./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:32:50,159 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:32:50,161 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:32:50,188 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:32:50,189 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:32:50,190 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:32:50,191 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:32:50,193 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:32:50,194 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:32:50,195 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:32:50,196 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:32:50,197 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:32:50,198 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:32:50,199 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:32:50,200 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:32:50,201 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:32:50,202 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:32:50,203 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:32:50,204 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:32:50,206 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:32:50,207 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:32:50,209 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:32:50,210 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:32:50,211 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:32:50,214 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:32:50,215 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:32:50,215 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:32:50,216 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:32:50,217 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:32:50,218 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:32:50,218 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:32:50,219 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:32:50,220 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:32:50,221 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:32:50,222 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:32:50,222 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:32:50,223 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:32:50,223 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:32:50,224 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:32:50,225 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:32:50,225 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:32:50,226 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 20:32:50,252 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:32:50,255 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:32:50,257 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:32:50,257 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:32:50,258 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:32:50,258 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:32:50,259 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:32:50,259 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:32:50,260 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:32:50,260 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:32:50,261 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:32:50,261 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:32:50,262 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:32:50,262 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:32:50,262 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:32:50,263 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:32:50,263 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:32:50,263 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:32:50,263 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:32:50,264 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:32:50,264 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:32:50,264 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:32:50,264 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:32:50,265 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:32:50,265 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:32:50,265 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:32:50,267 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:32:50,267 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:32:50,267 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:32:50,268 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 20:32:50,268 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:32:50,268 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:32:50,269 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:32:50,269 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 80b4c453e300455caffbcb636daccd3af095acb6ed433fb3111a61f5db77a0b9 [2022-11-02 20:32:50,531 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:32:50,551 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:32:50,553 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:32:50,554 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:32:50,555 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:32:50,557 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-11-02 20:32:50,633 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/data/51d6d54e3/a52eac1b1792475581c8e4e52fa6a335/FLAG9ca796df7 [2022-11-02 20:32:51,107 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:32:51,111 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c [2022-11-02 20:32:51,130 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/data/51d6d54e3/a52eac1b1792475581c8e4e52fa6a335/FLAG9ca796df7 [2022-11-02 20:32:51,440 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/data/51d6d54e3/a52eac1b1792475581c8e4e52fa6a335 [2022-11-02 20:32:51,442 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:32:51,443 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:32:51,445 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:32:51,445 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:32:51,449 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:32:51,450 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:32:51" (1/1) ... [2022-11-02 20:32:51,451 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@581fe8ef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:51, skipping insertion in model container [2022-11-02 20:32:51,451 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:32:51" (1/1) ... [2022-11-02 20:32:51,460 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:32:51,518 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:32:51,762 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-11-02 20:32:51,956 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:32:51,965 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:32:51,981 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/sv-benchmarks/c/product-lines/minepump_spec2_product59.cil.c[1605,1618] [2022-11-02 20:32:52,060 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:32:52,077 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:32:52,077 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52 WrapperNode [2022-11-02 20:32:52,077 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:32:52,084 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:32:52,085 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:32:52,085 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:32:52,092 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,104 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,137 INFO L138 Inliner]: procedures = 58, calls = 159, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 279 [2022-11-02 20:32:52,137 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:32:52,138 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:32:52,138 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:32:52,138 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:32:52,147 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,147 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,150 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,150 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,157 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,162 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,164 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,165 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,168 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:32:52,169 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:32:52,169 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:32:52,169 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:32:52,170 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (1/1) ... [2022-11-02 20:32:52,176 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:32:52,189 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:32:52,201 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 20:32:52,217 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 20:32:52,258 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:32:52,258 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 20:32:52,259 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 20:32:52,259 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 20:32:52,260 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 20:32:52,260 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-02 20:32:52,260 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-02 20:32:52,260 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 20:32:52,261 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 20:32:52,261 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:32:52,266 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:32:52,266 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 20:32:52,266 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 20:32:52,266 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 20:32:52,266 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 20:32:52,267 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:32:52,267 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 20:32:52,267 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 20:32:52,267 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:32:52,267 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:32:52,360 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:32:52,362 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:32:52,789 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:32:52,796 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:32:52,796 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 20:32:52,798 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:32:52 BoogieIcfgContainer [2022-11-02 20:32:52,798 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:32:52,800 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 20:32:52,800 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 20:32:52,804 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 20:32:52,804 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:32:51" (1/3) ... [2022-11-02 20:32:52,805 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78019fb4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:32:52, skipping insertion in model container [2022-11-02 20:32:52,805 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:32:52" (2/3) ... [2022-11-02 20:32:52,805 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@78019fb4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:32:52, skipping insertion in model container [2022-11-02 20:32:52,805 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:32:52" (3/3) ... [2022-11-02 20:32:52,807 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product59.cil.c [2022-11-02 20:32:52,825 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 20:32:52,825 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 20:32:52,873 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 20:32:52,880 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@65834739, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 20:32:52,880 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 20:32:52,884 INFO L276 IsEmpty]: Start isEmpty. Operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-02 20:32:52,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-02 20:32:52,894 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:52,894 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:52,895 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:52,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:52,900 INFO L85 PathProgramCache]: Analyzing trace with hash -13342285, now seen corresponding path program 1 times [2022-11-02 20:32:52,910 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:52,911 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [992201248] [2022-11-02 20:32:52,912 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:52,912 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:53,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 20:32:53,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:53,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:53,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [992201248] [2022-11-02 20:32:53,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [992201248] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:53,292 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:53,292 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:32:53,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1923132079] [2022-11-02 20:32:53,295 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:53,299 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 20:32:53,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:53,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 20:32:53,342 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:32:53,345 INFO L87 Difference]: Start difference. First operand has 100 states, 76 states have (on average 1.381578947368421) internal successors, (105), 85 states have internal predecessors, (105), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:53,408 INFO L93 Difference]: Finished difference Result 191 states and 260 transitions. [2022-11-02 20:32:53,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 20:32:53,410 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-02 20:32:53,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:53,419 INFO L225 Difference]: With dead ends: 191 [2022-11-02 20:32:53,419 INFO L226 Difference]: Without dead ends: 91 [2022-11-02 20:32:53,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:32:53,425 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 127 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:53,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:32:53,442 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-11-02 20:32:53,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 91. [2022-11-02 20:32:53,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 69 states have (on average 1.318840579710145) internal successors, (91), 77 states have internal predecessors, (91), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-02 20:32:53,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 118 transitions. [2022-11-02 20:32:53,467 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 118 transitions. Word has length 25 [2022-11-02 20:32:53,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:53,468 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 118 transitions. [2022-11-02 20:32:53,468 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,468 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 118 transitions. [2022-11-02 20:32:53,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-02 20:32:53,470 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:53,471 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:53,471 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 20:32:53,471 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:53,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:53,472 INFO L85 PathProgramCache]: Analyzing trace with hash -1348159518, now seen corresponding path program 1 times [2022-11-02 20:32:53,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:53,472 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [515881086] [2022-11-02 20:32:53,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:53,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:53,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-02 20:32:53,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:53,575 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:53,575 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [515881086] [2022-11-02 20:32:53,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [515881086] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:53,576 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:53,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:32:53,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595474981] [2022-11-02 20:32:53,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:53,577 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:32:53,577 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:53,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:32:53,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:32:53,579 INFO L87 Difference]: Start difference. First operand 91 states and 118 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:53,594 INFO L93 Difference]: Finished difference Result 143 states and 185 transitions. [2022-11-02 20:32:53,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:32:53,595 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-02 20:32:53,595 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:53,597 INFO L225 Difference]: With dead ends: 143 [2022-11-02 20:32:53,597 INFO L226 Difference]: Without dead ends: 82 [2022-11-02 20:32:53,598 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:32:53,599 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 16 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 189 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:53,600 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 189 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:32:53,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2022-11-02 20:32:53,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 82. [2022-11-02 20:32:53,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 71 states have internal predecessors, (84), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-02 20:32:53,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 106 transitions. [2022-11-02 20:32:53,609 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 106 transitions. Word has length 26 [2022-11-02 20:32:53,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:53,610 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 106 transitions. [2022-11-02 20:32:53,610 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,610 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 106 transitions. [2022-11-02 20:32:53,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-02 20:32:53,615 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:53,615 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:53,616 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 20:32:53,616 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:53,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:53,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1571393351, now seen corresponding path program 1 times [2022-11-02 20:32:53,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:53,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1433300736] [2022-11-02 20:32:53,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:53,618 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:53,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:32:53,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:53,800 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:53,800 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:53,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1433300736] [2022-11-02 20:32:53,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1433300736] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:53,803 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:53,803 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:32:53,803 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610707667] [2022-11-02 20:32:53,804 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:53,805 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:32:53,805 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:53,806 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:32:53,806 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:32:53,807 INFO L87 Difference]: Start difference. First operand 82 states and 106 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:53,876 INFO L93 Difference]: Finished difference Result 229 states and 302 transitions. [2022-11-02 20:32:53,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:32:53,877 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-02 20:32:53,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:53,879 INFO L225 Difference]: With dead ends: 229 [2022-11-02 20:32:53,879 INFO L226 Difference]: Without dead ends: 155 [2022-11-02 20:32:53,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:32:53,881 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 85 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:53,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [85 Valid, 226 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:32:53,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-11-02 20:32:53,907 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 152. [2022-11-02 20:32:53,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 115 states have (on average 1.3565217391304347) internal successors, (156), 130 states have internal predecessors, (156), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2022-11-02 20:32:53,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 200 transitions. [2022-11-02 20:32:53,915 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 200 transitions. Word has length 30 [2022-11-02 20:32:53,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:53,916 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 200 transitions. [2022-11-02 20:32:53,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:53,916 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 200 transitions. [2022-11-02 20:32:53,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-02 20:32:53,918 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:53,918 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:53,918 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 20:32:53,919 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:53,919 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:53,919 INFO L85 PathProgramCache]: Analyzing trace with hash 1136396561, now seen corresponding path program 1 times [2022-11-02 20:32:53,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:53,920 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2046286059] [2022-11-02 20:32:53,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:53,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:53,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:54,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:32:54,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:54,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:54,109 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:54,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2046286059] [2022-11-02 20:32:54,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2046286059] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:54,109 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:54,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:32:54,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1411249512] [2022-11-02 20:32:54,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:54,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:32:54,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:54,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:32:54,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:32:54,112 INFO L87 Difference]: Start difference. First operand 152 states and 200 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:54,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:54,273 INFO L93 Difference]: Finished difference Result 438 states and 585 transitions. [2022-11-02 20:32:54,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:32:54,274 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-02 20:32:54,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:54,284 INFO L225 Difference]: With dead ends: 438 [2022-11-02 20:32:54,284 INFO L226 Difference]: Without dead ends: 294 [2022-11-02 20:32:54,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:32:54,293 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 74 mSDsluCounter, 404 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 518 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:54,297 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 518 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:32:54,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-11-02 20:32:54,346 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 288. [2022-11-02 20:32:54,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.344186046511628) internal successors, (289), 244 states have internal predecessors, (289), 44 states have call successors, (44), 28 states have call predecessors, (44), 28 states have return successors, (46), 30 states have call predecessors, (46), 44 states have call successors, (46) [2022-11-02 20:32:54,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 379 transitions. [2022-11-02 20:32:54,352 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 379 transitions. Word has length 34 [2022-11-02 20:32:54,353 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:54,353 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 379 transitions. [2022-11-02 20:32:54,354 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:32:54,354 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 379 transitions. [2022-11-02 20:32:54,362 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-02 20:32:54,362 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:54,363 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:54,363 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 20:32:54,363 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:54,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:54,363 INFO L85 PathProgramCache]: Analyzing trace with hash -373671891, now seen corresponding path program 1 times [2022-11-02 20:32:54,364 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:54,364 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [528103048] [2022-11-02 20:32:54,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:54,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:54,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:54,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:32:54,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:54,554 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:32:54,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:54,560 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:54,560 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:54,561 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [528103048] [2022-11-02 20:32:54,565 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [528103048] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:54,565 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:54,565 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:32:54,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931631285] [2022-11-02 20:32:54,567 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:54,568 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:32:54,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:54,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:32:54,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:32:54,577 INFO L87 Difference]: Start difference. First operand 288 states and 379 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:32:54,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:54,944 INFO L93 Difference]: Finished difference Result 744 states and 996 transitions. [2022-11-02 20:32:54,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:32:54,944 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-11-02 20:32:54,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:54,951 INFO L225 Difference]: With dead ends: 744 [2022-11-02 20:32:54,951 INFO L226 Difference]: Without dead ends: 464 [2022-11-02 20:32:54,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:32:54,954 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 127 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 258 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 132 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 301 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 258 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:54,954 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [132 Valid, 205 Invalid, 301 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 258 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:32:54,956 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 464 states. [2022-11-02 20:32:55,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 464 to 450. [2022-11-02 20:32:55,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 450 states, 337 states have (on average 1.2967359050445104) internal successors, (437), 370 states have internal predecessors, (437), 60 states have call successors, (60), 52 states have call predecessors, (60), 52 states have return successors, (80), 54 states have call predecessors, (80), 60 states have call successors, (80) [2022-11-02 20:32:55,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 450 states to 450 states and 577 transitions. [2022-11-02 20:32:55,043 INFO L78 Accepts]: Start accepts. Automaton has 450 states and 577 transitions. Word has length 38 [2022-11-02 20:32:55,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:55,045 INFO L495 AbstractCegarLoop]: Abstraction has 450 states and 577 transitions. [2022-11-02 20:32:55,045 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:32:55,046 INFO L276 IsEmpty]: Start isEmpty. Operand 450 states and 577 transitions. [2022-11-02 20:32:55,048 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-02 20:32:55,048 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:55,048 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:55,049 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 20:32:55,049 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:55,050 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:55,050 INFO L85 PathProgramCache]: Analyzing trace with hash 1261041571, now seen corresponding path program 1 times [2022-11-02 20:32:55,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:55,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259906106] [2022-11-02 20:32:55,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:55,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:55,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:32:55,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:32:55,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:55,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:32:55,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,208 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:32:55,209 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:55,209 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259906106] [2022-11-02 20:32:55,209 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259906106] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:55,209 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:55,209 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:32:55,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1797031455] [2022-11-02 20:32:55,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:55,210 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:32:55,210 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:55,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:32:55,212 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:32:55,212 INFO L87 Difference]: Start difference. First operand 450 states and 577 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:32:55,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:55,582 INFO L93 Difference]: Finished difference Result 1008 states and 1325 transitions. [2022-11-02 20:32:55,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:32:55,582 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-02 20:32:55,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:55,586 INFO L225 Difference]: With dead ends: 1008 [2022-11-02 20:32:55,586 INFO L226 Difference]: Without dead ends: 566 [2022-11-02 20:32:55,587 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:32:55,588 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 140 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 359 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:55,588 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 223 Invalid, 359 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:32:55,590 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 566 states. [2022-11-02 20:32:55,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 566 to 544. [2022-11-02 20:32:55,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 544 states, 411 states have (on average 1.2627737226277371) internal successors, (519), 444 states have internal predecessors, (519), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-11-02 20:32:55,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 544 states to 544 states and 687 transitions. [2022-11-02 20:32:55,637 INFO L78 Accepts]: Start accepts. Automaton has 544 states and 687 transitions. Word has length 56 [2022-11-02 20:32:55,638 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:55,638 INFO L495 AbstractCegarLoop]: Abstraction has 544 states and 687 transitions. [2022-11-02 20:32:55,638 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:32:55,638 INFO L276 IsEmpty]: Start isEmpty. Operand 544 states and 687 transitions. [2022-11-02 20:32:55,639 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-02 20:32:55,640 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:55,640 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:55,640 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 20:32:55,640 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:55,641 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:55,641 INFO L85 PathProgramCache]: Analyzing trace with hash -1110697691, now seen corresponding path program 1 times [2022-11-02 20:32:55,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:55,641 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1886020503] [2022-11-02 20:32:55,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:55,642 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:55,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:32:55,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:32:55,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:55,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:32:55,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:55,768 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:32:55,768 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:55,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1886020503] [2022-11-02 20:32:55,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1886020503] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:55,769 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:55,769 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:32:55,769 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1526992822] [2022-11-02 20:32:55,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:55,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:32:55,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:55,770 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:32:55,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:32:55,771 INFO L87 Difference]: Start difference. First operand 544 states and 687 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:32:56,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:56,326 INFO L93 Difference]: Finished difference Result 1134 states and 1469 transitions. [2022-11-02 20:32:56,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-02 20:32:56,326 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-11-02 20:32:56,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:56,330 INFO L225 Difference]: With dead ends: 1134 [2022-11-02 20:32:56,330 INFO L226 Difference]: Without dead ends: 598 [2022-11-02 20:32:56,331 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=90, Invalid=182, Unknown=0, NotChecked=0, Total=272 [2022-11-02 20:32:56,334 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 367 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 413 mSolverCounterSat, 135 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 371 SdHoareTripleChecker+Valid, 239 SdHoareTripleChecker+Invalid, 548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 135 IncrementalHoareTripleChecker+Valid, 413 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:56,335 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [371 Valid, 239 Invalid, 548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [135 Valid, 413 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-02 20:32:56,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 598 states. [2022-11-02 20:32:56,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 598 to 552. [2022-11-02 20:32:56,392 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 552 states, 419 states have (on average 1.2577565632458234) internal successors, (527), 452 states have internal predecessors, (527), 68 states have call successors, (68), 52 states have call predecessors, (68), 64 states have return successors, (100), 70 states have call predecessors, (100), 68 states have call successors, (100) [2022-11-02 20:32:56,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 552 states to 552 states and 695 transitions. [2022-11-02 20:32:56,398 INFO L78 Accepts]: Start accepts. Automaton has 552 states and 695 transitions. Word has length 56 [2022-11-02 20:32:56,398 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:56,399 INFO L495 AbstractCegarLoop]: Abstraction has 552 states and 695 transitions. [2022-11-02 20:32:56,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:32:56,399 INFO L276 IsEmpty]: Start isEmpty. Operand 552 states and 695 transitions. [2022-11-02 20:32:56,401 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-02 20:32:56,401 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:56,402 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:56,403 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 20:32:56,403 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:56,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:56,405 INFO L85 PathProgramCache]: Analyzing trace with hash 275505703, now seen corresponding path program 1 times [2022-11-02 20:32:56,405 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:56,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [903424109] [2022-11-02 20:32:56,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:56,405 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:56,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:56,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:32:56,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:56,544 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:32:56,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:56,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:56,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:56,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-02 20:32:56,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:56,596 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:32:56,596 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:56,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [903424109] [2022-11-02 20:32:56,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [903424109] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:56,597 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:56,597 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:32:56,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1400171977] [2022-11-02 20:32:56,597 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:56,598 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:32:56,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:56,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:32:56,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:32:56,599 INFO L87 Difference]: Start difference. First operand 552 states and 695 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:32:57,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:57,062 INFO L93 Difference]: Finished difference Result 1582 states and 2071 transitions. [2022-11-02 20:32:57,062 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-02 20:32:57,062 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-11-02 20:32:57,064 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:57,069 INFO L225 Difference]: With dead ends: 1582 [2022-11-02 20:32:57,069 INFO L226 Difference]: Without dead ends: 1038 [2022-11-02 20:32:57,072 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:32:57,072 INFO L413 NwaCegarLoop]: 139 mSDtfsCounter, 328 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 277 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 331 SdHoareTripleChecker+Valid, 258 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 277 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:57,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [331 Valid, 258 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 277 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:32:57,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2022-11-02 20:32:57,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 1026. [2022-11-02 20:32:57,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1026 states, 773 states have (on average 1.2276843467011642) internal successors, (949), 824 states have internal predecessors, (949), 130 states have call successors, (130), 118 states have call predecessors, (130), 122 states have return successors, (216), 128 states have call predecessors, (216), 130 states have call successors, (216) [2022-11-02 20:32:57,179 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1026 states to 1026 states and 1295 transitions. [2022-11-02 20:32:57,180 INFO L78 Accepts]: Start accepts. Automaton has 1026 states and 1295 transitions. Word has length 56 [2022-11-02 20:32:57,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:57,180 INFO L495 AbstractCegarLoop]: Abstraction has 1026 states and 1295 transitions. [2022-11-02 20:32:57,180 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:32:57,181 INFO L276 IsEmpty]: Start isEmpty. Operand 1026 states and 1295 transitions. [2022-11-02 20:32:57,182 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-02 20:32:57,182 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:57,183 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:57,183 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 20:32:57,183 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:57,183 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:57,183 INFO L85 PathProgramCache]: Analyzing trace with hash 1790739521, now seen corresponding path program 1 times [2022-11-02 20:32:57,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:57,184 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [975143717] [2022-11-02 20:32:57,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:57,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:57,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:32:57,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 20:32:57,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,345 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:32:57,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:57,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-02 20:32:57,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,433 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-02 20:32:57,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:57,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [975143717] [2022-11-02 20:32:57,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [975143717] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:32:57,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1992710173] [2022-11-02 20:32:57,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:57,434 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:32:57,434 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:32:57,440 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:32:57,463 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 20:32:57,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:57,570 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-02 20:32:57,576 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:32:57,852 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:32:57,852 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:32:57,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1992710173] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:57,852 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:32:57,852 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 19 [2022-11-02 20:32:57,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [156135200] [2022-11-02 20:32:57,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:57,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:32:57,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:57,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:32:57,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=296, Unknown=0, NotChecked=0, Total=342 [2022-11-02 20:32:57,854 INFO L87 Difference]: Start difference. First operand 1026 states and 1295 transitions. Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 20:32:58,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:58,067 INFO L93 Difference]: Finished difference Result 2000 states and 2536 transitions. [2022-11-02 20:32:58,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:32:58,068 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-02 20:32:58,068 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:58,073 INFO L225 Difference]: With dead ends: 2000 [2022-11-02 20:32:58,073 INFO L226 Difference]: Without dead ends: 982 [2022-11-02 20:32:58,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=52, Invalid=328, Unknown=0, NotChecked=0, Total=380 [2022-11-02 20:32:58,077 INFO L413 NwaCegarLoop]: 190 mSDtfsCounter, 80 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 553 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:58,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 553 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:32:58,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 982 states. [2022-11-02 20:32:58,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 982 to 978. [2022-11-02 20:32:58,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 978 states, 735 states have (on average 1.2122448979591838) internal successors, (891), 784 states have internal predecessors, (891), 126 states have call successors, (126), 114 states have call predecessors, (126), 116 states have return successors, (188), 122 states have call predecessors, (188), 126 states have call successors, (188) [2022-11-02 20:32:58,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 978 states to 978 states and 1205 transitions. [2022-11-02 20:32:58,168 INFO L78 Accepts]: Start accepts. Automaton has 978 states and 1205 transitions. Word has length 60 [2022-11-02 20:32:58,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:58,169 INFO L495 AbstractCegarLoop]: Abstraction has 978 states and 1205 transitions. [2022-11-02 20:32:58,169 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.0) internal successors, (49), 6 states have internal predecessors, (49), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-02 20:32:58,169 INFO L276 IsEmpty]: Start isEmpty. Operand 978 states and 1205 transitions. [2022-11-02 20:32:58,173 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2022-11-02 20:32:58,173 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:58,173 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:58,213 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-02 20:32:58,399 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:32:58,399 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:58,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:58,399 INFO L85 PathProgramCache]: Analyzing trace with hash 1108761287, now seen corresponding path program 1 times [2022-11-02 20:32:58,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:58,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1562142721] [2022-11-02 20:32:58,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:58,400 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:58,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:32:58,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,453 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:32:58,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:32:58,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,485 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:58,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,487 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:32:58,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-02 20:32:58,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-02 20:32:58,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:58,500 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-02 20:32:58,500 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:58,500 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1562142721] [2022-11-02 20:32:58,500 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1562142721] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:58,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:32:58,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-02 20:32:58,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1374451156] [2022-11-02 20:32:58,501 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:58,501 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-02 20:32:58,502 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:58,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-02 20:32:58,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:32:58,502 INFO L87 Difference]: Start difference. First operand 978 states and 1205 transitions. Second operand has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-02 20:32:59,038 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:59,038 INFO L93 Difference]: Finished difference Result 1315 states and 1625 transitions. [2022-11-02 20:32:59,039 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-02 20:32:59,039 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 87 [2022-11-02 20:32:59,040 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:59,043 INFO L225 Difference]: With dead ends: 1315 [2022-11-02 20:32:59,043 INFO L226 Difference]: Without dead ends: 585 [2022-11-02 20:32:59,045 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 34 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=86, Invalid=220, Unknown=0, NotChecked=0, Total=306 [2022-11-02 20:32:59,046 INFO L413 NwaCegarLoop]: 129 mSDtfsCounter, 364 mSDsluCounter, 151 mSDsCounter, 0 mSdLazyCounter, 308 mSolverCounterSat, 136 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 373 SdHoareTripleChecker+Valid, 280 SdHoareTripleChecker+Invalid, 444 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 136 IncrementalHoareTripleChecker+Valid, 308 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:59,047 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [373 Valid, 280 Invalid, 444 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [136 Valid, 308 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-02 20:32:59,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2022-11-02 20:32:59,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 565. [2022-11-02 20:32:59,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 565 states, 425 states have (on average 1.1694117647058824) internal successors, (497), 455 states have internal predecessors, (497), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2022-11-02 20:32:59,094 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 565 states to 565 states and 690 transitions. [2022-11-02 20:32:59,095 INFO L78 Accepts]: Start accepts. Automaton has 565 states and 690 transitions. Word has length 87 [2022-11-02 20:32:59,095 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:59,095 INFO L495 AbstractCegarLoop]: Abstraction has 565 states and 690 transitions. [2022-11-02 20:32:59,096 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.5) internal successors, (68), 4 states have internal predecessors, (68), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2022-11-02 20:32:59,096 INFO L276 IsEmpty]: Start isEmpty. Operand 565 states and 690 transitions. [2022-11-02 20:32:59,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-02 20:32:59,103 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:59,103 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:59,103 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-02 20:32:59,103 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:59,104 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:59,104 INFO L85 PathProgramCache]: Analyzing trace with hash -188705161, now seen corresponding path program 1 times [2022-11-02 20:32:59,104 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:59,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [657034265] [2022-11-02 20:32:59,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:59,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:59,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:32:59,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:32:59,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:32:59,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:32:59,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:32:59,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-02 20:32:59,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,313 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-02 20:32:59,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,317 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:32:59,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-02 20:32:59,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,323 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-02 20:32:59,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:32:59,323 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [657034265] [2022-11-02 20:32:59,323 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [657034265] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:32:59,324 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1623858922] [2022-11-02 20:32:59,324 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:59,324 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:32:59,324 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:32:59,327 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:32:59,347 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 20:32:59,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:32:59,450 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-02 20:32:59,454 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:32:59,541 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-02 20:32:59,542 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:32:59,542 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1623858922] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:32:59,542 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:32:59,542 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2022-11-02 20:32:59,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [786501358] [2022-11-02 20:32:59,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:32:59,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:32:59,543 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:32:59,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:32:59,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=128, Unknown=0, NotChecked=0, Total=156 [2022-11-02 20:32:59,544 INFO L87 Difference]: Start difference. First operand 565 states and 690 transitions. Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-02 20:32:59,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:32:59,634 INFO L93 Difference]: Finished difference Result 1080 states and 1360 transitions. [2022-11-02 20:32:59,634 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-02 20:32:59,635 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-11-02 20:32:59,635 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:32:59,639 INFO L225 Difference]: With dead ends: 1080 [2022-11-02 20:32:59,639 INFO L226 Difference]: Without dead ends: 617 [2022-11-02 20:32:59,642 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 124 GetRequests, 111 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2022-11-02 20:32:59,643 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 33 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 396 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:32:59,643 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 396 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:32:59,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 617 states. [2022-11-02 20:32:59,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 617 to 577. [2022-11-02 20:32:59,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 577 states, 437 states have (on average 1.1647597254004576) internal successors, (509), 467 states have internal predecessors, (509), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2022-11-02 20:32:59,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 577 states to 577 states and 702 transitions. [2022-11-02 20:32:59,692 INFO L78 Accepts]: Start accepts. Automaton has 577 states and 702 transitions. Word has length 98 [2022-11-02 20:32:59,693 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:32:59,693 INFO L495 AbstractCegarLoop]: Abstraction has 577 states and 702 transitions. [2022-11-02 20:32:59,694 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-02 20:32:59,694 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 702 transitions. [2022-11-02 20:32:59,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-02 20:32:59,696 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:32:59,696 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:32:59,736 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-02 20:32:59,923 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-02 20:32:59,923 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:32:59,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:32:59,923 INFO L85 PathProgramCache]: Analyzing trace with hash -54691655, now seen corresponding path program 1 times [2022-11-02 20:32:59,924 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:32:59,924 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [803700294] [2022-11-02 20:32:59,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:32:59,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:32:59,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:33:00,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:33:00,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:33:00,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:33:00,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:33:00,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-02 20:33:00,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-02 20:33:00,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:33:00,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-02 20:33:00,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,061 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-02 20:33:00,061 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:33:00,061 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [803700294] [2022-11-02 20:33:00,061 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [803700294] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:33:00,062 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [465718558] [2022-11-02 20:33:00,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:33:00,062 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:33:00,062 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:33:00,063 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:33:00,091 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-02 20:33:00,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,183 INFO L263 TraceCheckSpWp]: Trace formula consists of 481 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-02 20:33:00,186 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:33:00,261 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:33:00,261 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:33:00,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [465718558] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:33:00,261 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:33:00,261 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-02 20:33:00,262 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [278170658] [2022-11-02 20:33:00,262 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:33:00,262 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:33:00,263 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:33:00,263 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:33:00,263 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:33:00,263 INFO L87 Difference]: Start difference. First operand 577 states and 702 transitions. Second operand has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-02 20:33:00,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:33:00,336 INFO L93 Difference]: Finished difference Result 906 states and 1139 transitions. [2022-11-02 20:33:00,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:33:00,336 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 98 [2022-11-02 20:33:00,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:33:00,341 INFO L225 Difference]: With dead ends: 906 [2022-11-02 20:33:00,341 INFO L226 Difference]: Without dead ends: 904 [2022-11-02 20:33:00,342 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:33:00,342 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 47 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 193 SdHoareTripleChecker+Invalid, 7 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:33:00,343 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 193 Invalid, 7 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:33:00,344 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 904 states. [2022-11-02 20:33:00,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 904 to 703. [2022-11-02 20:33:00,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 703 states, 535 states have (on average 1.1775700934579438) internal successors, (630), 571 states have internal predecessors, (630), 89 states have call successors, (89), 67 states have call predecessors, (89), 78 states have return successors, (158), 86 states have call predecessors, (158), 89 states have call successors, (158) [2022-11-02 20:33:00,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 703 states to 703 states and 877 transitions. [2022-11-02 20:33:00,417 INFO L78 Accepts]: Start accepts. Automaton has 703 states and 877 transitions. Word has length 98 [2022-11-02 20:33:00,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:33:00,417 INFO L495 AbstractCegarLoop]: Abstraction has 703 states and 877 transitions. [2022-11-02 20:33:00,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 25.666666666666668) internal successors, (77), 3 states have internal predecessors, (77), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-02 20:33:00,418 INFO L276 IsEmpty]: Start isEmpty. Operand 703 states and 877 transitions. [2022-11-02 20:33:00,421 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-11-02 20:33:00,421 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:33:00,422 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:33:00,466 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-02 20:33:00,641 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-02 20:33:00,642 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:33:00,642 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:33:00,642 INFO L85 PathProgramCache]: Analyzing trace with hash 223738773, now seen corresponding path program 1 times [2022-11-02 20:33:00,642 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:33:00,642 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1482270524] [2022-11-02 20:33:00,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:33:00,643 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:33:00,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:33:00,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:33:00,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:33:00,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:33:00,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:33:00,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-02 20:33:00,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-02 20:33:00,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,959 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:33:00,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:33:00,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:33:00,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,967 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-11-02 20:33:00,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:33:00,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-11-02 20:33:00,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:00,975 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 44 proven. 24 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-02 20:33:00,975 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:33:00,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1482270524] [2022-11-02 20:33:00,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1482270524] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:33:00,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [474353564] [2022-11-02 20:33:00,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:33:00,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:33:00,976 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:33:00,977 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:33:01,008 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-02 20:33:01,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:01,128 INFO L263 TraceCheckSpWp]: Trace formula consists of 586 conjuncts, 7 conjunts are in the unsatisfiable core [2022-11-02 20:33:01,131 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:33:01,263 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 66 proven. 27 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-11-02 20:33:01,263 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:33:01,513 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 46 proven. 23 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-02 20:33:01,514 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [474353564] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:33:01,514 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:33:01,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 6, 6] total 12 [2022-11-02 20:33:01,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1703289879] [2022-11-02 20:33:01,514 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:33:01,515 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-02 20:33:01,515 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:33:01,516 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-02 20:33:01,516 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:33:01,516 INFO L87 Difference]: Start difference. First operand 703 states and 877 transitions. Second operand has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-02 20:33:02,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:33:02,490 INFO L93 Difference]: Finished difference Result 1704 states and 2224 transitions. [2022-11-02 20:33:02,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-02 20:33:02,491 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) Word has length 139 [2022-11-02 20:33:02,492 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:33:02,497 INFO L225 Difference]: With dead ends: 1704 [2022-11-02 20:33:02,497 INFO L226 Difference]: Without dead ends: 1103 [2022-11-02 20:33:02,501 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 302 SyntacticMatches, 6 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 207 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=300, Invalid=630, Unknown=0, NotChecked=0, Total=930 [2022-11-02 20:33:02,502 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 607 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 577 mSolverCounterSat, 324 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 608 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 901 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 324 IncrementalHoareTripleChecker+Valid, 577 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-02 20:33:02,502 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [608 Valid, 292 Invalid, 901 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [324 Valid, 577 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-02 20:33:02,504 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1103 states. [2022-11-02 20:33:02,626 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1103 to 991. [2022-11-02 20:33:02,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 991 states, 750 states have (on average 1.1866666666666668) internal successors, (890), 801 states have internal predecessors, (890), 127 states have call successors, (127), 100 states have call predecessors, (127), 113 states have return successors, (235), 115 states have call predecessors, (235), 127 states have call successors, (235) [2022-11-02 20:33:02,633 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 991 states to 991 states and 1252 transitions. [2022-11-02 20:33:02,634 INFO L78 Accepts]: Start accepts. Automaton has 991 states and 1252 transitions. Word has length 139 [2022-11-02 20:33:02,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:33:02,634 INFO L495 AbstractCegarLoop]: Abstraction has 991 states and 1252 transitions. [2022-11-02 20:33:02,634 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 11.333333333333334) internal successors, (136), 9 states have internal predecessors, (136), 6 states have call successors, (29), 10 states have call predecessors, (29), 5 states have return successors, (21), 6 states have call predecessors, (21), 5 states have call successors, (21) [2022-11-02 20:33:02,635 INFO L276 IsEmpty]: Start isEmpty. Operand 991 states and 1252 transitions. [2022-11-02 20:33:02,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 140 [2022-11-02 20:33:02,638 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:33:02,639 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:33:02,678 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-02 20:33:02,858 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-02 20:33:02,859 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:33:02,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:33:02,859 INFO L85 PathProgramCache]: Analyzing trace with hash -1162464621, now seen corresponding path program 1 times [2022-11-02 20:33:02,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:33:02,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1770132018] [2022-11-02 20:33:02,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:33:02,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:33:02,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:33:03,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:33:03,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:33:03,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-02 20:33:03,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:33:03,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-11-02 20:33:03,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-02 20:33:03,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-02 20:33:03,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:33:03,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-02 20:33:03,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 119 [2022-11-02 20:33:03,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:33:03,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2022-11-02 20:33:03,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,240 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-02 20:33:03,241 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:33:03,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1770132018] [2022-11-02 20:33:03,241 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1770132018] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:33:03,241 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2031161633] [2022-11-02 20:33:03,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:33:03,242 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:33:03,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:33:03,243 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:33:03,287 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-11-02 20:33:03,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:33:03,414 INFO L263 TraceCheckSpWp]: Trace formula consists of 588 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-02 20:33:03,419 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:33:03,670 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 79 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-02 20:33:03,670 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-02 20:33:03,966 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 57 proven. 12 refuted. 0 times theorem prover too weak. 29 trivial. 0 not checked. [2022-11-02 20:33:03,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2031161633] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-02 20:33:03,967 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-02 20:33:03,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 9, 8] total 20 [2022-11-02 20:33:03,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291086816] [2022-11-02 20:33:03,967 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-02 20:33:03,968 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-11-02 20:33:03,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:33:03,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-11-02 20:33:03,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=75, Invalid=305, Unknown=0, NotChecked=0, Total=380 [2022-11-02 20:33:03,969 INFO L87 Difference]: Start difference. First operand 991 states and 1252 transitions. Second operand has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-02 20:33:05,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:33:05,278 INFO L93 Difference]: Finished difference Result 1486 states and 1834 transitions. [2022-11-02 20:33:05,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-11-02 20:33:05,279 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) Word has length 139 [2022-11-02 20:33:05,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:33:05,280 INFO L225 Difference]: With dead ends: 1486 [2022-11-02 20:33:05,280 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 20:33:05,284 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 295 SyntacticMatches, 5 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 302 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=327, Invalid=1155, Unknown=0, NotChecked=0, Total=1482 [2022-11-02 20:33:05,285 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 572 mSDsluCounter, 270 mSDsCounter, 0 mSdLazyCounter, 1118 mSolverCounterSat, 227 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 573 SdHoareTripleChecker+Valid, 427 SdHoareTripleChecker+Invalid, 1345 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 227 IncrementalHoareTripleChecker+Valid, 1118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-02 20:33:05,285 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [573 Valid, 427 Invalid, 1345 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [227 Valid, 1118 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-02 20:33:05,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 20:33:05,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 20:33:05,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:33:05,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 20:33:05,286 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 139 [2022-11-02 20:33:05,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:33:05,286 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:33:05,287 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 7.25) internal successors, (145), 17 states have internal predecessors, (145), 6 states have call successors, (30), 10 states have call predecessors, (30), 6 states have return successors, (22), 6 states have call predecessors, (22), 6 states have call successors, (22) [2022-11-02 20:33:05,287 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 20:33:05,287 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 20:33:05,289 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 20:33:05,325 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-11-02 20:33:05,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:33:05,506 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 20:33:13,548 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 183 190) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 2 ~waterLevel~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse4) (or .cse0 .cse3 .cse2 .cse5))) [2022-11-02 20:33:13,548 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 183 190) no Hoare annotation was computed. [2022-11-02 20:33:13,548 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 183 190) no Hoare annotation was computed. [2022-11-02 20:33:13,548 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 98 104) no Hoare annotation was computed. [2022-11-02 20:33:13,548 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 98 104) the Hoare annotation is: true [2022-11-02 20:33:13,549 INFO L899 garLoopResultBuilder]: For program point L942-1(lines 938 949) no Hoare annotation was computed. [2022-11-02 20:33:13,549 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 938 949) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~waterLevel~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse2 .cse3 .cse4 .cse6 .cse5) (or .cse0 .cse2 .cse4 (not (<= 2 ~waterLevel~0)) .cse5) (or .cse0 .cse1 .cse4 .cse7) (or .cse1 .cse4 .cse6 .cse7))) [2022-11-02 20:33:13,549 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 938 949) no Hoare annotation was computed. [2022-11-02 20:33:13,549 INFO L902 garLoopResultBuilder]: At program point L417(line 417) the Hoare annotation is: true [2022-11-02 20:33:13,549 INFO L899 garLoopResultBuilder]: For program point L417-1(line 417) no Hoare annotation was computed. [2022-11-02 20:33:13,550 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 411 440) no Hoare annotation was computed. [2022-11-02 20:33:13,550 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 411 440) the Hoare annotation is: true [2022-11-02 20:33:13,550 INFO L902 garLoopResultBuilder]: At program point L436(lines 411 440) the Hoare annotation is: true [2022-11-02 20:33:13,550 INFO L899 garLoopResultBuilder]: For program point L432(line 432) no Hoare annotation was computed. [2022-11-02 20:33:13,550 INFO L899 garLoopResultBuilder]: For program point L425(lines 425 429) no Hoare annotation was computed. [2022-11-02 20:33:13,550 INFO L902 garLoopResultBuilder]: At program point L425-1(lines 425 429) the Hoare annotation is: true [2022-11-02 20:33:13,551 INFO L899 garLoopResultBuilder]: For program point L422(line 422) no Hoare annotation was computed. [2022-11-02 20:33:13,551 INFO L902 garLoopResultBuilder]: At program point L421-2(lines 421 435) the Hoare annotation is: true [2022-11-02 20:33:13,551 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 950 958) the Hoare annotation is: true [2022-11-02 20:33:13,551 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 950 958) no Hoare annotation was computed. [2022-11-02 20:33:13,551 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 950 958) no Hoare annotation was computed. [2022-11-02 20:33:13,551 INFO L899 garLoopResultBuilder]: For program point L386-1(line 386) no Hoare annotation was computed. [2022-11-02 20:33:13,552 INFO L895 garLoopResultBuilder]: At program point L151(line 151) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse11 (not (= 0 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~waterLevel~0)|))) (.cse10 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (and (or (and .cse0 .cse1 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse2 .cse7 (and .cse0 .cse8 .cse9) .cse3) (or .cse6 .cse2 .cse10 (and .cse0 .cse1) .cse4) (or .cse5 .cse3 .cse11) (or .cse5 .cse10 .cse11) (or .cse5 .cse6 .cse2 .cse7 .cse10 (and .cse1 .cse8 .cse9)))) [2022-11-02 20:33:13,552 INFO L895 garLoopResultBuilder]: At program point L151-1(lines 132 156) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse12 (<= 1 ~methaneLevelCritical~0))) (let ((.cse7 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse8 (let ((.cse19 (= ~waterLevel~0 0))) (or (and (not .cse19) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse19 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse5 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse10 (not (<= 2 |old(~waterLevel~0)|))) (.cse15 (not (= 0 ~systemActive~0))) (.cse13 (not .cse12)) (.cse2 (= ~pumpRunning~0 0)) (.cse14 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not .cse4)) (.cse16 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse18 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse6 (not .cse3)) (.cse9 (<= 2 ~waterLevel~0)) (.cse17 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5) .cse6 (and .cse7 .cse2 .cse3 .cse4 .cse5 .cse8) (and .cse9 .cse5) .cse10) (or .cse11 .cse0 (and .cse7 .cse2 .cse12 .cse4 .cse5 .cse8) .cse13 (and .cse1 .cse2 .cse12 .cse4 .cse5) .cse10) (or .cse14 .cse6 .cse15) (or .cse14 .cse13 .cse15) (or .cse14 .cse11 .cse0 .cse16 .cse13 (and .cse2 .cse17 .cse18)) (or .cse14 .cse11 .cse0 .cse16 (and .cse1 .cse17 .cse18) .cse6 (and .cse9 .cse17))))) [2022-11-02 20:33:13,552 INFO L899 garLoopResultBuilder]: For program point L85-1(lines 85 91) no Hoare annotation was computed. [2022-11-02 20:33:13,553 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 279) no Hoare annotation was computed. [2022-11-02 20:33:13,553 INFO L895 garLoopResultBuilder]: At program point L1010(lines 1005 1013) the Hoare annotation is: (let ((.cse10 (not (= 0 ~systemActive~0))) (.cse9 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse4 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse5 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4) .cse5) (or .cse6 .cse7 .cse0 .cse8 .cse9) (or .cse6 .cse1 .cse10) (or .cse6 .cse9 .cse10) (or .cse7 .cse0 .cse9 (and .cse2 .cse3 (= ~methAndRunningLastTime~0 0) .cse4) .cse5) (or .cse6 .cse7 .cse0 .cse8 .cse1))) [2022-11-02 20:33:13,553 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 279) no Hoare annotation was computed. [2022-11-02 20:33:13,553 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 74 97) no Hoare annotation was computed. [2022-11-02 20:33:13,553 INFO L899 garLoopResultBuilder]: For program point L78-1(lines 77 96) no Hoare annotation was computed. [2022-11-02 20:33:13,554 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 148) no Hoare annotation was computed. [2022-11-02 20:33:13,554 INFO L899 garLoopResultBuilder]: For program point L136(lines 136 153) no Hoare annotation was computed. [2022-11-02 20:33:13,554 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 402) no Hoare annotation was computed. [2022-11-02 20:33:13,554 INFO L899 garLoopResultBuilder]: For program point L388(lines 388 405) no Hoare annotation was computed. [2022-11-02 20:33:13,554 INFO L895 garLoopResultBuilder]: At program point L388-1(lines 380 408) the Hoare annotation is: (let ((.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~6#1| 0)) (.cse4 (not (= 0 ~systemActive~0))) (.cse14 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse11 (not .cse15)) (.cse3 (not .cse16)) (.cse5 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse7 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse8 (let ((.cse17 (= ~waterLevel~0 0))) (or (and (not .cse17) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse17 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse10 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse13 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4) (or (and .cse5 .cse1 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse1 .cse6 .cse7 .cse9) .cse11 .cse12 (and .cse6 (<= 2 ~waterLevel~0) .cse7 .cse9) .cse13) (or .cse0 .cse14 .cse11 (not (<= 1 |old(~waterLevel~0)|)) .cse3 (and .cse1 .cse6 .cse15 .cse2)) (or .cse0 .cse14 .cse11 .cse12 .cse2 (<= |old(~waterLevel~0)| 1)) (or .cse0 .cse14 (not (= |old(~waterLevel~0)| 1)) .cse11 (and .cse1 .cse6 (= ~waterLevel~0 1) .cse9) .cse12) (or .cse0 .cse12 (and .cse1 .cse2 .cse9) .cse4) (or .cse14 .cse11 .cse3 (and .cse5 .cse1 .cse6 .cse16 .cse15 .cse7 .cse8) (and .cse10 .cse1 .cse6 .cse16 .cse15) .cse13)))) [2022-11-02 20:33:13,555 INFO L895 garLoopResultBuilder]: At program point L281(lines 266 284) the Hoare annotation is: (let ((.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~1#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)))) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse1 .cse2 .cse7 .cse4 .cse8) (or .cse2 .cse7 .cse5 .cse8) (or .cse0 .cse4 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:33:13,555 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-02 20:33:13,556 INFO L895 garLoopResultBuilder]: At program point L207(lines 202 210) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse12 (= 1 ~systemActive~0)) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse13 (<= 1 ~methaneLevelCritical~0))) (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse1 (not .cse13)) (.cse10 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse13 .cse3 .cse12 .cse4 .cse5)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (not .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 .cse5) .cse6) (or .cse0 .cse7 .cse6) (or .cse8 .cse9 .cse1 .cse10 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (= |timeShift_isLowWaterLevel_~tmp~4#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) .cse11) (or .cse9 .cse7 .cse11) (or .cse0 .cse8 (not (= |old(~waterLevel~0)| 1)) .cse9 .cse1 (and .cse2 .cse3 .cse5 (= ~waterLevel~0 1))) (or .cse0 .cse8 .cse9 .cse1 .cse10 .cse11) (or .cse0 .cse8 .cse9 (not (<= 1 |old(~waterLevel~0)|)) .cse7)))) [2022-11-02 20:33:13,556 INFO L899 garLoopResultBuilder]: For program point L393(lines 393 399) no Hoare annotation was computed. [2022-11-02 20:33:13,556 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse4 .cse6) (or .cse2 .cse5 .cse7) (or .cse1 .cse2 .cse4 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:33:13,556 INFO L899 garLoopResultBuilder]: For program point L918(lines 918 922) no Hoare annotation was computed. [2022-11-02 20:33:13,557 INFO L895 garLoopResultBuilder]: At program point L918-2(lines 914 925) the Hoare annotation is: (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse8 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse4 .cse6) (or (and .cse7 (= ~methAndRunningLastTime~0 0) .cse8) .cse1 .cse2 .cse4 .cse9) (or .cse2 .cse5 (and .cse7 .cse8) .cse9) (or .cse0 .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:33:13,557 INFO L895 garLoopResultBuilder]: At program point L146(line 146) the Hoare annotation is: (let ((.cse6 (not (= 0 ~systemActive~0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse5 .cse6) (or .cse0 .cse4 .cse6) (or .cse2 .cse5 .cse7) (or .cse1 .cse2 .cse4 .cse7) (or .cse0 .cse1 .cse2 .cse3 .cse5))) [2022-11-02 20:33:13,557 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 74 97) the Hoare annotation is: (let ((.cse9 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11 .cse10)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse9 .cse11 .cse10)) (.cse8 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8) (or .cse1 .cse3 .cse6 .cse4) (or (and .cse9 .cse10 (= ~waterLevel~0 1)) .cse5 .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse6) (or .cse5 .cse0 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse2 .cse7) (or .cse5 .cse2 .cse7 .cse8)))) [2022-11-02 20:33:13,558 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= 0 ~systemActive~0))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1)) (let ((.cse9 (= ~waterLevel~0 0))) (or (and (not .cse9) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse9 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1)))))) (.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse4 .cse5 .cse6) (or .cse0 .cse7 .cse8) (or .cse0 .cse4 .cse8) (or .cse2 .cse7 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse3 .cse7))) [2022-11-02 20:33:13,558 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 74 97) no Hoare annotation was computed. [2022-11-02 20:33:13,558 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-02 20:33:13,559 INFO L895 garLoopResultBuilder]: At program point L386(line 386) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse18 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse19 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse8 (= 1 ~systemActive~0))) (let ((.cse10 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse11 (let ((.cse20 (= ~waterLevel~0 0))) (or (and (not .cse20) (= |timeShift_isLowWaterLevel_~tmp~4#1| 0)) (and .cse20 (= |timeShift_isLowWaterLevel_~tmp~4#1| 1))))) (.cse9 (<= |old(~waterLevel~0)| (+ ~waterLevel~0 1))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse14 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not .cse8)) (.cse17 (not (<= 1 |old(~waterLevel~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not .cse7)) (.cse12 (<= 2 ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (not .cse15)) (.cse2 (and .cse6 .cse18 .cse19)) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse1 (and .cse10 .cse6 .cse7 .cse8 .cse9 .cse11) (and .cse12 .cse9) .cse13) (or .cse14 .cse4 (and .cse10 .cse6 .cse15 .cse8 .cse9 .cse11) .cse16 (and .cse5 .cse6 .cse15 .cse8 .cse9) .cse13) (or .cse0 .cse14 .cse4 .cse17 .cse16 .cse2) (or .cse0 .cse14 .cse4 .cse17 (and .cse5 .cse18 .cse19) .cse1 (and .cse12 .cse18)) (or .cse0 .cse16 .cse2 .cse3)))) [2022-11-02 20:33:13,559 INFO L899 garLoopResultBuilder]: For program point L316(lines 316 320) no Hoare annotation was computed. [2022-11-02 20:33:13,559 INFO L895 garLoopResultBuilder]: At program point L469(lines 465 471) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:33:13,559 INFO L895 garLoopResultBuilder]: At program point L362(lines 313 363) the Hoare annotation is: false [2022-11-02 20:33:13,559 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 20:33:13,559 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2022-11-02 20:33:13,560 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 20:33:13,560 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 20:33:13,560 INFO L895 garLoopResultBuilder]: At program point L540(lines 535 543) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:33:13,560 INFO L895 garLoopResultBuilder]: At program point L350-2(lines 344 357) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= ~waterLevel~0 1)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse1 .cse4 .cse6) (and .cse5 .cse7 .cse4 .cse6) (and .cse5 .cse0 .cse7 .cse3 .cse4 .cse8) (and .cse5 .cse0 .cse1 .cse3 .cse4 .cse8) (and .cse7 .cse2 .cse3 .cse4))) [2022-11-02 20:33:13,560 INFO L895 garLoopResultBuilder]: At program point L532(lines 528 534) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:33:13,561 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 340) no Hoare annotation was computed. [2022-11-02 20:33:13,561 INFO L899 garLoopResultBuilder]: For program point L334-1(lines 334 340) no Hoare annotation was computed. [2022-11-02 20:33:13,561 INFO L895 garLoopResultBuilder]: At program point L297(lines 285 299) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2022-11-02 20:33:13,561 INFO L895 garLoopResultBuilder]: At program point L359(lines 314 361) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse3 .cse6) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-02 20:33:13,561 INFO L895 garLoopResultBuilder]: At program point L326(line 326) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse3 .cse6) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-02 20:33:13,562 INFO L899 garLoopResultBuilder]: For program point L289(lines 289 295) no Hoare annotation was computed. [2022-11-02 20:33:13,562 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 20:33:13,562 INFO L899 garLoopResultBuilder]: For program point L289-1(lines 289 295) no Hoare annotation was computed. [2022-11-02 20:33:13,562 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 503) no Hoare annotation was computed. [2022-11-02 20:33:13,562 INFO L899 garLoopResultBuilder]: For program point L496-2(lines 496 503) no Hoare annotation was computed. [2022-11-02 20:33:13,562 INFO L895 garLoopResultBuilder]: At program point L525(lines 521 527) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:33:13,563 INFO L902 garLoopResultBuilder]: At program point L480(lines 472 482) the Hoare annotation is: true [2022-11-02 20:33:13,563 INFO L899 garLoopResultBuilder]: For program point L315(lines 314 361) no Hoare annotation was computed. [2022-11-02 20:33:13,563 INFO L895 garLoopResultBuilder]: At program point L377(lines 372 379) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-02 20:33:13,563 INFO L902 garLoopResultBuilder]: At program point L505(lines 486 508) the Hoare annotation is: true [2022-11-02 20:33:13,563 INFO L899 garLoopResultBuilder]: For program point L344(lines 344 357) no Hoare annotation was computed. [2022-11-02 20:33:13,564 INFO L895 garLoopResultBuilder]: At program point L336(line 336) the Hoare annotation is: (let ((.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (= ~methAndRunningLastTime~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3) (and .cse4 .cse5 .cse3 .cse6) (and .cse4 .cse0 .cse5 .cse2 .cse3 (<= 1 ~waterLevel~0)) (and .cse4 .cse1 .cse3 .cse6) (and .cse4 .cse0 .cse1 .cse2 .cse3 (= ~waterLevel~0 1)))) [2022-11-02 20:33:13,564 INFO L902 garLoopResultBuilder]: At program point L365(lines 304 369) the Hoare annotation is: true [2022-11-02 20:33:13,564 INFO L899 garLoopResultBuilder]: For program point L324(lines 324 330) no Hoare annotation was computed. [2022-11-02 20:33:13,564 INFO L899 garLoopResultBuilder]: For program point L324-1(lines 324 330) no Hoare annotation was computed. [2022-11-02 20:33:13,564 INFO L895 garLoopResultBuilder]: At program point L291(line 291) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2022-11-02 20:33:13,564 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 106 130) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-02 20:33:13,565 INFO L899 garLoopResultBuilder]: For program point L256(lines 256 260) no Hoare annotation was computed. [2022-11-02 20:33:13,565 INFO L899 garLoopResultBuilder]: For program point L256-2(lines 256 260) no Hoare annotation was computed. [2022-11-02 20:33:13,565 INFO L895 garLoopResultBuilder]: At program point L120(line 120) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6 .cse7)) (.cse2 (not .cse7)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse5 .cse6)) (or .cse0 .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse4)))) [2022-11-02 20:33:13,565 INFO L899 garLoopResultBuilder]: For program point L114(lines 114 122) no Hoare annotation was computed. [2022-11-02 20:33:13,565 INFO L899 garLoopResultBuilder]: For program point L110(lines 110 127) no Hoare annotation was computed. [2022-11-02 20:33:13,566 INFO L895 garLoopResultBuilder]: At program point L1000(lines 991 1004) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (and .cse1 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 (<= ~waterLevel~0 1) .cse3 .cse4) (or .cse0 .cse2 (not (<= 1 ~waterLevel~0)) .cse5 (not (= ~methaneLevelCritical~0 0)) (and .cse1 (<= 2 ~waterLevel~0))) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse5 .cse3 .cse4)))) [2022-11-02 20:33:13,566 INFO L895 garLoopResultBuilder]: At program point L162(lines 157 164) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2022-11-02 20:33:13,566 INFO L895 garLoopResultBuilder]: At program point L125(line 125) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-02 20:33:13,566 INFO L899 garLoopResultBuilder]: For program point L125-1(lines 106 130) no Hoare annotation was computed. [2022-11-02 20:33:13,566 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 106 130) no Hoare annotation was computed. [2022-11-02 20:33:13,567 INFO L899 garLoopResultBuilder]: For program point L173(lines 173 179) no Hoare annotation was computed. [2022-11-02 20:33:13,567 INFO L895 garLoopResultBuilder]: At program point L173-2(lines 166 182) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~2#1|)) (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))))) [2022-11-02 20:33:13,567 INFO L895 garLoopResultBuilder]: At program point L262(lines 247 265) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~3#1| 0)))) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~waterLevel~0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0)) .cse4) (or .cse0 .cse1 .cse2 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-02 20:33:13,567 INFO L895 garLoopResultBuilder]: At program point L198(lines 191 201) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse4 .cse5)) (or .cse0 (and .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse1 (not .cse5) .cse2 .cse3))) [2022-11-02 20:33:13,568 INFO L895 garLoopResultBuilder]: At program point L196(line 196) the Hoare annotation is: (let ((.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (not .cse3) .cse4 .cse5) (or (not (= ~waterLevel~0 1)) .cse0 .cse2 .cse4 .cse5) (or .cse0 .cse2 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse3)))) [2022-11-02 20:33:13,575 INFO L899 garLoopResultBuilder]: For program point L995(lines 995 1001) no Hoare annotation was computed. [2022-11-02 20:33:13,575 INFO L899 garLoopResultBuilder]: For program point L196-1(line 196) no Hoare annotation was computed. [2022-11-02 20:33:13,576 INFO L899 garLoopResultBuilder]: For program point L930-1(lines 926 937) no Hoare annotation was computed. [2022-11-02 20:33:13,576 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 926 937) no Hoare annotation was computed. [2022-11-02 20:33:13,576 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 926 937) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse2 .cse3) (or .cse0 .cse4 (not (<= 1 |old(~waterLevel~0)|)) .cse1 .cse2 .cse6) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse4 .cse5 (= ~waterLevel~0 1) .cse6))) [2022-11-02 20:33:13,579 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:33:13,581 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 20:33:13,630 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:33:13 BoogieIcfgContainer [2022-11-02 20:33:13,630 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 20:33:13,631 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:33:13,631 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:33:13,631 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:33:13,632 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:32:52" (3/4) ... [2022-11-02 20:33:13,634 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 20:33:13,640 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 20:33:13,641 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 20:33:13,641 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 20:33:13,641 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 20:33:13,641 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-02 20:33:13,641 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 20:33:13,642 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:33:13,642 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 20:33:13,649 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-02 20:33:13,649 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 20:33:13,650 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 20:33:13,650 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 20:33:13,651 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 20:33:13,651 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:33:13,651 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:33:13,675 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,676 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || (((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) [2022-11-02 20:33:13,677 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || \old(waterLevel) <= 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) [2022-11-02 20:33:13,677 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2022-11-02 20:33:13,677 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,678 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,678 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,678 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2022-11-02 20:33:13,678 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,679 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,679 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-02 20:33:13,679 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-11-02 20:33:13,708 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 20:33:13,711 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:33:13,712 INFO L158 Benchmark]: Toolchain (without parser) took 22268.83ms. Allocated memory was 109.1MB in the beginning and 232.8MB in the end (delta: 123.7MB). Free memory was 74.3MB in the beginning and 195.7MB in the end (delta: -121.5MB). Peak memory consumption was 1.9MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,712 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 58.3MB in the beginning and 58.3MB in the end (delta: 28.9kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:33:13,712 INFO L158 Benchmark]: CACSL2BoogieTranslator took 637.82ms. Allocated memory is still 109.1MB. Free memory was 74.0MB in the beginning and 76.5MB in the end (delta: -2.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,713 INFO L158 Benchmark]: Boogie Procedure Inliner took 54.03ms. Allocated memory is still 109.1MB. Free memory was 76.5MB in the beginning and 73.8MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,714 INFO L158 Benchmark]: Boogie Preprocessor took 29.88ms. Allocated memory is still 109.1MB. Free memory was 73.8MB in the beginning and 71.8MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,715 INFO L158 Benchmark]: RCFGBuilder took 629.81ms. Allocated memory is still 109.1MB. Free memory was 71.8MB in the beginning and 52.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,715 INFO L158 Benchmark]: TraceAbstraction took 20829.93ms. Allocated memory was 109.1MB in the beginning and 232.8MB in the end (delta: 123.7MB). Free memory was 51.8MB in the beginning and 202.0MB in the end (delta: -150.2MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,715 INFO L158 Benchmark]: Witness Printer took 80.66ms. Allocated memory is still 232.8MB. Free memory was 202.0MB in the beginning and 195.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 20:33:13,717 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 83.9MB. Free memory was 58.3MB in the beginning and 58.3MB in the end (delta: 28.9kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 637.82ms. Allocated memory is still 109.1MB. Free memory was 74.0MB in the beginning and 76.5MB in the end (delta: -2.6MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 54.03ms. Allocated memory is still 109.1MB. Free memory was 76.5MB in the beginning and 73.8MB in the end (delta: 2.7MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.88ms. Allocated memory is still 109.1MB. Free memory was 73.8MB in the beginning and 71.8MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 629.81ms. Allocated memory is still 109.1MB. Free memory was 71.8MB in the beginning and 52.4MB in the end (delta: 19.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 20829.93ms. Allocated memory was 109.1MB in the beginning and 232.8MB in the end (delta: 123.7MB). Free memory was 51.8MB in the beginning and 202.0MB in the end (delta: -150.2MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. * Witness Printer took 80.66ms. Allocated memory is still 232.8MB. Free memory was 202.0MB in the beginning and 195.7MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 100 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 20.7s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2873 SdHoareTripleChecker+Valid, 3.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2840 mSDsluCounter, 4126 SdHoareTripleChecker+Invalid, 2.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2382 mSDsCounter, 1059 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3448 IncrementalHoareTripleChecker+Invalid, 4507 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1059 mSolverCounterUnsat, 1744 mSDtfsCounter, 3448 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1136 GetRequests, 955 SyntacticMatches, 11 SemanticMatches, 170 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 653 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1026occurred in iteration=8, InterpolantAutomatonStates: 137, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 14 MinimizatonAttempts, 480 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 46 LocationsWithAnnotation, 3150 PreInvPairs, 3442 NumberOfFragments, 3373 HoareAnnotationTreeSize, 3150 FomulaSimplifications, 6583 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 46 FomulaSimplificationsInter, 24650 FormulaSimplificationTreeSizeReductionInter, 6.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 3.8s InterpolantComputationTime, 1476 NumberOfCodeBlocks, 1476 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 1733 ConstructedInterpolants, 0 QuantifiedInterpolants, 3616 SizeOfPredicates, 12 NumberOfNonLiveVariables, 2521 ConjunctsInSsa, 38 ConjunctsInUnsatCore, 21 InterpolantComputations, 12 PerfectInterpolantSequences, 620/747 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 521]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || (((((\result == 0 && pumpRunning == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || (2 <= waterLevel && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((\result == 0 && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(methaneLevelCritical == 0)) || (2 <= waterLevel && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 380]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive)) && ((((((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1))) && tmp == 0) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methAndRunningLastTime == 0 && 2 <= waterLevel) && \old(waterLevel) <= waterLevel + 1) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \old(waterLevel) == waterLevel) || \old(waterLevel) <= 1)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && waterLevel == 1) && tmp == 0)) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && tmp == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((\result == 0 && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \old(waterLevel) <= waterLevel + 1) && ((!(waterLevel == 0) && tmp == 0) || (waterLevel == 0 && tmp == 1)))) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 465]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 472]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 304]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || waterLevel <= 1) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 266]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(1 == systemActive) || (((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= tmp___0) && 1 <= \result) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 247]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) && ((((((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && \result == 0) && tmp___0 == 0) && !(tmp == 0))) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 157]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 191]: Loop Invariant Derived loop invariant: (((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && methaneLevelCritical <= \result)) || !(1 == systemActive)) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 535]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 313]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: (((((((methAndRunningLastTime == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) && 1 <= waterLevel)) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 372]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 166]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result) && methaneLevelCritical <= tmp)) || !(methAndRunningLastTime == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 285]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 0 == systemActive) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && 0 == systemActive) - InvariantResult [Line: 1005]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && \result == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && \result == 0) && methAndRunningLastTime == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || ((((\result == 0 && pumpRunning == 0) && \result == 0) && tmp == 0) && \old(waterLevel) <= waterLevel + 1)) || !(2 <= \old(waterLevel)))) && ((!(1 == systemActive) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(methAndRunningLastTime) == methAndRunningLastTime) && waterLevel == 1))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 1 <= methaneLevelCritical) && \result == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) RESULT: Ultimate proved your program to be correct! [2022-11-02 20:33:13,791 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a9245a0e-5704-433a-be00-c9c3d6606320/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE