:19,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 220 states to 220 states and 287 transitions. [2023-11-26 11:48:19,984 INFO L78 Accepts]: Start accepts. Automaton has 220 states and 287 transitions. Word has length 29 [2023-11-26 11:48:19,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:19,985 INFO L495 AbstractCegarLoop]: Abstraction has 220 states and 287 transitions. [2023-11-26 11:48:19,985 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-26 11:48:19,985 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 287 transitions. [2023-11-26 11:48:19,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-26 11:48:19,994 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:19,994 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:19,994 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-26 11:48:19,995 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:19,995 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:19,995 INFO L85 PathProgramCache]: Analyzing trace with hash -1201233109, now seen corresponding path program 1 times [2023-11-26 11:48:19,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:19,996 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524260384] [2023-11-26 11:48:19,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:19,996 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:20,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:48:20,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-26 11:48:20,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:20,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-26 11:48:20,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,213 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:20,213 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:20,214 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524260384] [2023-11-26 11:48:20,214 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524260384] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:20,214 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:20,214 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:48:20,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [888086186] [2023-11-26 11:48:20,215 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:20,215 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:48:20,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:20,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:48:20,217 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:48:20,217 INFO L87 Difference]: Start difference. First operand 220 states and 287 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:48:20,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:20,441 INFO L93 Difference]: Finished difference Result 486 states and 651 transitions. [2023-11-26 11:48:20,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:48:20,442 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 44 [2023-11-26 11:48:20,443 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:20,446 INFO L225 Difference]: With dead ends: 486 [2023-11-26 11:48:20,447 INFO L226 Difference]: Without dead ends: 268 [2023-11-26 11:48:20,448 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:48:20,450 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 54 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:20,451 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 214 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:48:20,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2023-11-26 11:48:20,484 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 262. [2023-11-26 11:48:20,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 185 states have (on average 1.335135135135135) internal successors, (247), 202 states have internal predecessors, (247), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2023-11-26 11:48:20,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 341 transitions. [2023-11-26 11:48:20,489 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 341 transitions. Word has length 44 [2023-11-26 11:48:20,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:20,490 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 341 transitions. [2023-11-26 11:48:20,490 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:48:20,490 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 341 transitions. [2023-11-26 11:48:20,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-26 11:48:20,493 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:20,493 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:20,493 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-26 11:48:20,494 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:20,494 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:20,494 INFO L85 PathProgramCache]: Analyzing trace with hash -778531283, now seen corresponding path program 1 times [2023-11-26 11:48:20,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:20,495 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1636080978] [2023-11-26 11:48:20,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:20,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:20,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:48:20,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-26 11:48:20,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:20,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-26 11:48:20,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:20,633 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:20,633 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:20,633 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1636080978] [2023-11-26 11:48:20,633 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1636080978] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:20,634 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:20,634 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:48:20,634 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427828572] [2023-11-26 11:48:20,634 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:20,635 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:48:20,635 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:20,636 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:48:20,636 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:48:20,636 INFO L87 Difference]: Start difference. First operand 262 states and 341 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:48:20,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:20,878 INFO L93 Difference]: Finished difference Result 538 states and 717 transitions. [2023-11-26 11:48:20,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-26 11:48:20,879 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 44 [2023-11-26 11:48:20,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:20,882 INFO L225 Difference]: With dead ends: 538 [2023-11-26 11:48:20,882 INFO L226 Difference]: Without dead ends: 278 [2023-11-26 11:48:20,884 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:48:20,886 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 59 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:20,889 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 214 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-26 11:48:20,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2023-11-26 11:48:20,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 266. [2023-11-26 11:48:20,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 189 states have (on average 1.3280423280423281) internal successors, (251), 206 states have internal predecessors, (251), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2023-11-26 11:48:20,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 345 transitions. [2023-11-26 11:48:20,941 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 345 transitions. Word has length 44 [2023-11-26 11:48:20,943 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:20,944 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 345 transitions. [2023-11-26 11:48:20,944 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-26 11:48:20,944 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 345 transitions. [2023-11-26 11:48:20,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-26 11:48:20,946 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:20,946 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:20,946 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-26 11:48:20,946 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:20,947 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:20,947 INFO L85 PathProgramCache]: Analyzing trace with hash 1710997679, now seen corresponding path program 1 times [2023-11-26 11:48:20,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:20,947 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180484879] [2023-11-26 11:48:20,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:20,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:20,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-26 11:48:21,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-26 11:48:21,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:21,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-26 11:48:21,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,120 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:21,121 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:21,121 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180484879] [2023-11-26 11:48:21,121 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180484879] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:21,121 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:21,121 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-26 11:48:21,122 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1965843255] [2023-11-26 11:48:21,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:21,124 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-26 11:48:21,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:21,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-26 11:48:21,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-26 11:48:21,126 INFO L87 Difference]: Start difference. First operand 266 states and 345 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-26 11:48:21,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:21,596 INFO L93 Difference]: Finished difference Result 863 states and 1195 transitions. [2023-11-26 11:48:21,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-26 11:48:21,597 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2023-11-26 11:48:21,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:21,608 INFO L225 Difference]: With dead ends: 863 [2023-11-26 11:48:21,608 INFO L226 Difference]: Without dead ends: 599 [2023-11-26 11:48:21,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:48:21,611 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 202 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:21,612 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 281 Invalid, 309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-26 11:48:21,613 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 599 states. [2023-11-26 11:48:21,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 599 to 591. [2023-11-26 11:48:21,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 418 states have (on average 1.313397129186603) internal successors, (549), 449 states have internal predecessors, (549), 96 states have call successors, (96), 77 states have call predecessors, (96), 76 states have return successors, (146), 90 states have call predecessors, (146), 96 states have call successors, (146) [2023-11-26 11:48:21,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 791 transitions. [2023-11-26 11:48:21,698 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 791 transitions. Word has length 44 [2023-11-26 11:48:21,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:21,699 INFO L495 AbstractCegarLoop]: Abstraction has 591 states and 791 transitions. [2023-11-26 11:48:21,699 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-26 11:48:21,700 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 791 transitions. [2023-11-26 11:48:21,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-26 11:48:21,702 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:21,703 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:21,703 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-26 11:48:21,703 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:21,704 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:21,704 INFO L85 PathProgramCache]: Analyzing trace with hash -733397867, now seen corresponding path program 1 times [2023-11-26 11:48:21,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:21,705 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606918750] [2023-11-26 11:48:21,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:21,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:21,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:48:21,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-26 11:48:21,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-26 11:48:21,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:21,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-26 11:48:21,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:21,971 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-26 11:48:21,972 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:21,972 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606918750] [2023-11-26 11:48:21,974 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606918750] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:21,974 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:21,974 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-26 11:48:21,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1092443399] [2023-11-26 11:48:21,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:21,975 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-26 11:48:21,976 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:21,977 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-26 11:48:21,977 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-26 11:48:21,978 INFO L87 Difference]: Start difference. First operand 591 states and 791 transitions. Second operand has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:48:22,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:22,632 INFO L93 Difference]: Finished difference Result 1275 states and 1729 transitions. [2023-11-26 11:48:22,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-11-26 11:48:22,638 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 48 [2023-11-26 11:48:22,639 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:22,645 INFO L225 Difference]: With dead ends: 1275 [2023-11-26 11:48:22,646 INFO L226 Difference]: Without dead ends: 686 [2023-11-26 11:48:22,649 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=138, Invalid=324, Unknown=0, NotChecked=0, Total=462 [2023-11-26 11:48:22,651 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 303 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 308 SdHoareTripleChecker+Valid, 248 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:22,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [308 Valid, 248 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 327 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-26 11:48:22,654 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2023-11-26 11:48:22,738 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 667. [2023-11-26 11:48:22,740 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 667 states, 472 states have (on average 1.2923728813559323) internal successors, (610), 511 states have internal predecessors, (610), 108 states have call successors, (108), 77 states have call predecessors, (108), 86 states have return successors, (180), 104 states have call predecessors, (180), 108 states have call successors, (180) [2023-11-26 11:48:22,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 667 states and 898 transitions. [2023-11-26 11:48:22,748 INFO L78 Accepts]: Start accepts. Automaton has 667 states and 898 transitions. Word has length 48 [2023-11-26 11:48:22,749 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:22,749 INFO L495 AbstractCegarLoop]: Abstraction has 667 states and 898 transitions. [2023-11-26 11:48:22,750 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-26 11:48:22,750 INFO L276 IsEmpty]: Start isEmpty. Operand 667 states and 898 transitions. [2023-11-26 11:48:22,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-26 11:48:22,754 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:22,755 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:22,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-26 11:48:22,756 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:22,756 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:22,756 INFO L85 PathProgramCache]: Analyzing trace with hash 2067267942, now seen corresponding path program 1 times [2023-11-26 11:48:22,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:22,757 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728899661] [2023-11-26 11:48:22,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:22,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:22,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:48:22,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-26 11:48:22,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:48:22,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 11:48:22,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:22,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-26 11:48:22,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-26 11:48:22,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:22,967 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-26 11:48:22,967 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:22,967 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728899661] [2023-11-26 11:48:22,967 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728899661] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-26 11:48:22,968 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-26 11:48:22,968 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-26 11:48:22,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1260615682] [2023-11-26 11:48:22,968 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-26 11:48:22,969 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-26 11:48:22,969 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:22,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-26 11:48:22,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-26 11:48:22,971 INFO L87 Difference]: Start difference. First operand 667 states and 898 transitions. Second operand has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-26 11:48:23,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:23,480 INFO L93 Difference]: Finished difference Result 1098 states and 1470 transitions. [2023-11-26 11:48:23,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-26 11:48:23,481 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 73 [2023-11-26 11:48:23,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:23,486 INFO L225 Difference]: With dead ends: 1098 [2023-11-26 11:48:23,486 INFO L226 Difference]: Without dead ends: 433 [2023-11-26 11:48:23,490 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-26 11:48:23,490 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 216 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:23,491 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 241 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-26 11:48:23,492 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2023-11-26 11:48:23,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 425. [2023-11-26 11:48:23,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 425 states, 302 states have (on average 1.2781456953642385) internal successors, (386), 327 states have internal predecessors, (386), 68 states have call successors, (68), 51 states have call predecessors, (68), 54 states have return successors, (104), 66 states have call predecessors, (104), 68 states have call successors, (104) [2023-11-26 11:48:23,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 558 transitions. [2023-11-26 11:48:23,555 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 558 transitions. Word has length 73 [2023-11-26 11:48:23,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:23,556 INFO L495 AbstractCegarLoop]: Abstraction has 425 states and 558 transitions. [2023-11-26 11:48:23,556 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-26 11:48:23,556 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 558 transitions. [2023-11-26 11:48:23,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-11-26 11:48:23,558 INFO L187 NwaCegarLoop]: Found error trace [2023-11-26 11:48:23,559 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:23,559 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-26 11:48:23,559 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-26 11:48:23,559 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-26 11:48:23,560 INFO L85 PathProgramCache]: Analyzing trace with hash -1943847318, now seen corresponding path program 1 times [2023-11-26 11:48:23,560 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-26 11:48:23,560 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1450948286] [2023-11-26 11:48:23,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:23,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-26 11:48:23,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-26 11:48:23,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-26 11:48:23,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-26 11:48:23,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-26 11:48:23,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-26 11:48:23,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-26 11:48:23,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-26 11:48:23,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-26 11:48:23,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-26 11:48:23,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-26 11:48:23,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:23,878 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-26 11:48:23,878 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-26 11:48:23,878 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1450948286] [2023-11-26 11:48:23,878 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1450948286] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-26 11:48:23,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1753789279] [2023-11-26 11:48:23,879 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-26 11:48:23,879 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-26 11:48:23,879 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 [2023-11-26 11:48:23,884 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-26 11:48:23,944 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-26 11:48:24,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-26 11:48:24,045 INFO L262 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-26 11:48:24,057 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-26 11:48:24,297 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-26 11:48:24,298 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-26 11:48:24,608 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-26 11:48:24,608 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1753789279] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-26 11:48:24,608 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-26 11:48:24,609 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-26 11:48:24,609 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [946891366] [2023-11-26 11:48:24,609 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-26 11:48:24,610 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-26 11:48:24,610 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-26 11:48:24,611 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-26 11:48:24,611 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-26 11:48:24,612 INFO L87 Difference]: Start difference. First operand 425 states and 558 transitions. Second operand has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2023-11-26 11:48:26,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-26 11:48:26,467 INFO L93 Difference]: Finished difference Result 1006 states and 1349 transitions. [2023-11-26 11:48:26,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-26 11:48:26,468 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) Word has length 84 [2023-11-26 11:48:26,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-26 11:48:26,471 INFO L225 Difference]: With dead ends: 1006 [2023-11-26 11:48:26,471 INFO L226 Difference]: Without dead ends: 0 [2023-11-26 11:48:26,476 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 192 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 582 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2023-11-26 11:48:26,477 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 392 mSDsluCounter, 630 mSDsCounter, 0 mSdLazyCounter, 1187 mSolverCounterSat, 183 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 400 SdHoareTripleChecker+Valid, 750 SdHoareTripleChecker+Invalid, 1370 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 183 IncrementalHoareTripleChecker+Valid, 1187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2023-11-26 11:48:26,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [400 Valid, 750 Invalid, 1370 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [183 Valid, 1187 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2023-11-26 11:48:26,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-26 11:48:26,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-26 11:48:26,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-26 11:48:26,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-26 11:48:26,481 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2023-11-26 11:48:26,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-26 11:48:26,481 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-26 11:48:26,482 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2023-11-26 11:48:26,482 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-26 11:48:26,482 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-26 11:48:26,485 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-26 11:48:26,500 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-26 11:48:26,694 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2023-11-26 11:48:26,697 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-26 11:48:30,449 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2023-11-26 11:48:30,450 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2023-11-26 11:48:30,450 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2023-11-26 11:48:30,450 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2023-11-26 11:48:30,450 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 758 769) the Hoare annotation is: true [2023-11-26 11:48:30,450 INFO L899 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2023-11-26 11:48:30,450 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L902 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2023-11-26 11:48:30,451 INFO L899 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L899 garLoopResultBuilder]: For program point L852(lines 827 856) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L899 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 827 856) the Hoare annotation is: true [2023-11-26 11:48:30,451 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2023-11-26 11:48:30,451 INFO L902 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2023-11-26 11:48:30,451 INFO L902 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2023-11-26 11:48:30,452 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse2 (<= ~waterLevel~0 1)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not .cse14)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse5 (and .cse8 .cse14 .cse12 .cse13)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (= 0 ~systemActive~0)))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse3 .cse5 .cse6) (or .cse7 (and .cse8 .cse9) .cse10 .cse11) (or (and .cse8 .cse2 .cse9) .cse7 .cse1 .cse10) (or .cse0 .cse1 .cse3 .cse5 .cse10 .cse6) (or .cse7 .cse4 .cse11)))) [2023-11-26 11:48:30,452 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2023-11-26 11:48:30,452 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-11-26 11:48:30,452 INFO L899 garLoopResultBuilder]: For program point L593-1(lines 574 598) no Hoare annotation was computed. [2023-11-26 11:48:30,453 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2023-11-26 11:48:30,453 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2023-11-26 11:48:30,453 INFO L899 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2023-11-26 11:48:30,453 INFO L899 garLoopResultBuilder]: For program point L738-2(lines 734 745) no Hoare annotation was computed. [2023-11-26 11:48:30,453 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-26 11:48:30,453 INFO L899 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2023-11-26 11:48:30,454 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 946 974) no Hoare annotation was computed. [2023-11-26 11:48:30,455 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 513 539) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-26 11:48:30,455 INFO L899 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2023-11-26 11:48:30,455 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-26 11:48:30,455 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2023-11-26 11:48:30,468 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2023-11-26 11:48:30,472 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-26 11:48:30,472 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-26 11:48:30,472 INFO L899 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2023-11-26 11:48:30,472 INFO L899 garLoopResultBuilder]: For program point L494(lines 431 498) no Hoare annotation was computed. [2023-11-26 11:48:30,473 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2023-11-26 11:48:30,473 INFO L899 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2023-11-26 11:48:30,474 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-26 11:48:30,474 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse3 (= 2 ~waterLevel~0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse4 .cse1) (and .cse5 .cse3 .cse4 .cse1) (and .cse5 .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse4 .cse1))) [2023-11-26 11:48:30,475 INFO L895 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2023-11-26 11:48:30,475 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-26 11:48:30,475 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-11-26 11:48:30,475 INFO L895 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-26 11:48:30,475 INFO L899 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2023-11-26 11:48:30,476 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2023-11-26 11:48:30,476 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2023-11-26 11:48:30,476 INFO L895 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-26 11:48:30,476 INFO L899 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2023-11-26 11:48:30,476 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-26 11:48:30,477 INFO L895 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse3 (= 2 ~waterLevel~0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse4 .cse1) (and .cse5 .cse3 .cse4 .cse1) (and .cse5 .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse4 .cse1))) [2023-11-26 11:48:30,477 INFO L899 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2023-11-26 11:48:30,477 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2023-11-26 11:48:30,477 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2023-11-26 11:48:30,477 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2023-11-26 11:48:30,478 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2023-11-26 11:48:30,478 INFO L899 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2023-11-26 11:48:30,478 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 746 757) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (= 2 ~waterLevel~0) .cse1 (not (= |old(~waterLevel~0)| 2))) (or .cse2 .cse1 .cse3 .cse4) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse3) (or .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-26 11:48:30,478 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not .cse3)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 0) .cse3 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)))) (and (or (< 2 ~waterLevel~0) .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse0 .cse2 (< 1 ~waterLevel~0)) (or .cse1 .cse0 (not (= 2 ~waterLevel~0)) .cse2)))) [2023-11-26 11:48:30,479 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2023-11-26 11:48:30,481 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 548 572) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 .cse0 (< 1 ~waterLevel~0)) (or .cse1 .cse2 .cse0 (not (= 2 ~waterLevel~0))))) [2023-11-26 11:48:30,481 INFO L899 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2023-11-26 11:48:30,481 INFO L899 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2023-11-26 11:48:30,481 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0))) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-26 11:48:30,482 INFO L899 garLoopResultBuilder]: For program point L614-2(lines 607 623) no Hoare annotation was computed. [2023-11-26 11:48:30,482 INFO L899 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2023-11-26 11:48:30,482 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 811 824) no Hoare annotation was computed. [2023-11-26 11:48:30,482 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2023-11-26 11:48:30,482 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2023-11-26 11:48:30,483 INFO L895 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-26 11:48:30,483 INFO L899 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2023-11-26 11:48:30,483 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2023-11-26 11:48:30,483 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2023-11-26 11:48:30,484 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2023-11-26 11:48:30,484 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 643 651) the Hoare annotation is: true [2023-11-26 11:48:30,484 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2023-11-26 11:48:30,484 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 632 642) the Hoare annotation is: true [2023-11-26 11:48:30,488 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-26 11:48:30,491 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-26 11:48:30,509 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 26.11 11:48:30 BoogieIcfgContainer [2023-11-26 11:48:30,509 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-26 11:48:30,510 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-26 11:48:30,510 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-26 11:48:30,510 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-26 11:48:30,511 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 26.11 11:48:18" (3/4) ... [2023-11-26 11:48:30,513 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-26 11:48:30,518 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-26 11:48:30,518 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-26 11:48:30,518 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-26 11:48:30,518 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-26 11:48:30,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-26 11:48:30,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-26 11:48:30,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-26 11:48:30,519 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-26 11:48:30,520 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-26 11:48:30,539 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 34 nodes and edges [2023-11-26 11:48:30,540 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-26 11:48:30,541 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-26 11:48:30,542 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:48:30,542 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-26 11:48:30,723 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/witness.graphml [2023-11-26 11:48:30,723 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/witness.yml [2023-11-26 11:48:30,724 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-26 11:48:30,724 INFO L158 Benchmark]: Toolchain (without parser) took 13857.47ms. Allocated memory was 163.6MB in the beginning and 243.3MB in the end (delta: 79.7MB). Free memory was 122.2MB in the beginning and 163.2MB in the end (delta: -40.9MB). Peak memory consumption was 40.9MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,725 INFO L158 Benchmark]: CDTParser took 0.37ms. Allocated memory is still 163.6MB. Free memory is still 134.5MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-26 11:48:30,725 INFO L158 Benchmark]: CACSL2BoogieTranslator took 651.44ms. Allocated memory is still 163.6MB. Free memory was 121.7MB in the beginning and 102.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,726 INFO L158 Benchmark]: Boogie Procedure Inliner took 97.93ms. Allocated memory is still 163.6MB. Free memory was 102.4MB in the beginning and 99.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,726 INFO L158 Benchmark]: Boogie Preprocessor took 72.03ms. Allocated memory is still 163.6MB. Free memory was 99.7MB in the beginning and 97.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,727 INFO L158 Benchmark]: RCFGBuilder took 599.59ms. Allocated memory is still 163.6MB. Free memory was 97.6MB in the beginning and 75.1MB in the end (delta: 22.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,727 INFO L158 Benchmark]: TraceAbstraction took 12214.56ms. Allocated memory was 163.6MB in the beginning and 243.3MB in the end (delta: 79.7MB). Free memory was 74.0MB in the beginning and 171.6MB in the end (delta: -97.6MB). Peak memory consumption was 88.1MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,728 INFO L158 Benchmark]: Witness Printer took 213.97ms. Allocated memory is still 243.3MB. Free memory was 171.6MB in the beginning and 163.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-26 11:48:30,733 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.37ms. Allocated memory is still 163.6MB. Free memory is still 134.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 651.44ms. Allocated memory is still 163.6MB. Free memory was 121.7MB in the beginning and 102.4MB in the end (delta: 19.3MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 97.93ms. Allocated memory is still 163.6MB. Free memory was 102.4MB in the beginning and 99.7MB in the end (delta: 2.6MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 72.03ms. Allocated memory is still 163.6MB. Free memory was 99.7MB in the beginning and 97.6MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 599.59ms. Allocated memory is still 163.6MB. Free memory was 97.6MB in the beginning and 75.1MB in the end (delta: 22.5MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 12214.56ms. Allocated memory was 163.6MB in the beginning and 243.3MB in the end (delta: 79.7MB). Free memory was 74.0MB in the beginning and 171.6MB in the end (delta: -97.6MB). Peak memory consumption was 88.1MB. Max. memory is 16.1GB. * Witness Printer took 213.97ms. Allocated memory is still 243.3MB. Free memory was 171.6MB in the beginning and 163.2MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] - GenericResultAtLocation [Line: 424]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] - GenericResultAtLocation [Line: 499]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] - GenericResultAtLocation [Line: 730]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] - GenericResultAtLocation [Line: 825]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] - GenericResultAtLocation [Line: 926]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] - GenericResultAtLocation [Line: 975]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.1s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1422 SdHoareTripleChecker+Valid, 2.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1376 mSDsluCounter, 2705 SdHoareTripleChecker+Invalid, 2.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1834 mSDsCounter, 479 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2524 IncrementalHoareTripleChecker+Invalid, 3003 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 479 mSolverCounterUnsat, 871 mSDtfsCounter, 2524 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 383 GetRequests, 278 SyntacticMatches, 4 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 700 ImplicationChecksByTransitivity, 1.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=667occurred in iteration=8, InterpolantAutomatonStates: 101, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 10 MinimizatonAttempts, 61 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1226 PreInvPairs, 1363 NumberOfFragments, 1252 HoareAnnotationTreeSize, 1226 FomulaSimplifications, 2210 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 27 FomulaSimplificationsInter, 5091 FormulaSimplificationTreeSizeReductionInter, 3.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 521 NumberOfCodeBlocks, 521 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 593 ConstructedInterpolants, 0 QuantifiedInterpolants, 1107 SizeOfPredicates, 3 NumberOfNonLiveVariables, 322 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 104/125 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2023-11-26 11:48:30,755 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e9a6b43-2fa5-4853-84b9-194ebb8e448d/bin/uautomizer-verify-VRDe98Ueme/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE