./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5e519f3a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-5e519f3 [2022-11-02 20:53:24,362 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-02 20:53:24,366 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-02 20:53:24,416 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-02 20:53:24,420 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-02 20:53:24,424 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-02 20:53:24,426 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-02 20:53:24,431 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-02 20:53:24,434 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-02 20:53:24,439 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-02 20:53:24,440 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-02 20:53:24,442 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-02 20:53:24,443 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-02 20:53:24,446 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-02 20:53:24,448 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-02 20:53:24,450 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-02 20:53:24,451 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-02 20:53:24,453 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-02 20:53:24,454 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-02 20:53:24,462 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-02 20:53:24,463 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-02 20:53:24,465 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-02 20:53:24,468 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-02 20:53:24,470 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-02 20:53:24,479 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-02 20:53:24,480 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-02 20:53:24,480 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-02 20:53:24,482 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-02 20:53:24,483 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-02 20:53:24,485 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-02 20:53:24,486 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-02 20:53:24,487 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-02 20:53:24,489 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-02 20:53:24,491 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-02 20:53:24,492 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-02 20:53:24,492 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-02 20:53:24,493 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-02 20:53:24,493 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-02 20:53:24,494 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-02 20:53:24,495 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-02 20:53:24,495 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-02 20:53:24,496 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-02 20:53:24,536 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-02 20:53:24,536 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-02 20:53:24,537 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-02 20:53:24,537 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-02 20:53:24,538 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-02 20:53:24,539 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-02 20:53:24,539 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-02 20:53:24,540 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-02 20:53:24,540 INFO L138 SettingsManager]: * Use SBE=true [2022-11-02 20:53:24,540 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-02 20:53:24,541 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-02 20:53:24,542 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-02 20:53:24,542 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-02 20:53:24,542 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-02 20:53:24,543 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-02 20:53:24,543 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-02 20:53:24,543 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-02 20:53:24,543 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-02 20:53:24,544 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-02 20:53:24,544 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-02 20:53:24,544 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-02 20:53:24,544 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-02 20:53:24,545 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-02 20:53:24,545 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-02 20:53:24,545 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:53:24,546 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-02 20:53:24,546 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-02 20:53:24,547 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-02 20:53:24,548 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-02 20:53:24,548 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-02 20:53:24,548 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-02 20:53:24,549 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-02 20:53:24,549 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-02 20:53:24,549 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fa0eab3945757815cbe114f72b31b9c97b3f41e20a7d5f245c817ae82afdf9aa [2022-11-02 20:53:24,925 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-02 20:53:24,956 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-02 20:53:24,959 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-02 20:53:24,961 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-02 20:53:24,961 INFO L275 PluginConnector]: CDTParser initialized [2022-11-02 20:53:24,963 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/../../sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2022-11-02 20:53:25,040 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/data/ab2347115/609b69083bbf4364bf698e6057e359cc/FLAG3fc4c9ebc [2022-11-02 20:53:25,669 INFO L306 CDTParser]: Found 1 translation units. [2022-11-02 20:53:25,670 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c [2022-11-02 20:53:25,683 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/data/ab2347115/609b69083bbf4364bf698e6057e359cc/FLAG3fc4c9ebc [2022-11-02 20:53:25,935 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/data/ab2347115/609b69083bbf4364bf698e6057e359cc [2022-11-02 20:53:25,941 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-02 20:53:25,942 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-02 20:53:25,946 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-02 20:53:25,946 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-02 20:53:25,950 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-02 20:53:25,950 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:53:25" (1/1) ... [2022-11-02 20:53:25,952 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@744b998b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:25, skipping insertion in model container [2022-11-02 20:53:25,953 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 08:53:25" (1/1) ... [2022-11-02 20:53:25,960 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-02 20:53:26,017 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-02 20:53:26,381 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2022-11-02 20:53:26,435 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:53:26,444 INFO L203 MainTranslator]: Completed pre-run [2022-11-02 20:53:26,487 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/sv-benchmarks/c/product-lines/minepump_spec2_product56.cil.c[11292,11305] [2022-11-02 20:53:26,513 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-02 20:53:26,530 INFO L208 MainTranslator]: Completed translation [2022-11-02 20:53:26,531 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26 WrapperNode [2022-11-02 20:53:26,531 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-02 20:53:26,532 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-02 20:53:26,532 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-02 20:53:26,532 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-02 20:53:26,540 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,556 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,588 INFO L138 Inliner]: procedures = 59, calls = 162, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 285 [2022-11-02 20:53:26,588 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-02 20:53:26,589 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-02 20:53:26,589 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-02 20:53:26,589 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-02 20:53:26,599 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,600 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,603 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,603 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,610 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,616 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,618 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,620 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,623 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-02 20:53:26,624 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-02 20:53:26,624 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-02 20:53:26,625 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-02 20:53:26,626 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (1/1) ... [2022-11-02 20:53:26,633 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-02 20:53:26,647 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:53:26,660 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-02 20:53:26,685 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-02 20:53:26,730 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-02 20:53:26,730 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-02 20:53:26,730 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-02 20:53:26,731 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-02 20:53:26,731 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-02 20:53:26,732 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-02 20:53:26,732 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-02 20:53:26,737 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-02 20:53:26,737 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-02 20:53:26,737 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:53:26,738 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:53:26,738 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-02 20:53:26,738 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-02 20:53:26,738 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-02 20:53:26,738 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-02 20:53:26,738 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-02 20:53:26,739 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-02 20:53:26,739 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-02 20:53:26,739 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-02 20:53:26,739 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-02 20:53:26,739 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-02 20:53:26,740 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-02 20:53:26,823 INFO L235 CfgBuilder]: Building ICFG [2022-11-02 20:53:26,826 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-02 20:53:27,293 INFO L276 CfgBuilder]: Performing block encoding [2022-11-02 20:53:27,305 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-02 20:53:27,309 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-02 20:53:27,311 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:53:27 BoogieIcfgContainer [2022-11-02 20:53:27,312 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-02 20:53:27,315 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-02 20:53:27,315 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-02 20:53:27,319 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-02 20:53:27,319 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 08:53:25" (1/3) ... [2022-11-02 20:53:27,320 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@281de4f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:53:27, skipping insertion in model container [2022-11-02 20:53:27,321 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 08:53:26" (2/3) ... [2022-11-02 20:53:27,321 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@281de4f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 08:53:27, skipping insertion in model container [2022-11-02 20:53:27,321 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:53:27" (3/3) ... [2022-11-02 20:53:27,322 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product56.cil.c [2022-11-02 20:53:27,341 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-02 20:53:27,341 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-02 20:53:27,416 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-02 20:53:27,428 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50332f0c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-02 20:53:27,428 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-02 20:53:27,433 INFO L276 IsEmpty]: Start isEmpty. Operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-02 20:53:27,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-02 20:53:27,446 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:27,447 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:27,448 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:27,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:27,457 INFO L85 PathProgramCache]: Analyzing trace with hash -1548791886, now seen corresponding path program 1 times [2022-11-02 20:53:27,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:27,467 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [902050402] [2022-11-02 20:53:27,467 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:27,468 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:27,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:27,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-02 20:53:27,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:27,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:27,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:27,754 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [902050402] [2022-11-02 20:53:27,755 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [902050402] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:27,755 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:27,755 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-02 20:53:27,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1036950222] [2022-11-02 20:53:27,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:27,762 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-02 20:53:27,763 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:27,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-02 20:53:27,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:53:27,793 INFO L87 Difference]: Start difference. First operand has 107 states, 79 states have (on average 1.379746835443038) internal successors, (109), 90 states have internal predecessors, (109), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:27,829 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:27,829 INFO L93 Difference]: Finished difference Result 205 states and 280 transitions. [2022-11-02 20:53:27,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-02 20:53:27,832 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-02 20:53:27,832 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:27,841 INFO L225 Difference]: With dead ends: 205 [2022-11-02 20:53:27,841 INFO L226 Difference]: Without dead ends: 98 [2022-11-02 20:53:27,845 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-02 20:53:27,848 INFO L413 NwaCegarLoop]: 137 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:27,849 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 137 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:53:27,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-11-02 20:53:27,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2022-11-02 20:53:27,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 72 states have (on average 1.3194444444444444) internal successors, (95), 82 states have internal predecessors, (95), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-02 20:53:27,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 128 transitions. [2022-11-02 20:53:27,896 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 128 transitions. Word has length 25 [2022-11-02 20:53:27,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:27,897 INFO L495 AbstractCegarLoop]: Abstraction has 98 states and 128 transitions. [2022-11-02 20:53:27,897 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:27,897 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 128 transitions. [2022-11-02 20:53:27,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-02 20:53:27,900 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:27,900 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:27,900 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-02 20:53:27,901 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:27,901 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:27,901 INFO L85 PathProgramCache]: Analyzing trace with hash 1194219528, now seen corresponding path program 1 times [2022-11-02 20:53:27,902 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:27,902 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [428770854] [2022-11-02 20:53:27,902 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:27,902 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:27,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-02 20:53:28,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,076 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:28,077 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:28,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [428770854] [2022-11-02 20:53:28,077 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [428770854] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:28,078 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:28,078 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-02 20:53:28,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459365140] [2022-11-02 20:53:28,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:28,080 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:53:28,080 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:28,080 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:53:28,081 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:53:28,081 INFO L87 Difference]: Start difference. First operand 98 states and 128 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:28,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:28,101 INFO L93 Difference]: Finished difference Result 156 states and 204 transitions. [2022-11-02 20:53:28,102 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:53:28,102 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-02 20:53:28,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:28,104 INFO L225 Difference]: With dead ends: 156 [2022-11-02 20:53:28,104 INFO L226 Difference]: Without dead ends: 89 [2022-11-02 20:53:28,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-02 20:53:28,106 INFO L413 NwaCegarLoop]: 115 mSDtfsCounter, 17 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:28,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 208 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:53:28,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-02 20:53:28,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2022-11-02 20:53:28,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 66 states have (on average 1.3333333333333333) internal successors, (88), 76 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-02 20:53:28,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 116 transitions. [2022-11-02 20:53:28,119 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 116 transitions. Word has length 26 [2022-11-02 20:53:28,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:28,120 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 116 transitions. [2022-11-02 20:53:28,120 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:28,120 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 116 transitions. [2022-11-02 20:53:28,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-02 20:53:28,122 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:28,122 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:28,122 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-02 20:53:28,122 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:28,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:28,123 INFO L85 PathProgramCache]: Analyzing trace with hash -72231615, now seen corresponding path program 1 times [2022-11-02 20:53:28,123 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:28,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659173830] [2022-11-02 20:53:28,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:28,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:28,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,274 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-02 20:53:28,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,278 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:28,279 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:28,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659173830] [2022-11-02 20:53:28,279 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659173830] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:28,279 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:28,280 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:53:28,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634815450] [2022-11-02 20:53:28,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:28,281 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:53:28,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:28,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:53:28,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:53:28,282 INFO L87 Difference]: Start difference. First operand 89 states and 116 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:28,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:28,395 INFO L93 Difference]: Finished difference Result 213 states and 281 transitions. [2022-11-02 20:53:28,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-02 20:53:28,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-02 20:53:28,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:28,398 INFO L225 Difference]: With dead ends: 213 [2022-11-02 20:53:28,399 INFO L226 Difference]: Without dead ends: 132 [2022-11-02 20:53:28,400 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:53:28,401 INFO L413 NwaCegarLoop]: 128 mSDtfsCounter, 181 mSDsluCounter, 256 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 181 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:28,402 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [181 Valid, 384 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:53:28,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-11-02 20:53:28,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 129. [2022-11-02 20:53:28,420 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 96 states have (on average 1.3541666666666667) internal successors, (130), 109 states have internal predecessors, (130), 19 states have call successors, (19), 13 states have call predecessors, (19), 13 states have return successors, (20), 13 states have call predecessors, (20), 19 states have call successors, (20) [2022-11-02 20:53:28,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 169 transitions. [2022-11-02 20:53:28,422 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 169 transitions. Word has length 31 [2022-11-02 20:53:28,423 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:28,423 INFO L495 AbstractCegarLoop]: Abstraction has 129 states and 169 transitions. [2022-11-02 20:53:28,423 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:28,424 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 169 transitions. [2022-11-02 20:53:28,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-02 20:53:28,443 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:28,443 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:28,443 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-02 20:53:28,444 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:28,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:28,444 INFO L85 PathProgramCache]: Analyzing trace with hash 301498308, now seen corresponding path program 1 times [2022-11-02 20:53:28,445 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:28,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212150845] [2022-11-02 20:53:28,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:28,445 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:28,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-02 20:53:28,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:28,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:28,703 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:28,704 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212150845] [2022-11-02 20:53:28,704 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212150845] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:28,704 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:28,704 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:53:28,704 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271605580] [2022-11-02 20:53:28,705 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:28,705 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:53:28,705 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:28,706 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:53:28,706 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:53:28,706 INFO L87 Difference]: Start difference. First operand 129 states and 169 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:28,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:28,928 INFO L93 Difference]: Finished difference Result 369 states and 494 transitions. [2022-11-02 20:53:28,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:53:28,929 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-02 20:53:28,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:28,938 INFO L225 Difference]: With dead ends: 369 [2022-11-02 20:53:28,939 INFO L226 Difference]: Without dead ends: 248 [2022-11-02 20:53:28,940 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:53:28,941 INFO L413 NwaCegarLoop]: 127 mSDtfsCounter, 84 mSDsluCounter, 447 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 574 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:28,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 574 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:53:28,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 248 states. [2022-11-02 20:53:28,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 248 to 242. [2022-11-02 20:53:28,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242 states, 177 states have (on average 1.3389830508474576) internal successors, (237), 202 states have internal predecessors, (237), 38 states have call successors, (38), 26 states have call predecessors, (38), 26 states have return successors, (42), 26 states have call predecessors, (42), 38 states have call successors, (42) [2022-11-02 20:53:29,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242 states to 242 states and 317 transitions. [2022-11-02 20:53:29,002 INFO L78 Accepts]: Start accepts. Automaton has 242 states and 317 transitions. Word has length 34 [2022-11-02 20:53:29,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:29,002 INFO L495 AbstractCegarLoop]: Abstraction has 242 states and 317 transitions. [2022-11-02 20:53:29,003 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-02 20:53:29,003 INFO L276 IsEmpty]: Start isEmpty. Operand 242 states and 317 transitions. [2022-11-02 20:53:29,005 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-02 20:53:29,006 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:29,006 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:29,006 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-02 20:53:29,006 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:29,007 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:29,007 INFO L85 PathProgramCache]: Analyzing trace with hash -393513024, now seen corresponding path program 1 times [2022-11-02 20:53:29,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:29,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998275535] [2022-11-02 20:53:29,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:29,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:29,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:53:29,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:53:29,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:29,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:29,148 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998275535] [2022-11-02 20:53:29,154 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998275535] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:29,154 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:29,154 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:53:29,155 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143316883] [2022-11-02 20:53:29,155 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:29,155 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:53:29,155 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:29,156 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:53:29,156 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:53:29,156 INFO L87 Difference]: Start difference. First operand 242 states and 317 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:53:29,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:29,595 INFO L93 Difference]: Finished difference Result 562 states and 759 transitions. [2022-11-02 20:53:29,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:53:29,596 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-11-02 20:53:29,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:29,599 INFO L225 Difference]: With dead ends: 562 [2022-11-02 20:53:29,600 INFO L226 Difference]: Without dead ends: 328 [2022-11-02 20:53:29,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:53:29,603 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 127 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 300 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 216 SdHoareTripleChecker+Invalid, 349 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:29,603 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 216 Invalid, 349 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 300 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:53:29,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2022-11-02 20:53:29,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 317. [2022-11-02 20:53:29,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 234 states have (on average 1.2735042735042734) internal successors, (298), 255 states have internal predecessors, (298), 44 states have call successors, (44), 38 states have call predecessors, (44), 38 states have return successors, (63), 40 states have call predecessors, (63), 44 states have call successors, (63) [2022-11-02 20:53:29,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 405 transitions. [2022-11-02 20:53:29,650 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 405 transitions. Word has length 38 [2022-11-02 20:53:29,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:29,651 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 405 transitions. [2022-11-02 20:53:29,651 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-02 20:53:29,651 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 405 transitions. [2022-11-02 20:53:29,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-02 20:53:29,669 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:29,670 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:29,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-02 20:53:29,670 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:29,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:29,671 INFO L85 PathProgramCache]: Analyzing trace with hash 1783950440, now seen corresponding path program 1 times [2022-11-02 20:53:29,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:29,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [102817445] [2022-11-02 20:53:29,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:29,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:29,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:53:29,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-02 20:53:29,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:29,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-11-02 20:53:29,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:29,750 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:29,751 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:29,751 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [102817445] [2022-11-02 20:53:29,751 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [102817445] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:29,752 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:29,752 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-02 20:53:29,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [161193781] [2022-11-02 20:53:29,752 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:29,753 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-02 20:53:29,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:29,754 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-02 20:53:29,754 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-02 20:53:29,755 INFO L87 Difference]: Start difference. First operand 317 states and 405 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:30,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:30,159 INFO L93 Difference]: Finished difference Result 681 states and 864 transitions. [2022-11-02 20:53:30,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-02 20:53:30,160 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-02 20:53:30,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:30,163 INFO L225 Difference]: With dead ends: 681 [2022-11-02 20:53:30,164 INFO L226 Difference]: Without dead ends: 372 [2022-11-02 20:53:30,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-02 20:53:30,174 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 165 mSDsluCounter, 103 mSDsCounter, 0 mSdLazyCounter, 189 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 246 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 189 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:30,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 229 Invalid, 246 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 189 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:53:30,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 372 states. [2022-11-02 20:53:30,230 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 372 to 366. [2022-11-02 20:53:30,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 366 states, 269 states have (on average 1.245353159851301) internal successors, (335), 290 states have internal predecessors, (335), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2022-11-02 20:53:30,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 366 states to 366 states and 456 transitions. [2022-11-02 20:53:30,237 INFO L78 Accepts]: Start accepts. Automaton has 366 states and 456 transitions. Word has length 57 [2022-11-02 20:53:30,238 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:30,238 INFO L495 AbstractCegarLoop]: Abstraction has 366 states and 456 transitions. [2022-11-02 20:53:30,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:30,239 INFO L276 IsEmpty]: Start isEmpty. Operand 366 states and 456 transitions. [2022-11-02 20:53:30,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-02 20:53:30,251 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:30,251 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:30,252 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-02 20:53:30,252 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:30,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:30,253 INFO L85 PathProgramCache]: Analyzing trace with hash -1948781245, now seen corresponding path program 1 times [2022-11-02 20:53:30,253 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:30,253 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [43544485] [2022-11-02 20:53:30,253 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:30,253 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:30,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:30,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:53:30,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:30,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:53:30,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:30,464 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:30,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:30,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-02 20:53:30,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:30,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:30,517 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:30,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [43544485] [2022-11-02 20:53:30,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [43544485] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:30,518 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:30,518 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-02 20:53:30,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1663772878] [2022-11-02 20:53:30,519 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:30,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:53:30,521 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:30,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:53:30,522 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-02 20:53:30,522 INFO L87 Difference]: Start difference. First operand 366 states and 456 transitions. Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:30,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:30,933 INFO L93 Difference]: Finished difference Result 738 states and 935 transitions. [2022-11-02 20:53:30,934 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-02 20:53:30,934 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-02 20:53:30,934 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:30,936 INFO L225 Difference]: With dead ends: 738 [2022-11-02 20:53:30,937 INFO L226 Difference]: Without dead ends: 380 [2022-11-02 20:53:30,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:53:30,939 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 141 mSDsluCounter, 138 mSDsCounter, 0 mSdLazyCounter, 359 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 236 SdHoareTripleChecker+Invalid, 418 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 359 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:30,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 236 Invalid, 418 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 359 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-02 20:53:30,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 380 states. [2022-11-02 20:53:30,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 380 to 372. [2022-11-02 20:53:30,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 372 states, 275 states have (on average 1.24) internal successors, (341), 296 states have internal predecessors, (341), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2022-11-02 20:53:30,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 372 states to 372 states and 462 transitions. [2022-11-02 20:53:30,979 INFO L78 Accepts]: Start accepts. Automaton has 372 states and 462 transitions. Word has length 54 [2022-11-02 20:53:30,980 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:30,980 INFO L495 AbstractCegarLoop]: Abstraction has 372 states and 462 transitions. [2022-11-02 20:53:30,980 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:30,980 INFO L276 IsEmpty]: Start isEmpty. Operand 372 states and 462 transitions. [2022-11-02 20:53:30,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-02 20:53:30,981 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:30,982 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:30,982 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-02 20:53:30,982 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:30,983 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:30,983 INFO L85 PathProgramCache]: Analyzing trace with hash -1526079419, now seen corresponding path program 1 times [2022-11-02 20:53:30,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:30,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7321767] [2022-11-02 20:53:30,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:30,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:30,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:53:31,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:53:31,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:31,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-02 20:53:31,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,141 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:31,142 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:31,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7321767] [2022-11-02 20:53:31,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7321767] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:31,142 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:31,142 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:53:31,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252649816] [2022-11-02 20:53:31,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:31,143 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:53:31,144 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:31,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:53:31,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:53:31,144 INFO L87 Difference]: Start difference. First operand 372 states and 462 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:31,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:31,440 INFO L93 Difference]: Finished difference Result 754 states and 963 transitions. [2022-11-02 20:53:31,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:53:31,440 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-02 20:53:31,441 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:31,445 INFO L225 Difference]: With dead ends: 754 [2022-11-02 20:53:31,446 INFO L226 Difference]: Without dead ends: 390 [2022-11-02 20:53:31,447 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-02 20:53:31,448 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 144 mSDsluCounter, 108 mSDsCounter, 0 mSdLazyCounter, 266 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 266 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:31,448 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 208 Invalid, 321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 266 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-02 20:53:31,449 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 390 states. [2022-11-02 20:53:31,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 390 to 376. [2022-11-02 20:53:31,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 376 states, 279 states have (on average 1.2365591397849462) internal successors, (345), 300 states have internal predecessors, (345), 48 states have call successors, (48), 38 states have call predecessors, (48), 48 states have return successors, (73), 52 states have call predecessors, (73), 48 states have call successors, (73) [2022-11-02 20:53:31,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 376 states to 376 states and 466 transitions. [2022-11-02 20:53:31,492 INFO L78 Accepts]: Start accepts. Automaton has 376 states and 466 transitions. Word has length 54 [2022-11-02 20:53:31,492 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:31,492 INFO L495 AbstractCegarLoop]: Abstraction has 376 states and 466 transitions. [2022-11-02 20:53:31,492 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-02 20:53:31,493 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 466 transitions. [2022-11-02 20:53:31,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-02 20:53:31,494 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:31,494 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:31,495 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-02 20:53:31,495 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:31,495 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:31,496 INFO L85 PathProgramCache]: Analyzing trace with hash 963449543, now seen corresponding path program 1 times [2022-11-02 20:53:31,496 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:31,496 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279453969] [2022-11-02 20:53:31,496 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:31,496 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:31,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-02 20:53:31,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:53:31,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:31,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-02 20:53:31,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:31,645 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:31,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:31,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279453969] [2022-11-02 20:53:31,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279453969] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:31,646 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:31,646 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:53:31,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [669274379] [2022-11-02 20:53:31,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:31,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:53:31,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:31,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:53:31,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:53:31,648 INFO L87 Difference]: Start difference. First operand 376 states and 466 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:53:32,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:32,163 INFO L93 Difference]: Finished difference Result 1140 states and 1465 transitions. [2022-11-02 20:53:32,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-02 20:53:32,164 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 54 [2022-11-02 20:53:32,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:32,168 INFO L225 Difference]: With dead ends: 1140 [2022-11-02 20:53:32,169 INFO L226 Difference]: Without dead ends: 772 [2022-11-02 20:53:32,170 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-02 20:53:32,171 INFO L413 NwaCegarLoop]: 151 mSDtfsCounter, 348 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 328 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 351 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 474 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:32,171 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [351 Valid, 276 Invalid, 474 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 328 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-02 20:53:32,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2022-11-02 20:53:32,234 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 770. [2022-11-02 20:53:32,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 573 states have (on average 1.2076788830715532) internal successors, (692), 610 states have internal predecessors, (692), 100 states have call successors, (100), 92 states have call predecessors, (100), 96 states have return successors, (162), 100 states have call predecessors, (162), 100 states have call successors, (162) [2022-11-02 20:53:32,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 954 transitions. [2022-11-02 20:53:32,240 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 954 transitions. Word has length 54 [2022-11-02 20:53:32,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:32,240 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 954 transitions. [2022-11-02 20:53:32,241 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-02 20:53:32,241 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 954 transitions. [2022-11-02 20:53:32,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-02 20:53:32,242 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:32,242 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:32,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-02 20:53:32,243 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:32,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:32,243 INFO L85 PathProgramCache]: Analyzing trace with hash 1198586465, now seen corresponding path program 1 times [2022-11-02 20:53:32,244 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:32,244 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906400459] [2022-11-02 20:53:32,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:32,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:32,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:53:32,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 20:53:32,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-02 20:53:32,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:32,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-02 20:53:32,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:32,344 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:32,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:32,345 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906400459] [2022-11-02 20:53:32,345 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906400459] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:32,345 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-02 20:53:32,345 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-02 20:53:32,345 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1831874764] [2022-11-02 20:53:32,345 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:32,346 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-02 20:53:32,346 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:32,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-02 20:53:32,347 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-02 20:53:32,347 INFO L87 Difference]: Start difference. First operand 770 states and 954 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:53:33,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:33,066 INFO L93 Difference]: Finished difference Result 1368 states and 1767 transitions. [2022-11-02 20:53:33,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-02 20:53:33,067 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-11-02 20:53:33,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:33,075 INFO L225 Difference]: With dead ends: 1368 [2022-11-02 20:53:33,075 INFO L226 Difference]: Without dead ends: 1366 [2022-11-02 20:53:33,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-11-02 20:53:33,077 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 479 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 304 mSolverCounterSat, 255 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 481 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 255 IncrementalHoareTripleChecker+Valid, 304 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:33,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [481 Valid, 202 Invalid, 559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [255 Valid, 304 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-02 20:53:33,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1366 states. [2022-11-02 20:53:33,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1366 to 1062. [2022-11-02 20:53:33,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1062 states, 785 states have (on average 1.2101910828025477) internal successors, (950), 846 states have internal predecessors, (950), 143 states have call successors, (143), 110 states have call predecessors, (143), 133 states have return successors, (278), 142 states have call predecessors, (278), 143 states have call successors, (278) [2022-11-02 20:53:33,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1062 states to 1062 states and 1371 transitions. [2022-11-02 20:53:33,205 INFO L78 Accepts]: Start accepts. Automaton has 1062 states and 1371 transitions. Word has length 58 [2022-11-02 20:53:33,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:33,205 INFO L495 AbstractCegarLoop]: Abstraction has 1062 states and 1371 transitions. [2022-11-02 20:53:33,205 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-02 20:53:33,206 INFO L276 IsEmpty]: Start isEmpty. Operand 1062 states and 1371 transitions. [2022-11-02 20:53:33,209 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 103 [2022-11-02 20:53:33,209 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:33,210 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:33,210 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-02 20:53:33,210 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:33,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:33,211 INFO L85 PathProgramCache]: Analyzing trace with hash -832622466, now seen corresponding path program 1 times [2022-11-02 20:53:33,211 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:33,211 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016409899] [2022-11-02 20:53:33,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:33,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:33,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:53:33,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 20:53:33,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:53:33,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:53:33,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:33,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,399 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:53:33,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-02 20:53:33,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:33,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2022-11-02 20:53:33,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,422 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-02 20:53:33,422 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:33,422 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016409899] [2022-11-02 20:53:33,422 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016409899] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:53:33,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [131811387] [2022-11-02 20:53:33,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:33,423 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:53:33,423 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:53:33,425 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:53:33,432 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-02 20:53:33,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:33,565 INFO L263 TraceCheckSpWp]: Trace formula consists of 492 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-02 20:53:33,576 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:53:33,763 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-02 20:53:33,763 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:53:33,763 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [131811387] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:33,763 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:53:33,764 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-11-02 20:53:33,764 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2460683] [2022-11-02 20:53:33,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:33,764 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-02 20:53:33,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:33,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-02 20:53:33,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:53:33,765 INFO L87 Difference]: Start difference. First operand 1062 states and 1371 transitions. Second operand has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-02 20:53:33,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:33,914 INFO L93 Difference]: Finished difference Result 1830 states and 2407 transitions. [2022-11-02 20:53:33,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-02 20:53:33,915 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 102 [2022-11-02 20:53:33,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:33,921 INFO L225 Difference]: With dead ends: 1830 [2022-11-02 20:53:33,921 INFO L226 Difference]: Without dead ends: 950 [2022-11-02 20:53:33,924 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-02 20:53:33,925 INFO L413 NwaCegarLoop]: 159 mSDtfsCounter, 53 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:33,926 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 233 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-02 20:53:33,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 950 states. [2022-11-02 20:53:34,022 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 950 to 950. [2022-11-02 20:53:34,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 702 states have (on average 1.1851851851851851) internal successors, (832), 758 states have internal predecessors, (832), 128 states have call successors, (128), 103 states have call predecessors, (128), 119 states have return successors, (189), 125 states have call predecessors, (189), 128 states have call successors, (189) [2022-11-02 20:53:34,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1149 transitions. [2022-11-02 20:53:34,030 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1149 transitions. Word has length 102 [2022-11-02 20:53:34,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:34,030 INFO L495 AbstractCegarLoop]: Abstraction has 950 states and 1149 transitions. [2022-11-02 20:53:34,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.666666666666668) internal successors, (83), 3 states have internal predecessors, (83), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-02 20:53:34,031 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1149 transitions. [2022-11-02 20:53:34,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-11-02 20:53:34,034 INFO L187 NwaCegarLoop]: Found error trace [2022-11-02 20:53:34,034 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:34,075 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-02 20:53:34,247 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-02 20:53:34,247 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-02 20:53:34,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-02 20:53:34,248 INFO L85 PathProgramCache]: Analyzing trace with hash 1470383360, now seen corresponding path program 1 times [2022-11-02 20:53:34,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-02 20:53:34,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [558337507] [2022-11-02 20:53:34,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:34,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-02 20:53:34,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-02 20:53:34,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-02 20:53:34,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-02 20:53:34,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-02 20:53:34,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:34,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-02 20:53:34,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-02 20:53:34,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-02 20:53:34,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-02 20:53:34,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-02 20:53:34,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-11-02 20:53:34,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,468 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-02 20:53:34,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-02 20:53:34,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [558337507] [2022-11-02 20:53:34,469 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [558337507] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-02 20:53:34,469 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1748868862] [2022-11-02 20:53:34,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-02 20:53:34,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-02 20:53:34,469 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 [2022-11-02 20:53:34,470 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-02 20:53:34,494 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-02 20:53:34,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-02 20:53:34,619 INFO L263 TraceCheckSpWp]: Trace formula consists of 515 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-02 20:53:34,630 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-02 20:53:34,816 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-02 20:53:34,817 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-02 20:53:34,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1748868862] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-02 20:53:34,817 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-02 20:53:34,817 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-11-02 20:53:34,817 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [232712879] [2022-11-02 20:53:34,817 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-02 20:53:34,819 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-02 20:53:34,819 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-02 20:53:34,819 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-02 20:53:34,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-11-02 20:53:34,820 INFO L87 Difference]: Start difference. First operand 950 states and 1149 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-02 20:53:35,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-02 20:53:35,013 INFO L93 Difference]: Finished difference Result 1753 states and 2113 transitions. [2022-11-02 20:53:35,014 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-02 20:53:35,014 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2022-11-02 20:53:35,014 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-02 20:53:35,015 INFO L225 Difference]: With dead ends: 1753 [2022-11-02 20:53:35,015 INFO L226 Difference]: Without dead ends: 0 [2022-11-02 20:53:35,019 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-11-02 20:53:35,020 INFO L413 NwaCegarLoop]: 199 mSDtfsCounter, 53 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 940 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-02 20:53:35,020 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 940 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-02 20:53:35,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-02 20:53:35,021 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-02 20:53:35,021 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-02 20:53:35,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-02 20:53:35,021 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2022-11-02 20:53:35,021 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-02 20:53:35,022 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-02 20:53:35,022 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-02 20:53:35,022 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-02 20:53:35,022 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-02 20:53:35,024 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-02 20:53:35,065 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-11-02 20:53:35,238 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-02 20:53:35,240 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-02 20:53:42,674 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 702 709) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-02 20:53:42,675 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 702 709) no Hoare annotation was computed. [2022-11-02 20:53:42,675 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 702 709) no Hoare annotation was computed. [2022-11-02 20:53:42,675 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 609 615) no Hoare annotation was computed. [2022-11-02 20:53:42,675 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 609 615) the Hoare annotation is: true [2022-11-02 20:53:42,675 INFO L899 garLoopResultBuilder]: For program point L463-1(lines 459 470) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 459 470) the Hoare annotation is: (let ((.cse2 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse4 (not (<= 1 ~pumpRunning~0))) (.cse5 (= 0 ~systemActive~0)) (.cse6 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 (not (<= 2 ~waterLevel~0)) .cse4 .cse2 .cse5) (or .cse6 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse0 .cse1 .cse3))) [2022-11-02 20:53:42,676 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 459 470) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 937 966) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L899 garLoopResultBuilder]: For program point L958(line 958) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 937 966) the Hoare annotation is: true [2022-11-02 20:53:42,676 INFO L899 garLoopResultBuilder]: For program point L951(lines 951 955) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L902 garLoopResultBuilder]: At program point L951-1(lines 951 955) the Hoare annotation is: true [2022-11-02 20:53:42,676 INFO L899 garLoopResultBuilder]: For program point L948(line 948) no Hoare annotation was computed. [2022-11-02 20:53:42,676 INFO L902 garLoopResultBuilder]: At program point L947-2(lines 947 961) the Hoare annotation is: true [2022-11-02 20:53:42,677 INFO L902 garLoopResultBuilder]: At program point L943(line 943) the Hoare annotation is: true [2022-11-02 20:53:42,677 INFO L899 garLoopResultBuilder]: For program point L943-1(line 943) no Hoare annotation was computed. [2022-11-02 20:53:42,677 INFO L902 garLoopResultBuilder]: At program point L962(lines 937 966) the Hoare annotation is: true [2022-11-02 20:53:42,677 INFO L895 garLoopResultBuilder]: At program point L688(line 688) the Hoare annotation is: (let ((.cse9 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse9)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (= ~pumpRunning~0 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse0 .cse4 (and .cse5 .cse6 .cse7) .cse3) (or .cse0 .cse4 .cse6 (not (= |old(~waterLevel~0)| 1)) .cse1) (or .cse0 .cse4 (and .cse5 .cse7) .cse1) (or .cse4 .cse8 .cse3 .cse9) (or .cse8 .cse3 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse8 .cse1 .cse9)))) [2022-11-02 20:53:42,677 INFO L895 garLoopResultBuilder]: At program point L688-1(lines 669 693) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0)) (.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse1 (and .cse8 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse8 .cse12)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8 .cse2 .cse6 .cse4) (or .cse5 .cse0 .cse9 (and .cse10 .cse11 .cse12) .cse6) (or .cse5 .cse3 .cse7) (or .cse5 .cse0 .cse13 .cse14 .cse6) (or .cse5 .cse0 .cse13 .cse14 .cse3) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse0 .cse9 (and .cse10 .cse13 .cse11 .cse12) .cse3)))) [2022-11-02 20:53:42,678 INFO L895 garLoopResultBuilder]: At program point L717(lines 710 720) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse3 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse6 .cse7) (or .cse5 .cse1 .cse7) (or .cse8 .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0) .cse3) .cse4) (or .cse2 .cse0 .cse6 .cse4) (or .cse5 .cse8 .cse1) (or .cse5 .cse8 .cse6)))) [2022-11-02 20:53:42,678 INFO L899 garLoopResultBuilder]: For program point L589-1(lines 588 607) no Hoare annotation was computed. [2022-11-02 20:53:42,678 INFO L895 garLoopResultBuilder]: At program point L552(line 552) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse9 (= ~pumpRunning~0 0)) (.cse8 (= 0 ~systemActive~0))) (let ((.cse3 (not .cse8)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse14 (not (= |old(~waterLevel~0)| 1))) (.cse6 (and .cse9 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (and .cse9 .cse12)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse13 (= ~methAndRunningLastTime~0 0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse6 .cse7 .cse2 .cse8) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9 .cse7 .cse4 .cse8) (or .cse0 .cse5 .cse1 (and .cse10 .cse11 .cse12) .cse4) (or .cse0 .cse5 .cse13 .cse14 .cse4) (or .cse0 .cse5 .cse13 .cse14 .cse2) (or .cse6 .cse7 .cse2 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse5 .cse1 (and .cse10 .cse13 .cse11 .cse12) .cse2)))) [2022-11-02 20:53:42,678 INFO L899 garLoopResultBuilder]: For program point L552-1(line 552) no Hoare annotation was computed. [2022-11-02 20:53:42,678 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 585 608) no Hoare annotation was computed. [2022-11-02 20:53:42,678 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2022-11-02 20:53:42,679 INFO L895 garLoopResultBuilder]: At program point L726(lines 721 729) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0)) (.cse12 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse8 (and .cse11 .cse12 .cse7)) (.cse9 (not .cse4)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (and .cse11 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse12 (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and (<= 1 ~pumpRunning~0) .cse6 (<= 2 ~waterLevel~0) .cse7) .cse2 .cse8) (or .cse5 .cse2 .cse8 .cse9) (or .cse5 .cse10 .cse9) (or .cse5 .cse0 .cse6 (not (= |old(~waterLevel~0)| 1)) .cse2) (or .cse1 .cse2 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse1 .cse10 .cse4) (or .cse5 .cse0 .cse10)))) [2022-11-02 20:53:42,679 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 685) no Hoare annotation was computed. [2022-11-02 20:53:42,679 INFO L895 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse6)) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse5 .cse3 .cse6) (or .cse5 .cse3 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse5 .cse1 .cse6) (or .cse0 .cse4 .cse3) (or .cse0 .cse4 .cse1)))) [2022-11-02 20:53:42,679 INFO L899 garLoopResultBuilder]: For program point L673(lines 673 690) no Hoare annotation was computed. [2022-11-02 20:53:42,679 INFO L899 garLoopResultBuilder]: For program point L558(lines 558 568) no Hoare annotation was computed. [2022-11-02 20:53:42,679 INFO L895 garLoopResultBuilder]: At program point L715(line 715) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse5 .cse3 .cse7) (or .cse2 .cse1 .cse6 .cse4) (or .cse5 .cse0 .cse3) (or .cse5 .cse0 .cse6) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-11-02 20:53:42,680 INFO L899 garLoopResultBuilder]: For program point L715-1(line 715) no Hoare annotation was computed. [2022-11-02 20:53:42,680 INFO L899 garLoopResultBuilder]: For program point L554(lines 554 571) no Hoare annotation was computed. [2022-11-02 20:53:42,680 INFO L895 garLoopResultBuilder]: At program point L554-1(lines 546 574) the Hoare annotation is: (let ((.cse11 (= 0 ~systemActive~0)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse10 (= ~pumpRunning~0 0)) (.cse5 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~3#1| 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (and .cse10 .cse5 .cse6 .cse8)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse12 (and .cse10 .cse6 .cse16 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|))) (.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse14 (not .cse11)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse15 (and .cse10 .cse6 .cse8)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse13 (not .cse16))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 .cse5 .cse6 .cse7 .cse8)) (or .cse9 (and .cse10 .cse5 .cse6) .cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse5 .cse6) .cse11) (or .cse12 .cse9 .cse13 .cse11 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse2 .cse3 .cse14) (or .cse1 .cse12 .cse9 .cse13 .cse11) (or .cse0 .cse15 .cse13 .cse14) (or .cse0 .cse1 .cse15 (and .cse4 .cse7 .cse8) .cse13)))) [2022-11-02 20:53:42,680 INFO L899 garLoopResultBuilder]: For program point L439(lines 439 443) no Hoare annotation was computed. [2022-11-02 20:53:42,680 INFO L895 garLoopResultBuilder]: At program point L439-2(lines 435 446) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse7 (not .cse4)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 (and .cse2 (= ~methAndRunningLastTime~0 0)) .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse5 .cse3 .cse7) (or .cse2 .cse1 .cse6 .cse4) (or .cse5 .cse0 .cse3) (or .cse5 .cse0 .cse6) (or .cse2 .cse1 .cse3 .cse4 (not (<= 2 |old(~waterLevel~0)|)))))) [2022-11-02 20:53:42,680 INFO L899 garLoopResultBuilder]: For program point L596-1(lines 596 602) no Hoare annotation was computed. [2022-11-02 20:53:42,681 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 585 608) the Hoare annotation is: (let ((.cse9 (= ~methAndRunningLastTime~0 0)) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= 0 ~systemActive~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse5 (and .cse14 .cse12)) (.cse7 (not .cse3)) (.cse2 (and .cse11 .cse12)) (.cse10 (not (= |old(~waterLevel~0)| 1))) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse13 (and .cse14 .cse9 .cse12)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7) (or .cse4 .cse5 .cse1 .cse7) (or .cse0 .cse6 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse8 .cse9 .cse10 .cse1) (or .cse4 .cse8 .cse9 .cse10 .cse6) (or (and .cse11 .cse9 .cse12) .cse8 .cse0 .cse6 .cse3) (or .cse4 .cse8 .cse13 .cse6 .cse3) (or .cse4 .cse8 .cse13 .cse1 .cse3)))) [2022-11-02 20:53:42,681 INFO L899 garLoopResultBuilder]: For program point L559(lines 559 565) no Hoare annotation was computed. [2022-11-02 20:53:42,681 INFO L895 garLoopResultBuilder]: At program point L683(line 683) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0))) (let ((.cse2 (not .cse5)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 .cse5) (or .cse6 .cse4 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse6 .cse3) (or .cse0 .cse6 .cse1)))) [2022-11-02 20:53:42,681 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 585 608) no Hoare annotation was computed. [2022-11-02 20:53:42,681 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2022-11-02 20:53:42,681 INFO L895 garLoopResultBuilder]: At program point L679(line 679) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0))) (let ((.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse9 (not .cse2)) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) (not (<= 2 |old(~waterLevel~0)|))) (or .cse6 .cse0 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse1 .cse2) (or .cse7 .cse8 .cse9) (or .cse7 .cse1 .cse9) (or .cse3 .cse0 .cse8 .cse2) (or .cse7 .cse6 .cse1) (or .cse7 .cse6 .cse8)))) [2022-11-02 20:53:42,682 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 471 479) the Hoare annotation is: true [2022-11-02 20:53:42,682 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 471 479) no Hoare annotation was computed. [2022-11-02 20:53:42,682 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 471 479) no Hoare annotation was computed. [2022-11-02 20:53:42,682 INFO L895 garLoopResultBuilder]: At program point L543(lines 538 545) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:53:42,682 INFO L895 garLoopResultBuilder]: At program point L861(line 861) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:53:42,682 INFO L895 garLoopResultBuilder]: At program point L923(lines 919 925) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:53:42,682 INFO L895 garLoopResultBuilder]: At program point L824(lines 819 826) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methAndRunningLastTime~0 0)) (.cse2 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse6 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse2 .cse3 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse8 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse3 .cse4 .cse5 .cse6))) [2022-11-02 20:53:42,683 INFO L895 garLoopResultBuilder]: At program point L886(lines 839 888) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L849(lines 849 855) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L849-1(lines 849 855) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L895 garLoopResultBuilder]: At program point L816(lines 804 818) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:53:42,683 INFO L902 garLoopResultBuilder]: At program point L1006(lines 998 1008) the Hoare annotation is: true [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L841(lines 841 845) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L808(lines 808 814) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L808-1(lines 808 814) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-02 20:53:42,683 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L899 garLoopResultBuilder]: For program point L1019(lines 1019 1026) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L899 garLoopResultBuilder]: For program point L1019-2(lines 1019 1026) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L895 garLoopResultBuilder]: At program point L916(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:53:42,684 INFO L902 garLoopResultBuilder]: At program point L1028(lines 1009 1031) the Hoare annotation is: true [2022-11-02 20:53:42,684 INFO L895 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:53:42,684 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L902 garLoopResultBuilder]: At program point L892(lines 829 896) the Hoare annotation is: true [2022-11-02 20:53:42,684 INFO L899 garLoopResultBuilder]: For program point L859(lines 859 865) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L899 garLoopResultBuilder]: For program point L859-1(lines 859 865) no Hoare annotation was computed. [2022-11-02 20:53:42,684 INFO L895 garLoopResultBuilder]: At program point L851(line 851) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4))) [2022-11-02 20:53:42,685 INFO L895 garLoopResultBuilder]: At program point L810(line 810) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse0 (= ~methAndRunningLastTime~0 0) .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 (= ~methaneLevelCritical~0 0) .cse2 .cse3 .cse4 .cse5))) [2022-11-02 20:53:42,685 INFO L895 garLoopResultBuilder]: At program point L889(lines 838 890) the Hoare annotation is: false [2022-11-02 20:53:42,685 INFO L899 garLoopResultBuilder]: For program point L877(lines 877 883) no Hoare annotation was computed. [2022-11-02 20:53:42,685 INFO L895 garLoopResultBuilder]: At program point L877-2(lines 869 884) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 0)) (.cse5 (not .cse7)) (.cse6 (= ~pumpRunning~0 0)) (.cse8 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse7 .cse4) (and .cse6 .cse8 .cse9 .cse2 .cse3 .cse4) (and .cse6 .cse9 .cse2 .cse3 .cse7 .cse4) (and .cse0 .cse8 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse9 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse8 .cse1 .cse2 .cse3 .cse4)))) [2022-11-02 20:53:42,685 INFO L899 garLoopResultBuilder]: For program point L840(lines 839 888) no Hoare annotation was computed. [2022-11-02 20:53:42,685 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 884) no Hoare annotation was computed. [2022-11-02 20:53:42,685 INFO L895 garLoopResultBuilder]: At program point L931(lines 926 934) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-02 20:53:42,686 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 617 641) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-11-02 20:53:42,686 INFO L895 garLoopResultBuilder]: At program point L636(line 636) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-02 20:53:42,686 INFO L899 garLoopResultBuilder]: For program point L636-1(lines 617 641) no Hoare annotation was computed. [2022-11-02 20:53:42,686 INFO L895 garLoopResultBuilder]: At program point L781(lines 766 784) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse4)))) [2022-11-02 20:53:42,686 INFO L895 garLoopResultBuilder]: At program point L521(lines 512 525) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-02 20:53:42,686 INFO L899 garLoopResultBuilder]: For program point L775(lines 775 779) no Hoare annotation was computed. [2022-11-02 20:53:42,686 INFO L899 garLoopResultBuilder]: For program point L775-2(lines 775 779) no Hoare annotation was computed. [2022-11-02 20:53:42,686 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 617 641) no Hoare annotation was computed. [2022-11-02 20:53:42,687 INFO L895 garLoopResultBuilder]: At program point L699(lines 694 701) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse3 .cse2) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse3 .cse2))) [2022-11-02 20:53:42,687 INFO L895 garLoopResultBuilder]: At program point L631(line 631) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) .cse3) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse2) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse3))) [2022-11-02 20:53:42,687 INFO L899 garLoopResultBuilder]: For program point L625(lines 625 633) no Hoare annotation was computed. [2022-11-02 20:53:42,687 INFO L899 garLoopResultBuilder]: For program point L621(lines 621 638) no Hoare annotation was computed. [2022-11-02 20:53:42,687 INFO L899 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2022-11-02 20:53:42,687 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 447 458) no Hoare annotation was computed. [2022-11-02 20:53:42,687 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 447 458) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse3 (= 0 ~systemActive~0)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (= ~pumpRunning~0 0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse1 .cse2 .cse3 .cse5) (or .cse6 .cse0 .cse2 .cse5) (or .cse6 .cse4 .cse2 .cse5))) [2022-11-02 20:53:42,687 INFO L899 garLoopResultBuilder]: For program point L451-1(lines 447 458) no Hoare annotation was computed. [2022-11-02 20:53:42,688 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 643 667) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-11-02 20:53:42,688 INFO L895 garLoopResultBuilder]: At program point L531(lines 526 534) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-02 20:53:42,688 INFO L895 garLoopResultBuilder]: At program point L657(line 657) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-02 20:53:42,688 INFO L895 garLoopResultBuilder]: At program point L653(line 653) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-02 20:53:42,688 INFO L899 garLoopResultBuilder]: For program point L651(lines 651 659) no Hoare annotation was computed. [2022-11-02 20:53:42,688 INFO L899 garLoopResultBuilder]: For program point L647(lines 647 664) no Hoare annotation was computed. [2022-11-02 20:53:42,688 INFO L895 garLoopResultBuilder]: At program point L800(lines 785 803) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse2 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) .cse1 .cse2))) [2022-11-02 20:53:42,688 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 643 667) no Hoare annotation was computed. [2022-11-02 20:53:42,688 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 798) no Hoare annotation was computed. [2022-11-02 20:53:42,689 INFO L899 garLoopResultBuilder]: For program point L794-2(lines 794 798) no Hoare annotation was computed. [2022-11-02 20:53:42,689 INFO L895 garLoopResultBuilder]: At program point L662(line 662) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) .cse2 .cse3))) [2022-11-02 20:53:42,689 INFO L899 garLoopResultBuilder]: For program point L662-1(lines 643 667) no Hoare annotation was computed. [2022-11-02 20:53:42,692 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-02 20:53:42,694 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-02 20:53:42,749 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 02.11 08:53:42 BoogieIcfgContainer [2022-11-02 20:53:42,749 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-02 20:53:42,750 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-02 20:53:42,750 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-02 20:53:42,750 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-02 20:53:42,751 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 08:53:27" (3/4) ... [2022-11-02 20:53:42,753 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-02 20:53:42,771 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-02 20:53:42,772 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-02 20:53:42,772 INFO L354 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-02 20:53:42,784 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-11-02 20:53:42,785 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-02 20:53:42,785 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-02 20:53:42,786 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-02 20:53:42,786 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-02 20:53:42,787 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:53:42,787 INFO L910 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-02 20:53:42,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) [2022-11-02 20:53:42,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-11-02 20:53:42,816 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) [2022-11-02 20:53:42,817 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) [2022-11-02 20:53:42,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-02 20:53:42,821 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(methAndRunningLastTime) == 0) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) [2022-11-02 20:53:42,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) [2022-11-02 20:53:42,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) [2022-11-02 20:53:42,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2022-11-02 20:53:42,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) [2022-11-02 20:53:42,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2022-11-02 20:53:42,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 20:53:42,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-02 20:53:42,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) [2022-11-02 20:53:42,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 20:53:42,829 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 20:53:42,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-02 20:53:42,888 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/witness.graphml [2022-11-02 20:53:42,889 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-02 20:53:42,889 INFO L158 Benchmark]: Toolchain (without parser) took 16946.73ms. Allocated memory was 127.9MB in the beginning and 226.5MB in the end (delta: 98.6MB). Free memory was 90.4MB in the beginning and 90.1MB in the end (delta: 233.0kB). Peak memory consumption was 97.9MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,889 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 127.9MB. Free memory is still 107.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-02 20:53:42,890 INFO L158 Benchmark]: CACSL2BoogieTranslator took 585.32ms. Allocated memory is still 127.9MB. Free memory was 90.2MB in the beginning and 94.3MB in the end (delta: -4.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,890 INFO L158 Benchmark]: Boogie Procedure Inliner took 56.49ms. Allocated memory is still 127.9MB. Free memory was 94.3MB in the beginning and 91.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,891 INFO L158 Benchmark]: Boogie Preprocessor took 34.33ms. Allocated memory is still 127.9MB. Free memory was 91.8MB in the beginning and 89.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,891 INFO L158 Benchmark]: RCFGBuilder took 688.20ms. Allocated memory is still 127.9MB. Free memory was 89.7MB in the beginning and 69.9MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,892 INFO L158 Benchmark]: TraceAbstraction took 15434.18ms. Allocated memory was 127.9MB in the beginning and 226.5MB in the end (delta: 98.6MB). Free memory was 69.1MB in the beginning and 96.4MB in the end (delta: -27.3MB). Peak memory consumption was 102.8MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,892 INFO L158 Benchmark]: Witness Printer took 138.77ms. Allocated memory is still 226.5MB. Free memory was 96.4MB in the beginning and 90.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-02 20:53:42,896 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 127.9MB. Free memory is still 107.8MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 585.32ms. Allocated memory is still 127.9MB. Free memory was 90.2MB in the beginning and 94.3MB in the end (delta: -4.1MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 56.49ms. Allocated memory is still 127.9MB. Free memory was 94.3MB in the beginning and 91.8MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 34.33ms. Allocated memory is still 127.9MB. Free memory was 91.8MB in the beginning and 89.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 688.20ms. Allocated memory is still 127.9MB. Free memory was 89.7MB in the beginning and 69.9MB in the end (delta: 19.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 15434.18ms. Allocated memory was 127.9MB in the beginning and 226.5MB in the end (delta: 98.6MB). Free memory was 69.1MB in the beginning and 96.4MB in the end (delta: -27.3MB). Peak memory consumption was 102.8MB. Max. memory is 16.1GB. * Witness Printer took 138.77ms. Allocated memory is still 226.5MB. Free memory was 96.4MB in the beginning and 90.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 107 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.3s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1819 SdHoareTripleChecker+Valid, 2.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1792 mSDsluCounter, 3843 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2291 mSDsCounter, 657 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1888 IncrementalHoareTripleChecker+Invalid, 2545 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 657 mSolverCounterUnsat, 1552 mSDtfsCounter, 1888 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 427 GetRequests, 333 SyntacticMatches, 1 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 94 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1062occurred in iteration=10, InterpolantAutomatonStates: 86, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 354 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 50 LocationsWithAnnotation, 2183 PreInvPairs, 2431 NumberOfFragments, 3325 HoareAnnotationTreeSize, 2183 FomulaSimplifications, 270 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 50 FomulaSimplificationsInter, 16247 FormulaSimplificationTreeSizeReductionInter, 6.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 859 NumberOfCodeBlocks, 859 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 845 ConstructedInterpolants, 0 QuantifiedInterpolants, 1502 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1007 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 149/158 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 694]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 804]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) || (((((pumpRunning == 0 && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1) - InvariantResult [Line: 926]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 721]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel))) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 838]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: (((((((((((!(\old(methAndRunningLastTime) == 0) || ((pumpRunning == 0 && 1 <= \result) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical))) && ((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 435]: Loop Invariant Derived loop invariant: (((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && waterLevel == 1) && tmp == 1) && !(0 == systemActive) - InvariantResult [Line: 785]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0))) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 512]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 710]: Loop Invariant Derived loop invariant: (((((((((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical == 0)) || 0 == systemActive)) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 546]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && tmp == 0) && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) && ((((!(1 <= \old(pumpRunning)) || ((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == \old(pumpRunning) && tmp == 0) && methAndRunningLastTime == 0)) || 0 == systemActive)) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || (((pumpRunning == 0 && tmp == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || !(0 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 819]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || ((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && 2 <= waterLevel) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && \result == 1) && splverifierCounter == 0) && tmp == 1) && !(0 == systemActive))) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && splverifierCounter == 0) && tmp == 1) - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-02 20:53:42,986 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f466180f-2a70-4279-b722-7c90f3066f94/bin/uautomizer-Dbtcem3rbc/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE