./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0e0057cc Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-0e0057c [2023-11-29 01:03:47,633 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-29 01:03:47,696 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-29 01:03:47,701 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-29 01:03:47,702 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-29 01:03:47,725 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-29 01:03:47,725 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-29 01:03:47,726 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-29 01:03:47,726 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-29 01:03:47,727 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-29 01:03:47,727 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-29 01:03:47,728 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-29 01:03:47,729 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-29 01:03:47,729 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-29 01:03:47,730 INFO L153 SettingsManager]: * Use SBE=true [2023-11-29 01:03:47,730 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-29 01:03:47,731 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-29 01:03:47,731 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-29 01:03:47,732 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-29 01:03:47,732 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-29 01:03:47,733 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-29 01:03:47,733 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-29 01:03:47,734 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-29 01:03:47,734 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-29 01:03:47,735 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-29 01:03:47,735 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-29 01:03:47,736 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-29 01:03:47,736 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-29 01:03:47,736 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-29 01:03:47,737 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2023-11-29 01:03:47,737 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-29 01:03:47,738 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 01:03:47,738 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-29 01:03:47,738 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-29 01:03:47,738 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-29 01:03:47,739 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-29 01:03:47,740 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-29 01:03:47,740 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96a9f4a5eb48d3a052332271e6f513d6efe176b9f027fc1b42847acbd4831cf9 [2023-11-29 01:03:47,939 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-29 01:03:47,961 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-29 01:03:47,964 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-29 01:03:47,965 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-29 01:03:47,965 INFO L274 PluginConnector]: CDTParser initialized [2023-11-29 01:03:47,966 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/../../sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-11-29 01:03:50,687 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-29 01:03:50,935 INFO L384 CDTParser]: Found 1 translation units. [2023-11-29 01:03:50,935 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c [2023-11-29 01:03:50,951 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/data/47404303e/d7da6a2fd1b14700918d5f31f6366f4c/FLAG6401bac70 [2023-11-29 01:03:50,964 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/data/47404303e/d7da6a2fd1b14700918d5f31f6366f4c [2023-11-29 01:03:50,966 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-29 01:03:50,968 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-29 01:03:50,969 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-29 01:03:50,969 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-29 01:03:50,974 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-29 01:03:50,975 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 01:03:50" (1/1) ... [2023-11-29 01:03:50,976 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5914c87e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:50, skipping insertion in model container [2023-11-29 01:03:50,976 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 29.11 01:03:50" (1/1) ... [2023-11-29 01:03:51,030 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-29 01:03:51,242 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-11-29 01:03:51,288 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 01:03:51,301 INFO L202 MainTranslator]: Completed pre-run [2023-11-29 01:03:51,312 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] [2023-11-29 01:03:51,313 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] [2023-11-29 01:03:51,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] [2023-11-29 01:03:51,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] [2023-11-29 01:03:51,314 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] [2023-11-29 01:03:51,315 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] [2023-11-29 01:03:51,315 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] [2023-11-29 01:03:51,315 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] [2023-11-29 01:03:51,349 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/sv-benchmarks/c/product-lines/minepump_spec5_product48.cil.c[11292,11305] [2023-11-29 01:03:51,367 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-29 01:03:51,387 INFO L206 MainTranslator]: Completed translation [2023-11-29 01:03:51,387 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51 WrapperNode [2023-11-29 01:03:51,387 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-29 01:03:51,388 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-29 01:03:51,389 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-29 01:03:51,389 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-29 01:03:51,396 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,409 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,433 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 217 [2023-11-29 01:03:51,434 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-29 01:03:51,434 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-29 01:03:51,435 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-29 01:03:51,435 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-29 01:03:51,446 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,447 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,449 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,464 INFO L175 MemorySlicer]: Split 2 memory accesses to 1 slices as follows [2]. 100 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2]. The 0 writes are split as follows [0]. [2023-11-29 01:03:51,464 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,464 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,470 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,474 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,476 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,477 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,480 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-29 01:03:51,481 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-29 01:03:51,481 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-29 01:03:51,481 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-29 01:03:51,482 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (1/1) ... [2023-11-29 01:03:51,488 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2023-11-29 01:03:51,498 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 01:03:51,510 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2023-11-29 01:03:51,518 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2023-11-29 01:03:51,550 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-29 01:03:51,550 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-29 01:03:51,550 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-29 01:03:51,551 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-29 01:03:51,551 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-29 01:03:51,551 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-29 01:03:51,551 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-29 01:03:51,551 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-29 01:03:51,551 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-29 01:03:51,552 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 01:03:51,552 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-29 01:03:51,552 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2023-11-29 01:03:51,552 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2023-11-29 01:03:51,552 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-29 01:03:51,553 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-29 01:03:51,553 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-29 01:03:51,553 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-29 01:03:51,553 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-29 01:03:51,553 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-29 01:03:51,554 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-29 01:03:51,554 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-29 01:03:51,554 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-29 01:03:51,640 INFO L241 CfgBuilder]: Building ICFG [2023-11-29 01:03:51,642 INFO L267 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-29 01:03:51,875 INFO L282 CfgBuilder]: Performing block encoding [2023-11-29 01:03:51,947 INFO L304 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-29 01:03:51,948 INFO L309 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-29 01:03:51,948 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:03:51 BoogieIcfgContainer [2023-11-29 01:03:51,948 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-29 01:03:51,965 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-29 01:03:51,966 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-29 01:03:51,969 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-29 01:03:51,969 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 29.11 01:03:50" (1/3) ... [2023-11-29 01:03:51,970 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1641a16b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 01:03:51, skipping insertion in model container [2023-11-29 01:03:51,970 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 29.11 01:03:51" (2/3) ... [2023-11-29 01:03:51,971 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1641a16b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 29.11 01:03:51, skipping insertion in model container [2023-11-29 01:03:51,971 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:03:51" (3/3) ... [2023-11-29 01:03:51,972 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product48.cil.c [2023-11-29 01:03:51,992 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-29 01:03:51,992 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-29 01:03:52,039 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-29 01:03:52,045 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2f10199d, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2023-11-29 01:03:52,045 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-29 01:03:52,049 INFO L276 IsEmpty]: Start isEmpty. Operand has 83 states, 56 states have (on average 1.5) internal successors, (84), 65 states have internal predecessors, (84), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-29 01:03:52,057 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2023-11-29 01:03:52,058 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:52,058 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:52,059 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:52,064 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:52,064 INFO L85 PathProgramCache]: Analyzing trace with hash -449197899, now seen corresponding path program 1 times [2023-11-29 01:03:52,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:52,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180186713] [2023-11-29 01:03:52,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:52,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:52,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:52,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 01:03:52,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,264 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:52,265 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:52,265 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180186713] [2023-11-29 01:03:52,266 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180186713] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:52,266 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:52,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-29 01:03:52,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [671167189] [2023-11-29 01:03:52,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:52,273 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-29 01:03:52,274 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:52,304 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-29 01:03:52,304 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 01:03:52,307 INFO L87 Difference]: Start difference. First operand has 83 states, 56 states have (on average 1.5) internal successors, (84), 65 states have internal predecessors, (84), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 13 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:52,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:52,371 INFO L93 Difference]: Finished difference Result 164 states and 233 transitions. [2023-11-29 01:03:52,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-29 01:03:52,374 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2023-11-29 01:03:52,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:52,384 INFO L225 Difference]: With dead ends: 164 [2023-11-29 01:03:52,385 INFO L226 Difference]: Without dead ends: 78 [2023-11-29 01:03:52,389 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-29 01:03:52,393 INFO L413 NwaCegarLoop]: 95 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 16 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 16 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:52,394 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 95 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 16 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:03:52,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2023-11-29 01:03:52,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2023-11-29 01:03:52,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 53 states have (on average 1.3962264150943395) internal successors, (74), 61 states have internal predecessors, (74), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 12 states have call predecessors, (15), 15 states have call successors, (15) [2023-11-29 01:03:52,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 105 transitions. [2023-11-29 01:03:52,443 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 105 transitions. Word has length 22 [2023-11-29 01:03:52,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:52,444 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 105 transitions. [2023-11-29 01:03:52,444 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 7.5) internal successors, (15), 2 states have internal predecessors, (15), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:52,445 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 105 transitions. [2023-11-29 01:03:52,447 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-29 01:03:52,448 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:52,448 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:52,448 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-29 01:03:52,448 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:52,449 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:52,449 INFO L85 PathProgramCache]: Analyzing trace with hash -202773606, now seen corresponding path program 1 times [2023-11-29 01:03:52,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:52,450 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1015956703] [2023-11-29 01:03:52,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:52,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:52,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 01:03:52,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 01:03:52,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,556 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:52,556 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:52,557 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1015956703] [2023-11-29 01:03:52,557 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1015956703] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:52,557 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:52,557 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 01:03:52,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1404566963] [2023-11-29 01:03:52,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:52,559 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 01:03:52,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:52,560 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 01:03:52,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:03:52,561 INFO L87 Difference]: Start difference. First operand 78 states and 105 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:52,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:52,600 INFO L93 Difference]: Finished difference Result 126 states and 168 transitions. [2023-11-29 01:03:52,601 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 01:03:52,601 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 23 [2023-11-29 01:03:52,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:52,603 INFO L225 Difference]: With dead ends: 126 [2023-11-29 01:03:52,603 INFO L226 Difference]: Without dead ends: 70 [2023-11-29 01:03:52,604 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:03:52,605 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 14 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:52,606 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 146 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:03:52,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2023-11-29 01:03:52,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 70. [2023-11-29 01:03:52,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 48 states have (on average 1.4166666666666667) internal successors, (68), 56 states have internal predecessors, (68), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-29 01:03:52,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 94 transitions. [2023-11-29 01:03:52,618 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 94 transitions. Word has length 23 [2023-11-29 01:03:52,618 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:52,619 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 94 transitions. [2023-11-29 01:03:52,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:52,619 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 94 transitions. [2023-11-29 01:03:52,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2023-11-29 01:03:52,621 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:52,621 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:52,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-29 01:03:52,621 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:52,622 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:52,622 INFO L85 PathProgramCache]: Analyzing trace with hash 1368182408, now seen corresponding path program 1 times [2023-11-29 01:03:52,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:52,623 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [253614784] [2023-11-29 01:03:52,623 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:52,623 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:52,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:03:52,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-29 01:03:52,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,710 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:52,710 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:52,710 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [253614784] [2023-11-29 01:03:52,710 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [253614784] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:52,711 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:52,711 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-29 01:03:52,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385814305] [2023-11-29 01:03:52,711 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:52,712 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-29 01:03:52,712 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:52,712 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-29 01:03:52,713 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:03:52,713 INFO L87 Difference]: Start difference. First operand 70 states and 94 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:03:52,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:52,775 INFO L93 Difference]: Finished difference Result 206 states and 279 transitions. [2023-11-29 01:03:52,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-29 01:03:52,776 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 26 [2023-11-29 01:03:52,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:52,778 INFO L225 Difference]: With dead ends: 206 [2023-11-29 01:03:52,779 INFO L226 Difference]: Without dead ends: 138 [2023-11-29 01:03:52,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-29 01:03:52,781 INFO L413 NwaCegarLoop]: 92 mSDtfsCounter, 85 mSDsluCounter, 79 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:52,782 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 171 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-29 01:03:52,783 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 138 states. [2023-11-29 01:03:52,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 138 to 135. [2023-11-29 01:03:52,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135 states, 92 states have (on average 1.423913043478261) internal successors, (131), 107 states have internal predecessors, (131), 26 states have call successors, (26), 16 states have call predecessors, (26), 16 states have return successors, (26), 19 states have call predecessors, (26), 26 states have call successors, (26) [2023-11-29 01:03:52,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 183 transitions. [2023-11-29 01:03:52,806 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 183 transitions. Word has length 26 [2023-11-29 01:03:52,806 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:52,807 INFO L495 AbstractCegarLoop]: Abstraction has 135 states and 183 transitions. [2023-11-29 01:03:52,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2023-11-29 01:03:52,807 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 183 transitions. [2023-11-29 01:03:52,809 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2023-11-29 01:03:52,809 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:52,810 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:52,810 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-29 01:03:52,810 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:52,811 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:52,811 INFO L85 PathProgramCache]: Analyzing trace with hash 36370968, now seen corresponding path program 1 times [2023-11-29 01:03:52,811 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:52,811 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345707313] [2023-11-29 01:03:52,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:52,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:52,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-29 01:03:52,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 01:03:52,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:52,953 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-29 01:03:52,953 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:52,953 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345707313] [2023-11-29 01:03:52,954 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [345707313] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:52,954 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:52,954 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-29 01:03:52,954 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349351970] [2023-11-29 01:03:52,954 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:52,955 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-29 01:03:52,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:52,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-29 01:03:52,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-29 01:03:52,956 INFO L87 Difference]: Start difference. First operand 135 states and 183 transitions. Second operand has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:53,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:53,135 INFO L93 Difference]: Finished difference Result 358 states and 489 transitions. [2023-11-29 01:03:53,136 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-29 01:03:53,136 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 29 [2023-11-29 01:03:53,137 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:53,140 INFO L225 Difference]: With dead ends: 358 [2023-11-29 01:03:53,140 INFO L226 Difference]: Without dead ends: 225 [2023-11-29 01:03:53,141 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2023-11-29 01:03:53,143 INFO L413 NwaCegarLoop]: 80 mSDtfsCounter, 51 mSDsluCounter, 265 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 345 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:53,143 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 345 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 01:03:53,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2023-11-29 01:03:53,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 220. [2023-11-29 01:03:53,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 220 states, 153 states have (on average 1.3529411764705883) internal successors, (207), 170 states have internal predecessors, (207), 36 states have call successors, (36), 30 states have call predecessors, (36), 30 states have return successors, (44), 33 states have call predecessors, (44), 36 states have call successors, (44) [2023-11-29 01:03:53,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 220 states to 220 states and 287 transitions. [2023-11-29 01:03:53,174 INFO L78 Accepts]: Start accepts. Automaton has 220 states and 287 transitions. Word has length 29 [2023-11-29 01:03:53,174 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:53,175 INFO L495 AbstractCegarLoop]: Abstraction has 220 states and 287 transitions. [2023-11-29 01:03:53,175 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 4.8) internal successors, (24), 5 states have internal predecessors, (24), 1 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2023-11-29 01:03:53,175 INFO L276 IsEmpty]: Start isEmpty. Operand 220 states and 287 transitions. [2023-11-29 01:03:53,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 01:03:53,178 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:53,178 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:53,178 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-29 01:03:53,178 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:53,179 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:53,179 INFO L85 PathProgramCache]: Analyzing trace with hash -1201233109, now seen corresponding path program 1 times [2023-11-29 01:03:53,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:53,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1826286145] [2023-11-29 01:03:53,180 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:53,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:53,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:03:53,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 01:03:53,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:53,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 01:03:53,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,290 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:53,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:53,290 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1826286145] [2023-11-29 01:03:53,291 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1826286145] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:53,291 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:53,291 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 01:03:53,291 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [594866891] [2023-11-29 01:03:53,291 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:53,292 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 01:03:53,292 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:53,293 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 01:03:53,293 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:03:53,293 INFO L87 Difference]: Start difference. First operand 220 states and 287 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 01:03:53,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:53,477 INFO L93 Difference]: Finished difference Result 486 states and 651 transitions. [2023-11-29 01:03:53,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 01:03:53,478 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 44 [2023-11-29 01:03:53,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:53,482 INFO L225 Difference]: With dead ends: 486 [2023-11-29 01:03:53,482 INFO L226 Difference]: Without dead ends: 268 [2023-11-29 01:03:53,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 01:03:53,484 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 54 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 133 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 133 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:53,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 214 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 01:03:53,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 268 states. [2023-11-29 01:03:53,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 268 to 262. [2023-11-29 01:03:53,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 262 states, 185 states have (on average 1.335135135135135) internal successors, (247), 202 states have internal predecessors, (247), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2023-11-29 01:03:53,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 262 states to 262 states and 341 transitions. [2023-11-29 01:03:53,529 INFO L78 Accepts]: Start accepts. Automaton has 262 states and 341 transitions. Word has length 44 [2023-11-29 01:03:53,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:53,530 INFO L495 AbstractCegarLoop]: Abstraction has 262 states and 341 transitions. [2023-11-29 01:03:53,530 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 01:03:53,530 INFO L276 IsEmpty]: Start isEmpty. Operand 262 states and 341 transitions. [2023-11-29 01:03:53,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 01:03:53,538 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:53,539 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:53,539 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-29 01:03:53,539 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:53,540 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:53,540 INFO L85 PathProgramCache]: Analyzing trace with hash -778531283, now seen corresponding path program 1 times [2023-11-29 01:03:53,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:53,540 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [186002537] [2023-11-29 01:03:53,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:53,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:53,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:03:53,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 01:03:53,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:53,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 01:03:53,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,643 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:53,643 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:53,644 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [186002537] [2023-11-29 01:03:53,644 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [186002537] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:53,644 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:53,644 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 01:03:53,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107902838] [2023-11-29 01:03:53,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:53,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 01:03:53,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:53,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 01:03:53,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:03:53,646 INFO L87 Difference]: Start difference. First operand 262 states and 341 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 01:03:53,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:53,823 INFO L93 Difference]: Finished difference Result 538 states and 717 transitions. [2023-11-29 01:03:53,823 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-29 01:03:53,824 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 44 [2023-11-29 01:03:53,824 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:53,826 INFO L225 Difference]: With dead ends: 538 [2023-11-29 01:03:53,827 INFO L226 Difference]: Without dead ends: 278 [2023-11-29 01:03:53,828 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-29 01:03:53,829 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 59 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:53,829 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 214 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-29 01:03:53,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2023-11-29 01:03:53,852 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 266. [2023-11-29 01:03:53,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 266 states, 189 states have (on average 1.3280423280423281) internal successors, (251), 206 states have internal predecessors, (251), 40 states have call successors, (40), 30 states have call predecessors, (40), 36 states have return successors, (54), 41 states have call predecessors, (54), 40 states have call successors, (54) [2023-11-29 01:03:53,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 266 states to 266 states and 345 transitions. [2023-11-29 01:03:53,856 INFO L78 Accepts]: Start accepts. Automaton has 266 states and 345 transitions. Word has length 44 [2023-11-29 01:03:53,856 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:53,856 INFO L495 AbstractCegarLoop]: Abstraction has 266 states and 345 transitions. [2023-11-29 01:03:53,857 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-29 01:03:53,857 INFO L276 IsEmpty]: Start isEmpty. Operand 266 states and 345 transitions. [2023-11-29 01:03:53,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2023-11-29 01:03:53,858 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:53,858 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:53,858 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-29 01:03:53,859 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:53,859 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:53,859 INFO L85 PathProgramCache]: Analyzing trace with hash 1710997679, now seen corresponding path program 1 times [2023-11-29 01:03:53,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:53,859 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [125772562] [2023-11-29 01:03:53,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:53,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:53,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-29 01:03:53,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2023-11-29 01:03:53,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:53,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2023-11-29 01:03:53,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:53,950 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:53,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:53,951 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [125772562] [2023-11-29 01:03:53,951 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [125772562] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:53,951 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:53,951 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-29 01:03:53,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [312029840] [2023-11-29 01:03:53,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:53,952 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-29 01:03:53,952 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:53,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-29 01:03:53,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-29 01:03:53,953 INFO L87 Difference]: Start difference. First operand 266 states and 345 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 01:03:54,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:54,300 INFO L93 Difference]: Finished difference Result 863 states and 1195 transitions. [2023-11-29 01:03:54,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-29 01:03:54,301 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 44 [2023-11-29 01:03:54,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:54,306 INFO L225 Difference]: With dead ends: 863 [2023-11-29 01:03:54,306 INFO L226 Difference]: Without dead ends: 599 [2023-11-29 01:03:54,308 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-29 01:03:54,309 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 202 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 281 SdHoareTripleChecker+Invalid, 309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:54,309 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 281 Invalid, 309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 01:03:54,310 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 599 states. [2023-11-29 01:03:54,359 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 599 to 591. [2023-11-29 01:03:54,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 591 states, 418 states have (on average 1.313397129186603) internal successors, (549), 449 states have internal predecessors, (549), 96 states have call successors, (96), 77 states have call predecessors, (96), 76 states have return successors, (146), 90 states have call predecessors, (146), 96 states have call successors, (146) [2023-11-29 01:03:54,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 591 states to 591 states and 791 transitions. [2023-11-29 01:03:54,367 INFO L78 Accepts]: Start accepts. Automaton has 591 states and 791 transitions. Word has length 44 [2023-11-29 01:03:54,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:54,367 INFO L495 AbstractCegarLoop]: Abstraction has 591 states and 791 transitions. [2023-11-29 01:03:54,367 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2023-11-29 01:03:54,367 INFO L276 IsEmpty]: Start isEmpty. Operand 591 states and 791 transitions. [2023-11-29 01:03:54,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2023-11-29 01:03:54,369 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:54,370 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:54,370 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-29 01:03:54,370 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:54,370 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:54,371 INFO L85 PathProgramCache]: Analyzing trace with hash -733397867, now seen corresponding path program 1 times [2023-11-29 01:03:54,371 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:54,371 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597569496] [2023-11-29 01:03:54,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:54,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:54,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:03:54,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-29 01:03:54,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2023-11-29 01:03:54,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:54,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-29 01:03:54,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:54,541 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2023-11-29 01:03:54,541 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:54,541 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597569496] [2023-11-29 01:03:54,541 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597569496] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:54,542 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:54,542 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-29 01:03:54,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [699754917] [2023-11-29 01:03:54,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:54,542 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-29 01:03:54,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:54,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-29 01:03:54,543 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-29 01:03:54,544 INFO L87 Difference]: Start difference. First operand 591 states and 791 transitions. Second operand has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 01:03:55,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:55,057 INFO L93 Difference]: Finished difference Result 1275 states and 1729 transitions. [2023-11-29 01:03:55,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2023-11-29 01:03:55,060 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 48 [2023-11-29 01:03:55,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:55,064 INFO L225 Difference]: With dead ends: 1275 [2023-11-29 01:03:55,064 INFO L226 Difference]: Without dead ends: 686 [2023-11-29 01:03:55,066 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=138, Invalid=324, Unknown=0, NotChecked=0, Total=462 [2023-11-29 01:03:55,067 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 303 mSDsluCounter, 175 mSDsCounter, 0 mSdLazyCounter, 327 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 308 SdHoareTripleChecker+Valid, 248 SdHoareTripleChecker+Invalid, 441 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 327 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:55,068 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [308 Valid, 248 Invalid, 441 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 327 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 01:03:55,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2023-11-29 01:03:55,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 667. [2023-11-29 01:03:55,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 667 states, 472 states have (on average 1.2923728813559323) internal successors, (610), 511 states have internal predecessors, (610), 108 states have call successors, (108), 77 states have call predecessors, (108), 86 states have return successors, (180), 104 states have call predecessors, (180), 108 states have call successors, (180) [2023-11-29 01:03:55,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 667 states to 667 states and 898 transitions. [2023-11-29 01:03:55,128 INFO L78 Accepts]: Start accepts. Automaton has 667 states and 898 transitions. Word has length 48 [2023-11-29 01:03:55,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:55,129 INFO L495 AbstractCegarLoop]: Abstraction has 667 states and 898 transitions. [2023-11-29 01:03:55,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.5) internal successors, (36), 6 states have internal predecessors, (36), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-29 01:03:55,129 INFO L276 IsEmpty]: Start isEmpty. Operand 667 states and 898 transitions. [2023-11-29 01:03:55,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2023-11-29 01:03:55,132 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:55,132 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:55,132 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-29 01:03:55,132 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:55,133 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:55,133 INFO L85 PathProgramCache]: Analyzing trace with hash 2067267942, now seen corresponding path program 1 times [2023-11-29 01:03:55,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:55,133 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107616604] [2023-11-29 01:03:55,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:55,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:55,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:03:55,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2023-11-29 01:03:55,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:03:55,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 01:03:55,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:55,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2023-11-29 01:03:55,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 01:03:55,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,222 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2023-11-29 01:03:55,222 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:55,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107616604] [2023-11-29 01:03:55,222 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2107616604] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-29 01:03:55,222 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-29 01:03:55,222 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-29 01:03:55,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448442071] [2023-11-29 01:03:55,223 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-29 01:03:55,223 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-29 01:03:55,223 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:55,224 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-29 01:03:55,224 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2023-11-29 01:03:55,224 INFO L87 Difference]: Start difference. First operand 667 states and 898 transitions. Second operand has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 01:03:55,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:55,610 INFO L93 Difference]: Finished difference Result 1098 states and 1470 transitions. [2023-11-29 01:03:55,611 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-29 01:03:55,611 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 73 [2023-11-29 01:03:55,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:55,614 INFO L225 Difference]: With dead ends: 1098 [2023-11-29 01:03:55,615 INFO L226 Difference]: Without dead ends: 433 [2023-11-29 01:03:55,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2023-11-29 01:03:55,618 INFO L413 NwaCegarLoop]: 79 mSDtfsCounter, 216 mSDsluCounter, 162 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 225 SdHoareTripleChecker+Valid, 241 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:55,618 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [225 Valid, 241 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-29 01:03:55,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2023-11-29 01:03:55,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 425. [2023-11-29 01:03:55,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 425 states, 302 states have (on average 1.2781456953642385) internal successors, (386), 327 states have internal predecessors, (386), 68 states have call successors, (68), 51 states have call predecessors, (68), 54 states have return successors, (104), 66 states have call predecessors, (104), 68 states have call successors, (104) [2023-11-29 01:03:55,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 425 states to 425 states and 558 transitions. [2023-11-29 01:03:55,665 INFO L78 Accepts]: Start accepts. Automaton has 425 states and 558 transitions. Word has length 73 [2023-11-29 01:03:55,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:55,666 INFO L495 AbstractCegarLoop]: Abstraction has 425 states and 558 transitions. [2023-11-29 01:03:55,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 9.333333333333334) internal successors, (56), 4 states have internal predecessors, (56), 4 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-29 01:03:55,666 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 558 transitions. [2023-11-29 01:03:55,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 85 [2023-11-29 01:03:55,668 INFO L187 NwaCegarLoop]: Found error trace [2023-11-29 01:03:55,669 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:03:55,669 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2023-11-29 01:03:55,669 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-29 01:03:55,669 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-29 01:03:55,669 INFO L85 PathProgramCache]: Analyzing trace with hash -1943847318, now seen corresponding path program 1 times [2023-11-29 01:03:55,670 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-29 01:03:55,670 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886106717] [2023-11-29 01:03:55,670 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:55,670 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-29 01:03:55,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2023-11-29 01:03:55,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2023-11-29 01:03:55,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-29 01:03:55,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-29 01:03:55,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-29 01:03:55,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2023-11-29 01:03:55,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2023-11-29 01:03:55,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2023-11-29 01:03:55,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-29 01:03:55,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-29 01:03:55,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,874 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 13 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 01:03:55,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-29 01:03:55,875 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886106717] [2023-11-29 01:03:55,875 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886106717] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-29 01:03:55,875 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1801230171] [2023-11-29 01:03:55,875 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-29 01:03:55,875 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:03:55,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 [2023-11-29 01:03:55,881 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-29 01:03:55,882 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-29 01:03:55,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-29 01:03:55,982 INFO L262 TraceCheckSpWp]: Trace formula consists of 322 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-29 01:03:55,989 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-29 01:03:56,131 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-29 01:03:56,131 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2023-11-29 01:03:56,333 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 15 proven. 6 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2023-11-29 01:03:56,334 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1801230171] provided 0 perfect and 2 imperfect interpolant sequences [2023-11-29 01:03:56,334 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2023-11-29 01:03:56,334 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 6, 6] total 15 [2023-11-29 01:03:56,334 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1637593654] [2023-11-29 01:03:56,334 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2023-11-29 01:03:56,335 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2023-11-29 01:03:56,335 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-29 01:03:56,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2023-11-29 01:03:56,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=174, Unknown=0, NotChecked=0, Total=210 [2023-11-29 01:03:56,337 INFO L87 Difference]: Start difference. First operand 425 states and 558 transitions. Second operand has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2023-11-29 01:03:57,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-29 01:03:57,587 INFO L93 Difference]: Finished difference Result 1006 states and 1349 transitions. [2023-11-29 01:03:57,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2023-11-29 01:03:57,588 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) Word has length 84 [2023-11-29 01:03:57,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-29 01:03:57,589 INFO L225 Difference]: With dead ends: 1006 [2023-11-29 01:03:57,589 INFO L226 Difference]: Without dead ends: 0 [2023-11-29 01:03:57,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 241 GetRequests, 192 SyntacticMatches, 4 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 582 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=451, Invalid=1711, Unknown=0, NotChecked=0, Total=2162 [2023-11-29 01:03:57,594 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 392 mSDsluCounter, 630 mSDsCounter, 0 mSdLazyCounter, 1187 mSolverCounterSat, 183 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 400 SdHoareTripleChecker+Valid, 750 SdHoareTripleChecker+Invalid, 1370 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 183 IncrementalHoareTripleChecker+Valid, 1187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2023-11-29 01:03:57,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [400 Valid, 750 Invalid, 1370 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [183 Valid, 1187 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2023-11-29 01:03:57,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-29 01:03:57,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-29 01:03:57,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-29 01:03:57,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-29 01:03:57,595 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 84 [2023-11-29 01:03:57,595 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-29 01:03:57,596 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-29 01:03:57,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 11 states have (on average 8.545454545454545) internal successors, (94), 10 states have internal predecessors, (94), 6 states have call successors, (24), 7 states have call predecessors, (24), 6 states have return successors, (20), 7 states have call predecessors, (20), 6 states have call successors, (20) [2023-11-29 01:03:57,596 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-29 01:03:57,596 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-29 01:03:57,598 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-29 01:03:57,605 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-29 01:03:57,799 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-29 01:03:57,802 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-29 01:04:00,085 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2023-11-29 01:04:00,085 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (< |old(~pumpRunning~0)| 1))) (and (or (< 2 ~waterLevel~0) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse2) (or .cse0 .cse1 (not (= 2 ~waterLevel~0)) .cse2))) [2023-11-29 01:04:00,085 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 540 546) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 540 546) the Hoare annotation is: true [2023-11-29 01:04:00,086 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 758 769) the Hoare annotation is: true [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point L762-1(lines 758 769) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 758 769) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L902 garLoopResultBuilder]: At program point L833(line 833) the Hoare annotation is: true [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point L833-1(line 833) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 827 856) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point L852(lines 827 856) no Hoare annotation was computed. [2023-11-29 01:04:00,086 INFO L899 garLoopResultBuilder]: For program point L848(line 848) no Hoare annotation was computed. [2023-11-29 01:04:00,087 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 827 856) the Hoare annotation is: true [2023-11-29 01:04:00,087 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2023-11-29 01:04:00,087 INFO L902 garLoopResultBuilder]: At program point L841-1(lines 841 845) the Hoare annotation is: true [2023-11-29 01:04:00,087 INFO L902 garLoopResultBuilder]: At program point L837-2(lines 837 851) the Hoare annotation is: true [2023-11-29 01:04:00,087 INFO L895 garLoopResultBuilder]: At program point L956(line 956) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (<= 1 ~switchedOnBeforeTS~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse2 (<= ~waterLevel~0 1)) (.cse9 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse1 (not .cse14)) (.cse3 (< |old(~pumpRunning~0)| 1)) (.cse5 (and .cse8 .cse14 .cse12 .cse13)) (.cse10 (< 2 |old(~waterLevel~0)|)) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse12 .cse13)) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~waterLevel~0)| 2))) (.cse11 (not (= 0 ~systemActive~0)))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse3 .cse5 .cse6) (or .cse7 (and .cse8 .cse9) .cse10 .cse11) (or (and .cse8 .cse2 .cse9) .cse7 .cse1 .cse10) (or .cse0 .cse1 .cse3 .cse5 .cse10 .cse6) (or .cse7 .cse4 .cse11)))) [2023-11-29 01:04:00,087 INFO L899 garLoopResultBuilder]: For program point L956-1(line 956) no Hoare annotation was computed. [2023-11-29 01:04:00,087 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse1 (< |old(~pumpRunning~0)| 1)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (not (= |old(~waterLevel~0)| 2)) .cse1) (or (< |old(~switchedOnBeforeTS~0)| 1) .cse0 .cse1 .cse2) (or .cse3 .cse2 (not (= 0 ~systemActive~0))) (or .cse3 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse2))) [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L593-1(lines 574 598) no Hoare annotation was computed. [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L527-1(lines 527 533) no Hoare annotation was computed. [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L738(lines 738 742) no Hoare annotation was computed. [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L738-2(lines 734 745) no Hoare annotation was computed. [2023-11-29 01:04:00,088 INFO L895 garLoopResultBuilder]: At program point L941(line 941) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-29 01:04:00,088 INFO L899 garLoopResultBuilder]: For program point L941-1(line 941) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L520(lines 520 526) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L520-2(lines 516 538) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L958(lines 958 968) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L954(lines 954 971) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L954-1(lines 946 974) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 513 539) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0)) (.cse4 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (< 1 |old(~waterLevel~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= 2 ~waterLevel~0)) (.cse10 (not (= |old(~waterLevel~0)| 2))) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse6 (and .cse8 .cse4 .cse5)) (.cse7 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 (< |old(~switchedOnBeforeTS~0)| 1) .cse1 .cse2 (and .cse3 .cse4 .cse5)) (or .cse0 .cse6 .cse7 .cse1) (or .cse7 .cse1 (and .cse8 .cse9 .cse4) .cse10) (or .cse1 (and .cse3 .cse9 .cse4) .cse10 .cse2) (or .cse6 .cse7 (< 2 |old(~waterLevel~0)|) (not (= 0 ~systemActive~0)))))) [2023-11-29 01:04:00,089 INFO L899 garLoopResultBuilder]: For program point L959(lines 959 965) no Hoare annotation was computed. [2023-11-29 01:04:00,089 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 01:04:00,090 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 513 539) no Hoare annotation was computed. [2023-11-29 01:04:00,090 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2023-11-29 01:04:00,090 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 01:04:00,090 INFO L895 garLoopResultBuilder]: At program point L580(line 580) the Hoare annotation is: (let ((.cse0 (< |old(~switchedOnBeforeTS~0)| 1)) (.cse2 (< |old(~pumpRunning~0)| 1)) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2) (or .cse1 (not (= |old(~waterLevel~0)| 2)) .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4 .cse3) (or .cse5 .cse1 .cse4) (or .cse5 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 01:04:00,090 INFO L899 garLoopResultBuilder]: For program point L580-1(line 580) no Hoare annotation was computed. [2023-11-29 01:04:00,090 INFO L899 garLoopResultBuilder]: For program point L494(lines 431 498) no Hoare annotation was computed. [2023-11-29 01:04:00,091 INFO L899 garLoopResultBuilder]: For program point L461(lines 461 467) no Hoare annotation was computed. [2023-11-29 01:04:00,091 INFO L899 garLoopResultBuilder]: For program point L461-1(lines 461 467) no Hoare annotation was computed. [2023-11-29 01:04:00,091 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 (= 2 ~waterLevel~0) .cse1 .cse2) (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 01:04:00,091 INFO L895 garLoopResultBuilder]: At program point L453(line 453) the Hoare annotation is: (let ((.cse3 (= 2 ~waterLevel~0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse4 .cse1) (and .cse5 .cse3 .cse4 .cse1) (and .cse5 .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse4 .cse1))) [2023-11-29 01:04:00,091 INFO L895 garLoopResultBuilder]: At program point L491(lines 440 492) the Hoare annotation is: false [2023-11-29 01:04:00,091 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-29 01:04:00,091 INFO L899 garLoopResultBuilder]: For program point L479(lines 479 485) no Hoare annotation was computed. [2023-11-29 01:04:00,091 INFO L895 garLoopResultBuilder]: At program point L479-2(lines 471 486) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 01:04:00,091 INFO L899 garLoopResultBuilder]: For program point L442(lines 441 490) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L471(lines 471 486) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L913(lines 913 920) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L895 garLoopResultBuilder]: At program point L463(line 463) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse1 .cse2) (and .cse4 (= 2 ~waterLevel~0) .cse3 .cse1) (and .cse4 .cse3 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)))) [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L913-2(lines 913 920) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L895 garLoopResultBuilder]: At program point L488(lines 441 490) the Hoare annotation is: (let ((.cse3 (= 2 ~waterLevel~0)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0)) (and .cse0 .cse3 .cse4 .cse1) (and .cse5 .cse3 .cse4 .cse1) (and .cse5 .cse4 .cse1 .cse2 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (<= ~waterLevel~0 1) .cse4 .cse1))) [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L711(lines 711 717) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L711-1(lines 711 717) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L451(lines 451 457) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 451 457) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 746 757) no Hoare annotation was computed. [2023-11-29 01:04:00,092 INFO L899 garLoopResultBuilder]: For program point L750-1(lines 746 757) no Hoare annotation was computed. [2023-11-29 01:04:00,093 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 746 757) the Hoare annotation is: (let ((.cse0 (< ~pumpRunning~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< 2 |old(~waterLevel~0)|))) (and (or .cse0 (= 2 ~waterLevel~0) .cse1 (not (= |old(~waterLevel~0)| 2))) (or .cse2 .cse1 .cse3 .cse4) (or (< 1 |old(~waterLevel~0)|) .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) .cse3) (or .cse2 .cse3 .cse4 (not (= 0 ~systemActive~0))))) [2023-11-29 01:04:00,093 INFO L895 garLoopResultBuilder]: At program point L562(line 562) the Hoare annotation is: (let ((.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not .cse3)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (and (= ~pumpRunning~0 0) .cse3 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0)))) (and (or (< 2 ~waterLevel~0) .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse0 .cse2 (< 1 ~waterLevel~0)) (or .cse1 .cse0 (not (= 2 ~waterLevel~0)) .cse2)))) [2023-11-29 01:04:00,093 INFO L899 garLoopResultBuilder]: For program point L556(lines 556 564) no Hoare annotation was computed. [2023-11-29 01:04:00,093 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 548 572) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (< 2 ~waterLevel~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)) (or .cse1 .cse2 .cse0 (< 1 ~waterLevel~0)) (or .cse1 .cse2 .cse0 (not (= 2 ~waterLevel~0))))) [2023-11-29 01:04:00,093 INFO L899 garLoopResultBuilder]: For program point L552(lines 552 569) no Hoare annotation was computed. [2023-11-29 01:04:00,093 INFO L899 garLoopResultBuilder]: For program point L614(lines 614 620) no Hoare annotation was computed. [2023-11-29 01:04:00,093 INFO L895 garLoopResultBuilder]: At program point L612(line 612) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1 (and (= ~pumpRunning~0 0) (= 2 ~waterLevel~0))) (or .cse0 .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 01:04:00,093 INFO L899 garLoopResultBuilder]: For program point L614-2(lines 607 623) no Hoare annotation was computed. [2023-11-29 01:04:00,094 INFO L899 garLoopResultBuilder]: For program point L612-1(line 612) no Hoare annotation was computed. [2023-11-29 01:04:00,094 INFO L899 garLoopResultBuilder]: For program point isHighWaterSensorDry_returnLabel#1(lines 811 824) no Hoare annotation was computed. [2023-11-29 01:04:00,098 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2023-11-29 01:04:00,099 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2023-11-29 01:04:00,099 INFO L895 garLoopResultBuilder]: At program point L567(line 567) the Hoare annotation is: (let ((.cse0 (< 2 ~waterLevel~0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~pumpRunning~0)| 0)) .cse1) (or .cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 (< ~switchedOnBeforeTS~0 1) (< |old(~pumpRunning~0)| 1)))) [2023-11-29 01:04:00,099 INFO L899 garLoopResultBuilder]: For program point L567-1(lines 548 572) no Hoare annotation was computed. [2023-11-29 01:04:00,099 INFO L899 garLoopResultBuilder]: For program point L815(lines 815 821) no Hoare annotation was computed. [2023-11-29 01:04:00,099 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 548 572) no Hoare annotation was computed. [2023-11-29 01:04:00,100 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 643 651) no Hoare annotation was computed. [2023-11-29 01:04:00,100 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 643 651) the Hoare annotation is: true [2023-11-29 01:04:00,100 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 632 642) no Hoare annotation was computed. [2023-11-29 01:04:00,100 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 632 642) the Hoare annotation is: true [2023-11-29 01:04:00,102 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-29 01:04:00,104 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-29 01:04:00,113 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 29.11 01:04:00 BoogieIcfgContainer [2023-11-29 01:04:00,113 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-29 01:04:00,113 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-29 01:04:00,113 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-29 01:04:00,114 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-29 01:04:00,114 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 29.11 01:03:51" (3/4) ... [2023-11-29 01:04:00,115 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-29 01:04:00,118 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-29 01:04:00,118 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-29 01:04:00,118 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-29 01:04:00,118 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-29 01:04:00,118 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-29 01:04:00,119 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-29 01:04:00,119 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-29 01:04:00,119 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2023-11-29 01:04:00,119 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-29 01:04:00,127 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 34 nodes and edges [2023-11-29 01:04:00,128 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 10 nodes and edges [2023-11-29 01:04:00,128 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-29 01:04:00,129 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 01:04:00,130 INFO L943 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-29 01:04:00,233 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/witness.graphml [2023-11-29 01:04:00,234 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/witness.yml [2023-11-29 01:04:00,234 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-29 01:04:00,235 INFO L158 Benchmark]: Toolchain (without parser) took 9267.00ms. Allocated memory was 153.1MB in the beginning and 239.1MB in the end (delta: 86.0MB). Free memory was 121.2MB in the beginning and 198.6MB in the end (delta: -77.4MB). Peak memory consumption was 10.6MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,235 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 64.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-29 01:04:00,235 INFO L158 Benchmark]: CACSL2BoogieTranslator took 418.54ms. Allocated memory is still 153.1MB. Free memory was 121.2MB in the beginning and 101.4MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,236 INFO L158 Benchmark]: Boogie Procedure Inliner took 45.51ms. Allocated memory is still 153.1MB. Free memory was 101.4MB in the beginning and 99.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,236 INFO L158 Benchmark]: Boogie Preprocessor took 45.59ms. Allocated memory is still 153.1MB. Free memory was 99.4MB in the beginning and 97.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,236 INFO L158 Benchmark]: RCFGBuilder took 467.63ms. Allocated memory is still 153.1MB. Free memory was 97.0MB in the beginning and 121.8MB in the end (delta: -24.8MB). Peak memory consumption was 28.3MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,237 INFO L158 Benchmark]: TraceAbstraction took 8147.68ms. Allocated memory was 199.2MB in the beginning and 239.1MB in the end (delta: 39.8MB). Free memory was 168.7MB in the beginning and 206.0MB in the end (delta: -37.3MB). Peak memory consumption was 141.8MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,237 INFO L158 Benchmark]: Witness Printer took 120.62ms. Allocated memory is still 239.1MB. Free memory was 206.0MB in the beginning and 198.6MB in the end (delta: 7.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2023-11-29 01:04:00,239 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 107.0MB. Free memory is still 64.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 418.54ms. Allocated memory is still 153.1MB. Free memory was 121.2MB in the beginning and 101.4MB in the end (delta: 19.8MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 45.51ms. Allocated memory is still 153.1MB. Free memory was 101.4MB in the beginning and 99.4MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 45.59ms. Allocated memory is still 153.1MB. Free memory was 99.4MB in the beginning and 97.0MB in the end (delta: 2.3MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 467.63ms. Allocated memory is still 153.1MB. Free memory was 97.0MB in the beginning and 121.8MB in the end (delta: -24.8MB). Peak memory consumption was 28.3MB. Max. memory is 16.1GB. * TraceAbstraction took 8147.68ms. Allocated memory was 199.2MB in the beginning and 239.1MB in the end (delta: 39.8MB). Free memory was 168.7MB in the beginning and 206.0MB in the end (delta: -37.3MB). Peak memory consumption was 141.8MB. Max. memory is 16.1GB. * Witness Printer took 120.62ms. Allocated memory is still 239.1MB. Free memory was 206.0MB in the beginning and 198.6MB in the end (delta: 7.4MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [49] - GenericResultAtLocation [Line: 415]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [415] - GenericResultAtLocation [Line: 424]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [424] - GenericResultAtLocation [Line: 499]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [499] - GenericResultAtLocation [Line: 730]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [730] - GenericResultAtLocation [Line: 825]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [825] - GenericResultAtLocation [Line: 926]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification5_spec.i","") [926] - GenericResultAtLocation [Line: 975]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [975] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 83 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 8.1s, OverallIterations: 10, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 2.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1422 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1376 mSDsluCounter, 2705 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1834 mSDsCounter, 479 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2524 IncrementalHoareTripleChecker+Invalid, 3003 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 479 mSolverCounterUnsat, 871 mSDtfsCounter, 2524 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 383 GetRequests, 278 SyntacticMatches, 4 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 700 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=667occurred in iteration=8, InterpolantAutomatonStates: 101, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 10 MinimizatonAttempts, 61 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 27 LocationsWithAnnotation, 1226 PreInvPairs, 1363 NumberOfFragments, 1252 HoareAnnotationTreeSize, 1226 FomulaSimplifications, 2210 FormulaSimplificationTreeSizeReduction, 0.2s HoareSimplificationTime, 27 FomulaSimplificationsInter, 5091 FormulaSimplificationTreeSizeReductionInter, 2.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.1s SatisfiabilityAnalysisTime, 1.4s InterpolantComputationTime, 521 NumberOfCodeBlocks, 521 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 593 ConstructedInterpolants, 0 QuantifiedInterpolants, 1107 SizeOfPredicates, 3 NumberOfNonLiveVariables, 322 ConjunctsInSsa, 8 ConjunctsInUnsatCore, 12 InterpolantComputations, 9 PerfectInterpolantSequences, 104/125 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (0 == systemActive)) || ((((pumpRunning == 0) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((1 <= pumpRunning) && (2 == waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) || (((((1 <= pumpRunning) && (1 == systemActive)) && (splverifierCounter == 0)) && (waterLevel <= 2)) && (1 <= switchedOnBeforeTS))) || ((((pumpRunning == 0) && (waterLevel <= 1)) && (1 == systemActive)) && (splverifierCounter == 0))) RESULT: Ultimate proved your program to be correct! [2023-11-29 01:04:00,257 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_91ee6520-9df2-4a30-8c16-2a661830a2c5/bin/uautomizer-verify-BQ2R08f2Ya/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE