./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 12:07:38,933 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 12:07:38,936 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 12:07:38,975 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 12:07:38,978 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 12:07:38,983 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 12:07:38,986 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 12:07:38,990 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 12:07:38,992 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 12:07:38,999 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 12:07:39,001 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 12:07:39,003 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 12:07:39,004 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 12:07:39,006 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 12:07:39,007 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 12:07:39,008 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 12:07:39,011 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 12:07:39,012 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 12:07:39,013 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 12:07:39,017 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 12:07:39,024 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 12:07:39,026 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 12:07:39,027 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 12:07:39,028 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 12:07:39,031 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 12:07:39,031 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 12:07:39,032 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 12:07:39,032 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 12:07:39,033 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 12:07:39,034 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 12:07:39,034 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 12:07:39,035 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 12:07:39,036 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 12:07:39,036 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 12:07:39,037 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 12:07:39,038 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 12:07:39,038 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 12:07:39,039 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 12:07:39,039 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 12:07:39,040 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 12:07:39,041 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 12:07:39,041 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-16 12:07:39,061 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 12:07:39,062 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 12:07:39,062 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 12:07:39,062 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 12:07:39,063 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 12:07:39,063 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 12:07:39,064 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 12:07:39,065 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 12:07:39,065 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 12:07:39,065 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 12:07:39,065 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 12:07:39,066 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 12:07:39,066 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 12:07:39,066 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 12:07:39,066 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 12:07:39,067 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 12:07:39,067 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 12:07:39,067 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 12:07:39,068 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 12:07:39,068 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 12:07:39,068 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 12:07:39,069 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 12:07:39,069 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 12:07:39,069 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 12:07:39,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 12:07:39,070 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 12:07:39,070 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 12:07:39,070 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 12:07:39,071 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 12:07:39,071 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 12:07:39,071 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 12:07:39,071 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 12:07:39,072 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 12:07:39,072 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb [2022-11-16 12:07:39,400 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 12:07:39,433 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 12:07:39,436 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 12:07:39,438 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 12:07:39,439 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 12:07:39,441 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2022-11-16 12:07:39,513 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/data/f21ca5257/b5fa0069631b43f6831912575fc74d8a/FLAG1be44daf2 [2022-11-16 12:07:40,076 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 12:07:40,076 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2022-11-16 12:07:40,087 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/data/f21ca5257/b5fa0069631b43f6831912575fc74d8a/FLAG1be44daf2 [2022-11-16 12:07:40,376 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/data/f21ca5257/b5fa0069631b43f6831912575fc74d8a [2022-11-16 12:07:40,379 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 12:07:40,385 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 12:07:40,388 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 12:07:40,388 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 12:07:40,392 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 12:07:40,393 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:40,395 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5a61cfe2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40, skipping insertion in model container [2022-11-16 12:07:40,396 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:40,404 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 12:07:40,467 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 12:07:40,739 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2022-11-16 12:07:40,845 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:07:40,855 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 12:07:40,878 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2022-11-16 12:07:40,928 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:07:40,953 INFO L208 MainTranslator]: Completed translation [2022-11-16 12:07:40,954 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40 WrapperNode [2022-11-16 12:07:40,954 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 12:07:40,956 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 12:07:40,956 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 12:07:40,956 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 12:07:40,965 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:40,980 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,014 INFO L138 Inliner]: procedures = 57, calls = 158, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 271 [2022-11-16 12:07:41,015 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 12:07:41,016 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 12:07:41,016 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 12:07:41,016 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 12:07:41,028 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,032 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,035 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,046 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,053 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,061 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,065 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,081 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,083 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 12:07:41,084 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 12:07:41,085 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 12:07:41,085 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 12:07:41,086 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (1/1) ... [2022-11-16 12:07:41,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 12:07:41,113 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:07:41,135 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 12:07:41,141 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 12:07:41,181 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 12:07:41,181 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 12:07:41,181 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 12:07:41,182 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 12:07:41,182 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 12:07:41,182 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 12:07:41,182 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 12:07:41,184 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 12:07:41,184 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 12:07:41,185 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:07:41,185 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:07:41,185 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 12:07:41,185 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 12:07:41,186 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-16 12:07:41,186 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-16 12:07:41,186 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 12:07:41,187 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 12:07:41,187 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 12:07:41,187 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 12:07:41,187 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 12:07:41,329 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 12:07:41,332 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 12:07:41,800 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 12:07:41,814 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 12:07:41,819 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 12:07:41,822 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:07:41 BoogieIcfgContainer [2022-11-16 12:07:41,823 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 12:07:41,826 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 12:07:41,827 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 12:07:41,831 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 12:07:41,831 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 12:07:40" (1/3) ... [2022-11-16 12:07:41,832 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3112fbc0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 12:07:41, skipping insertion in model container [2022-11-16 12:07:41,832 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:07:40" (2/3) ... [2022-11-16 12:07:41,834 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3112fbc0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 12:07:41, skipping insertion in model container [2022-11-16 12:07:41,834 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:07:41" (3/3) ... [2022-11-16 12:07:41,836 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product59.cil.c [2022-11-16 12:07:41,860 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 12:07:41,861 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 12:07:41,943 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 12:07:41,952 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@44699266, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 12:07:41,952 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 12:07:41,960 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.3783783783783783) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-16 12:07:41,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-11-16 12:07:41,972 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:41,973 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:41,974 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:41,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:41,982 INFO L85 PathProgramCache]: Analyzing trace with hash 896796979, now seen corresponding path program 1 times [2022-11-16 12:07:41,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:41,992 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [45260845] [2022-11-16 12:07:41,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:41,993 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:42,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:42,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 12:07:42,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:42,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:42,332 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:42,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [45260845] [2022-11-16 12:07:42,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [45260845] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:42,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:42,340 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 12:07:42,342 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173463865] [2022-11-16 12:07:42,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:42,353 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 12:07:42,353 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:42,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 12:07:42,384 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 12:07:42,389 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.3783783783783783) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:42,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:42,431 INFO L93 Difference]: Finished difference Result 188 states and 255 transitions. [2022-11-16 12:07:42,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 12:07:42,436 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2022-11-16 12:07:42,436 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:42,445 INFO L225 Difference]: With dead ends: 188 [2022-11-16 12:07:42,446 INFO L226 Difference]: Without dead ends: 89 [2022-11-16 12:07:42,450 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 12:07:42,454 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:42,455 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:07:42,477 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2022-11-16 12:07:42,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2022-11-16 12:07:42,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-16 12:07:42,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 115 transitions. [2022-11-16 12:07:42,544 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 115 transitions. Word has length 23 [2022-11-16 12:07:42,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:42,545 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 115 transitions. [2022-11-16 12:07:42,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:42,546 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 115 transitions. [2022-11-16 12:07:42,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-11-16 12:07:42,549 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:42,550 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:42,551 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 12:07:42,551 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:42,553 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:42,554 INFO L85 PathProgramCache]: Analyzing trace with hash 1625202696, now seen corresponding path program 1 times [2022-11-16 12:07:42,554 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:42,555 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [851237619] [2022-11-16 12:07:42,555 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:42,556 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:42,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:42,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 12:07:42,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:42,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:42,706 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:42,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [851237619] [2022-11-16 12:07:42,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [851237619] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:42,707 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:42,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:07:42,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1689963344] [2022-11-16 12:07:42,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:42,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 12:07:42,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:42,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:07:42,710 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:07:42,710 INFO L87 Difference]: Start difference. First operand 89 states and 115 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:42,746 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:42,746 INFO L93 Difference]: Finished difference Result 140 states and 180 transitions. [2022-11-16 12:07:42,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:07:42,749 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2022-11-16 12:07:42,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:42,753 INFO L225 Difference]: With dead ends: 140 [2022-11-16 12:07:42,754 INFO L226 Difference]: Without dead ends: 80 [2022-11-16 12:07:42,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:07:42,759 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 16 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:42,761 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 183 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:07:42,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-11-16 12:07:42,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2022-11-16 12:07:42,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 12:07:42,781 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2022-11-16 12:07:42,784 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 24 [2022-11-16 12:07:42,785 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:42,786 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2022-11-16 12:07:42,787 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:42,788 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2022-11-16 12:07:42,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-11-16 12:07:42,792 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:42,792 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:42,793 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 12:07:42,793 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:42,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:42,794 INFO L85 PathProgramCache]: Analyzing trace with hash 2098135563, now seen corresponding path program 1 times [2022-11-16 12:07:42,795 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:42,796 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [193230426] [2022-11-16 12:07:42,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:42,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:42,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:43,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 12:07:43,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:43,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:43,028 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:43,029 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [193230426] [2022-11-16 12:07:43,029 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [193230426] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:43,029 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:43,029 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:07:43,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912192575] [2022-11-16 12:07:43,030 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:43,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:43,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:43,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:43,032 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:07:43,032 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:43,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:43,279 INFO L93 Difference]: Finished difference Result 267 states and 350 transitions. [2022-11-16 12:07:43,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 12:07:43,280 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2022-11-16 12:07:43,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:43,288 INFO L225 Difference]: With dead ends: 267 [2022-11-16 12:07:43,288 INFO L226 Difference]: Without dead ends: 194 [2022-11-16 12:07:43,294 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 12:07:43,300 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 277 mSDsluCounter, 333 mSDsCounter, 0 mSdLazyCounter, 103 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 277 SdHoareTripleChecker+Valid, 459 SdHoareTripleChecker+Invalid, 138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 103 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:43,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [277 Valid, 459 Invalid, 138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 103 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 12:07:43,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2022-11-16 12:07:43,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 188. [2022-11-16 12:07:43,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 188 states, 141 states have (on average 1.3546099290780143) internal successors, (191), 159 states have internal predecessors, (191), 27 states have call successors, (27), 19 states have call predecessors, (27), 19 states have return successors, (28), 19 states have call predecessors, (28), 27 states have call successors, (28) [2022-11-16 12:07:43,361 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 246 transitions. [2022-11-16 12:07:43,361 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 246 transitions. Word has length 28 [2022-11-16 12:07:43,361 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:43,362 INFO L495 AbstractCegarLoop]: Abstraction has 188 states and 246 transitions. [2022-11-16 12:07:43,362 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.166666666666667) internal successors, (25), 6 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:43,362 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 246 transitions. [2022-11-16 12:07:43,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-16 12:07:43,369 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:43,369 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:43,369 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 12:07:43,369 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:43,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:43,370 INFO L85 PathProgramCache]: Analyzing trace with hash -440127999, now seen corresponding path program 1 times [2022-11-16 12:07:43,370 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:43,370 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313313600] [2022-11-16 12:07:43,371 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:43,371 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:43,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:43,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 12:07:43,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:43,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:43,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:43,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313313600] [2022-11-16 12:07:43,626 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313313600] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:43,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:43,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:07:43,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1951981309] [2022-11-16 12:07:43,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:43,628 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:43,629 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:43,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:43,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:07:43,630 INFO L87 Difference]: Start difference. First operand 188 states and 246 transitions. Second operand has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:43,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:43,817 INFO L93 Difference]: Finished difference Result 551 states and 734 transitions. [2022-11-16 12:07:43,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 12:07:43,818 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-11-16 12:07:43,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:43,826 INFO L225 Difference]: With dead ends: 551 [2022-11-16 12:07:43,827 INFO L226 Difference]: Without dead ends: 370 [2022-11-16 12:07:43,829 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-16 12:07:43,839 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 75 mSDsluCounter, 393 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 504 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:43,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 504 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 12:07:43,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2022-11-16 12:07:43,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 361. [2022-11-16 12:07:43,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 361 states, 268 states have (on average 1.3395522388059702) internal successors, (359), 303 states have internal predecessors, (359), 54 states have call successors, (54), 38 states have call predecessors, (54), 38 states have return successors, (59), 38 states have call predecessors, (59), 54 states have call successors, (59) [2022-11-16 12:07:43,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 361 states to 361 states and 472 transitions. [2022-11-16 12:07:43,909 INFO L78 Accepts]: Start accepts. Automaton has 361 states and 472 transitions. Word has length 32 [2022-11-16 12:07:43,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:43,910 INFO L495 AbstractCegarLoop]: Abstraction has 361 states and 472 transitions. [2022-11-16 12:07:43,910 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.833333333333333) internal successors, (29), 4 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:07:43,910 INFO L276 IsEmpty]: Start isEmpty. Operand 361 states and 472 transitions. [2022-11-16 12:07:43,912 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-11-16 12:07:43,912 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:43,912 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:43,912 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 12:07:43,913 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:43,913 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:43,913 INFO L85 PathProgramCache]: Analyzing trace with hash -1869434011, now seen corresponding path program 1 times [2022-11-16 12:07:43,913 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:43,913 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1075570579] [2022-11-16 12:07:43,914 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:43,914 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:43,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 12:07:44,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-16 12:07:44,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:44,064 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:44,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1075570579] [2022-11-16 12:07:44,068 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1075570579] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:44,068 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:44,069 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:07:44,069 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16687495] [2022-11-16 12:07:44,069 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:44,071 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:44,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:44,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:44,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:07:44,078 INFO L87 Difference]: Start difference. First operand 361 states and 472 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 12:07:44,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:44,525 INFO L93 Difference]: Finished difference Result 882 states and 1178 transitions. [2022-11-16 12:07:44,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 12:07:44,526 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 36 [2022-11-16 12:07:44,527 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:44,532 INFO L225 Difference]: With dead ends: 882 [2022-11-16 12:07:44,532 INFO L226 Difference]: Without dead ends: 528 [2022-11-16 12:07:44,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-16 12:07:44,536 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 130 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 307 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 344 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:44,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 143 Invalid, 344 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 307 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 12:07:44,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 528 states. [2022-11-16 12:07:44,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 528 to 509. [2022-11-16 12:07:44,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 509 states, 380 states have (on average 1.2842105263157895) internal successors, (488), 417 states have internal predecessors, (488), 68 states have call successors, (68), 60 states have call predecessors, (68), 60 states have return successors, (93), 62 states have call predecessors, (93), 68 states have call successors, (93) [2022-11-16 12:07:44,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 509 states to 509 states and 649 transitions. [2022-11-16 12:07:44,619 INFO L78 Accepts]: Start accepts. Automaton has 509 states and 649 transitions. Word has length 36 [2022-11-16 12:07:44,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:44,619 INFO L495 AbstractCegarLoop]: Abstraction has 509 states and 649 transitions. [2022-11-16 12:07:44,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 5 states have internal predecessors, (31), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 12:07:44,620 INFO L276 IsEmpty]: Start isEmpty. Operand 509 states and 649 transitions. [2022-11-16 12:07:44,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-16 12:07:44,624 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:44,625 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:44,625 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 12:07:44,625 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:44,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:44,631 INFO L85 PathProgramCache]: Analyzing trace with hash 1110744655, now seen corresponding path program 1 times [2022-11-16 12:07:44,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:44,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1232366931] [2022-11-16 12:07:44,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:44,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:44,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 12:07:44,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 12:07:44,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,796 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:44,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 12:07:44,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:44,804 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 12:07:44,804 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:44,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1232366931] [2022-11-16 12:07:44,805 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1232366931] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:44,805 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:44,805 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:07:44,805 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670359934] [2022-11-16 12:07:44,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:44,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 12:07:44,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:44,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:07:44,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:07:44,807 INFO L87 Difference]: Start difference. First operand 509 states and 649 transitions. Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:07:45,246 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:45,246 INFO L93 Difference]: Finished difference Result 1125 states and 1470 transitions. [2022-11-16 12:07:45,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:07:45,247 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-16 12:07:45,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:45,251 INFO L225 Difference]: With dead ends: 1125 [2022-11-16 12:07:45,251 INFO L226 Difference]: Without dead ends: 623 [2022-11-16 12:07:45,253 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-16 12:07:45,254 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 136 mSDsluCounter, 128 mSDsCounter, 0 mSdLazyCounter, 351 mSolverCounterSat, 47 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 160 SdHoareTripleChecker+Invalid, 398 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 351 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:45,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 160 Invalid, 398 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 351 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 12:07:45,256 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 623 states. [2022-11-16 12:07:45,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 623 to 601. [2022-11-16 12:07:45,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 601 states, 452 states have (on average 1.252212389380531) internal successors, (566), 489 states have internal predecessors, (566), 76 states have call successors, (76), 60 states have call predecessors, (76), 72 states have return successors, (113), 78 states have call predecessors, (113), 76 states have call successors, (113) [2022-11-16 12:07:45,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 601 states to 601 states and 755 transitions. [2022-11-16 12:07:45,323 INFO L78 Accepts]: Start accepts. Automaton has 601 states and 755 transitions. Word has length 54 [2022-11-16 12:07:45,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:45,324 INFO L495 AbstractCegarLoop]: Abstraction has 601 states and 755 transitions. [2022-11-16 12:07:45,324 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:07:45,324 INFO L276 IsEmpty]: Start isEmpty. Operand 601 states and 755 transitions. [2022-11-16 12:07:45,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-16 12:07:45,326 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:45,326 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:45,326 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 12:07:45,327 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:45,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:45,327 INFO L85 PathProgramCache]: Analyzing trace with hash 1172784269, now seen corresponding path program 1 times [2022-11-16 12:07:45,328 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:45,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [770478596] [2022-11-16 12:07:45,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:45,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:45,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 12:07:45,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 12:07:45,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:45,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 12:07:45,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,435 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 12:07:45,435 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:45,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [770478596] [2022-11-16 12:07:45,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [770478596] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:45,436 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:45,436 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:07:45,436 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011216677] [2022-11-16 12:07:45,436 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:45,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:45,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:45,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:45,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:07:45,438 INFO L87 Difference]: Start difference. First operand 601 states and 755 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:07:45,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:45,765 INFO L93 Difference]: Finished difference Result 1229 states and 1584 transitions. [2022-11-16 12:07:45,765 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:07:45,765 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-16 12:07:45,766 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:45,769 INFO L225 Difference]: With dead ends: 1229 [2022-11-16 12:07:45,769 INFO L226 Difference]: Without dead ends: 635 [2022-11-16 12:07:45,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-16 12:07:45,772 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 140 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 273 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 141 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 315 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 273 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:45,772 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [141 Valid, 132 Invalid, 315 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 273 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 12:07:45,773 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 635 states. [2022-11-16 12:07:45,827 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 635 to 609. [2022-11-16 12:07:45,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 609 states, 460 states have (on average 1.2478260869565216) internal successors, (574), 497 states have internal predecessors, (574), 76 states have call successors, (76), 60 states have call predecessors, (76), 72 states have return successors, (113), 78 states have call predecessors, (113), 76 states have call successors, (113) [2022-11-16 12:07:45,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 609 states to 609 states and 763 transitions. [2022-11-16 12:07:45,834 INFO L78 Accepts]: Start accepts. Automaton has 609 states and 763 transitions. Word has length 54 [2022-11-16 12:07:45,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:45,834 INFO L495 AbstractCegarLoop]: Abstraction has 609 states and 763 transitions. [2022-11-16 12:07:45,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:07:45,835 INFO L276 IsEmpty]: Start isEmpty. Operand 609 states and 763 transitions. [2022-11-16 12:07:45,836 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-16 12:07:45,836 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:45,837 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:45,837 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 12:07:45,837 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:45,838 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:45,838 INFO L85 PathProgramCache]: Analyzing trace with hash 663311179, now seen corresponding path program 1 times [2022-11-16 12:07:45,838 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:45,838 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [128059147] [2022-11-16 12:07:45,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:45,839 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:45,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-16 12:07:45,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 12:07:45,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:45,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-16 12:07:45,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:45,951 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 12:07:45,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:45,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [128059147] [2022-11-16 12:07:45,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [128059147] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:45,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:07:45,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:07:45,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1940408243] [2022-11-16 12:07:45,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:45,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:45,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:45,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:45,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:07:45,954 INFO L87 Difference]: Start difference. First operand 609 states and 763 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 12:07:46,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:46,513 INFO L93 Difference]: Finished difference Result 1817 states and 2376 transitions. [2022-11-16 12:07:46,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:07:46,514 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 54 [2022-11-16 12:07:46,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:46,521 INFO L225 Difference]: With dead ends: 1817 [2022-11-16 12:07:46,522 INFO L226 Difference]: Without dead ends: 1215 [2022-11-16 12:07:46,525 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-16 12:07:46,525 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 335 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 343 mSolverCounterSat, 111 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 454 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 111 IncrementalHoareTripleChecker+Valid, 343 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:46,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [338 Valid, 176 Invalid, 454 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [111 Valid, 343 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 12:07:46,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1215 states. [2022-11-16 12:07:46,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1215 to 1203. [2022-11-16 12:07:46,669 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1203 states, 904 states have (on average 1.2234513274336283) internal successors, (1106), 965 states have internal predecessors, (1106), 154 states have call successors, (154), 142 states have call predecessors, (154), 144 states have return successors, (257), 150 states have call predecessors, (257), 154 states have call successors, (257) [2022-11-16 12:07:46,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1203 states to 1203 states and 1517 transitions. [2022-11-16 12:07:46,679 INFO L78 Accepts]: Start accepts. Automaton has 1203 states and 1517 transitions. Word has length 54 [2022-11-16 12:07:46,680 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:46,680 INFO L495 AbstractCegarLoop]: Abstraction has 1203 states and 1517 transitions. [2022-11-16 12:07:46,680 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 12:07:46,680 INFO L276 IsEmpty]: Start isEmpty. Operand 1203 states and 1517 transitions. [2022-11-16 12:07:46,683 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-16 12:07:46,683 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:46,683 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:46,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 12:07:46,683 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:46,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:46,684 INFO L85 PathProgramCache]: Analyzing trace with hash 740773105, now seen corresponding path program 1 times [2022-11-16 12:07:46,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:46,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1052459959] [2022-11-16 12:07:46,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:46,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:46,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 12:07:46,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-16 12:07:46,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-16 12:07:46,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:46,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-16 12:07:46,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:46,982 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 12:07:46,982 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:46,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1052459959] [2022-11-16 12:07:46,982 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1052459959] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:07:46,982 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [129371707] [2022-11-16 12:07:46,983 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:46,983 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:46,983 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:07:46,987 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:07:47,004 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 12:07:47,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:47,107 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-16 12:07:47,119 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:07:47,392 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:07:47,392 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:07:47,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [129371707] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:47,392 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:07:47,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-11-16 12:07:47,393 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186475843] [2022-11-16 12:07:47,393 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:47,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 12:07:47,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:47,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:07:47,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=42, Invalid=264, Unknown=0, NotChecked=0, Total=306 [2022-11-16 12:07:47,395 INFO L87 Difference]: Start difference. First operand 1203 states and 1517 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 12:07:47,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:47,686 INFO L93 Difference]: Finished difference Result 2357 states and 2985 transitions. [2022-11-16 12:07:47,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:07:47,687 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2022-11-16 12:07:47,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:47,696 INFO L225 Difference]: With dead ends: 2357 [2022-11-16 12:07:47,696 INFO L226 Difference]: Without dead ends: 1161 [2022-11-16 12:07:47,700 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-16 12:07:47,703 INFO L413 NwaCegarLoop]: 187 mSDtfsCounter, 79 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 541 SdHoareTripleChecker+Invalid, 121 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:47,703 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 541 Invalid, 121 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 12:07:47,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1161 states. [2022-11-16 12:07:47,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1161 to 1157. [2022-11-16 12:07:47,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1157 states, 868 states have (on average 1.2085253456221199) internal successors, (1049), 927 states have internal predecessors, (1049), 150 states have call successors, (150), 138 states have call predecessors, (150), 138 states have return successors, (224), 144 states have call predecessors, (224), 150 states have call successors, (224) [2022-11-16 12:07:47,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1157 states to 1157 states and 1423 transitions. [2022-11-16 12:07:47,824 INFO L78 Accepts]: Start accepts. Automaton has 1157 states and 1423 transitions. Word has length 58 [2022-11-16 12:07:47,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:47,825 INFO L495 AbstractCegarLoop]: Abstraction has 1157 states and 1423 transitions. [2022-11-16 12:07:47,825 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 12:07:47,825 INFO L276 IsEmpty]: Start isEmpty. Operand 1157 states and 1423 transitions. [2022-11-16 12:07:47,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-16 12:07:47,831 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:47,831 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:47,844 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 12:07:48,037 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:48,038 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:48,038 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:48,038 INFO L85 PathProgramCache]: Analyzing trace with hash 2065692327, now seen corresponding path program 1 times [2022-11-16 12:07:48,038 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:48,038 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861300131] [2022-11-16 12:07:48,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:48,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:48,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 12:07:48,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,260 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 12:07:48,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 12:07:48,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:48,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-16 12:07:48,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-16 12:07:48,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-16 12:07:48,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:07:48,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-16 12:07:48,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,344 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-16 12:07:48,344 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:48,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861300131] [2022-11-16 12:07:48,344 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861300131] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:07:48,344 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2047936819] [2022-11-16 12:07:48,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:48,345 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:48,345 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:07:48,346 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:07:48,353 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 12:07:48,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:48,479 INFO L263 TraceCheckSpWp]: Trace formula consists of 466 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-16 12:07:48,482 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:07:48,599 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 12:07:48,599 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:07:48,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2047936819] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:48,599 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:07:48,599 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 10 [2022-11-16 12:07:48,600 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [716957418] [2022-11-16 12:07:48,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:48,600 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:07:48,600 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:48,601 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:07:48,601 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-16 12:07:48,601 INFO L87 Difference]: Start difference. First operand 1157 states and 1423 transitions. Second operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 12:07:48,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:48,968 INFO L93 Difference]: Finished difference Result 3043 states and 3934 transitions. [2022-11-16 12:07:48,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:07:48,969 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 96 [2022-11-16 12:07:48,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:48,982 INFO L225 Difference]: With dead ends: 3043 [2022-11-16 12:07:48,982 INFO L226 Difference]: Without dead ends: 2137 [2022-11-16 12:07:48,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 111 SyntacticMatches, 3 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-11-16 12:07:48,988 INFO L413 NwaCegarLoop]: 197 mSDtfsCounter, 179 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 182 SdHoareTripleChecker+Valid, 751 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:48,989 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [182 Valid, 751 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 12:07:48,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2137 states. [2022-11-16 12:07:49,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2137 to 1785. [2022-11-16 12:07:49,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1785 states, 1336 states have (on average 1.2050898203592815) internal successors, (1610), 1427 states have internal predecessors, (1610), 234 states have call successors, (234), 198 states have call predecessors, (234), 214 states have return successors, (391), 224 states have call predecessors, (391), 234 states have call successors, (391) [2022-11-16 12:07:49,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1785 states to 1785 states and 2235 transitions. [2022-11-16 12:07:49,212 INFO L78 Accepts]: Start accepts. Automaton has 1785 states and 2235 transitions. Word has length 96 [2022-11-16 12:07:49,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:49,214 INFO L495 AbstractCegarLoop]: Abstraction has 1785 states and 2235 transitions. [2022-11-16 12:07:49,214 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 12:07:49,215 INFO L276 IsEmpty]: Start isEmpty. Operand 1785 states and 2235 transitions. [2022-11-16 12:07:49,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-16 12:07:49,223 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:07:49,223 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:49,236 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 12:07:49,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:49,430 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:07:49,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:07:49,431 INFO L85 PathProgramCache]: Analyzing trace with hash 260253993, now seen corresponding path program 1 times [2022-11-16 12:07:49,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:07:49,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1839738324] [2022-11-16 12:07:49,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:49,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:07:49,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 12:07:49,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 12:07:49,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 12:07:49,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 12:07:49,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-16 12:07:49,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2022-11-16 12:07:49,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,631 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-16 12:07:49,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:07:49,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2022-11-16 12:07:49,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,643 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2022-11-16 12:07:49,643 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:07:49,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1839738324] [2022-11-16 12:07:49,644 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1839738324] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:07:49,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1439679949] [2022-11-16 12:07:49,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:07:49,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:49,645 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:07:49,646 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:07:49,676 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 12:07:49,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:07:49,795 INFO L263 TraceCheckSpWp]: Trace formula consists of 467 conjuncts, 5 conjunts are in the unsatisfiable core [2022-11-16 12:07:49,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:07:49,858 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-16 12:07:49,858 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:07:49,859 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1439679949] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:07:49,859 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:07:49,859 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2022-11-16 12:07:49,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [982478482] [2022-11-16 12:07:49,859 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:07:49,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 12:07:49,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:07:49,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:07:49,861 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2022-11-16 12:07:49,862 INFO L87 Difference]: Start difference. First operand 1785 states and 2235 transitions. Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 12:07:49,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:07:49,997 INFO L93 Difference]: Finished difference Result 2505 states and 3119 transitions. [2022-11-16 12:07:49,998 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:07:49,998 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 96 [2022-11-16 12:07:49,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:07:49,999 INFO L225 Difference]: With dead ends: 2505 [2022-11-16 12:07:50,000 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 12:07:50,007 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=146, Unknown=0, NotChecked=0, Total=182 [2022-11-16 12:07:50,008 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 33 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 371 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:07:50,008 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 371 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:07:50,009 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 12:07:50,009 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 12:07:50,010 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:07:50,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 12:07:50,010 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2022-11-16 12:07:50,011 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:07:50,011 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 12:07:50,011 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-11-16 12:07:50,011 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 12:07:50,011 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 12:07:50,015 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 12:07:50,027 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 12:07:50,222 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:07:50,225 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 12:07:57,269 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 383 390) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2))) [2022-11-16 12:07:57,269 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 383 390) no Hoare annotation was computed. [2022-11-16 12:07:57,270 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 383 390) no Hoare annotation was computed. [2022-11-16 12:07:57,270 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 298 304) no Hoare annotation was computed. [2022-11-16 12:07:57,270 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 298 304) the Hoare annotation is: true [2022-11-16 12:07:57,270 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 84 95) the Hoare annotation is: (let ((.cse1 (not (= ~pumpRunning~0 0))) (.cse3 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (<= 2 ~waterLevel~0)))) (and (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse2) (or (not (= ~waterLevel~0 1)) .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse0 .cse2 .cse4 (= 0 ~systemActive~0)))) [2022-11-16 12:07:57,270 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2022-11-16 12:07:57,271 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2022-11-16 12:07:57,271 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 906 935) no Hoare annotation was computed. [2022-11-16 12:07:57,271 INFO L899 garLoopResultBuilder]: For program point L927(line 927) no Hoare annotation was computed. [2022-11-16 12:07:57,271 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 906 935) the Hoare annotation is: true [2022-11-16 12:07:57,271 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2022-11-16 12:07:57,272 INFO L902 garLoopResultBuilder]: At program point L920-1(lines 920 924) the Hoare annotation is: true [2022-11-16 12:07:57,272 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2022-11-16 12:07:57,272 INFO L902 garLoopResultBuilder]: At program point L916-2(lines 916 930) the Hoare annotation is: true [2022-11-16 12:07:57,272 INFO L902 garLoopResultBuilder]: At program point L912(line 912) the Hoare annotation is: true [2022-11-16 12:07:57,272 INFO L899 garLoopResultBuilder]: For program point L912-1(line 912) no Hoare annotation was computed. [2022-11-16 12:07:57,272 INFO L902 garLoopResultBuilder]: At program point L931(lines 906 935) the Hoare annotation is: true [2022-11-16 12:07:57,273 INFO L895 garLoopResultBuilder]: At program point L481(lines 466 484) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse4 .cse5 .cse1) (or .cse0 .cse6 .cse2 .cse3))) [2022-11-16 12:07:57,273 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2022-11-16 12:07:57,273 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse0) (or .cse6 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6))) [2022-11-16 12:07:57,274 INFO L895 garLoopResultBuilder]: At program point L407(lines 402 410) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse7 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3) .cse4) (or .cse0 (<= 2 ~waterLevel~0) .cse4 .cse5) (or .cse6 .cse7 .cse5) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse4 (= ~waterLevel~0 1)) (or .cse0 .cse1 .cse6) (or .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2) (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 .cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) .cse7 .cse5))) [2022-11-16 12:07:57,274 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 274 297) no Hoare annotation was computed. [2022-11-16 12:07:57,274 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2022-11-16 12:07:57,274 INFO L895 garLoopResultBuilder]: At program point L156(lines 151 159) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 |old(~waterLevel~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6) (or .cse6 .cse3 .cse4 .cse5))) [2022-11-16 12:07:57,275 INFO L895 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-11-16 12:07:57,275 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0)) (.cse3 (not (<= 2 |old(~waterLevel~0)|))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (<= 1 |old(~waterLevel~0)|))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse0 .cse6 .cse2 .cse3) (or .cse4 .cse5 .cse1))) [2022-11-16 12:07:57,275 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0)) (.cse1 (= ~pumpRunning~0 0))) (let ((.cse2 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse1 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 1))) (.cse10 (= ~waterLevel~0 1)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and .cse6 (not .cse3))) (.cse11 (not (<= 1 |old(~waterLevel~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse4) (or .cse8 .cse7 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse0 .cse4) (or .cse5 .cse9 .cse0 .cse10) (or .cse5 .cse1 .cse11 .cse0) (or .cse5 .cse9 .cse7 .cse10) (or .cse5 .cse1 .cse8 .cse11 .cse7)))) [2022-11-16 12:07:57,276 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2022-11-16 12:07:57,276 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 196) the Hoare annotation is: (let ((.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (not (<= 1 |old(~waterLevel~0)|))) (.cse0 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0)) (.cse2 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse4 .cse0) (or .cse5 .cse1 .cse2))) [2022-11-16 12:07:57,276 INFO L895 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse7 (= 0 ~systemActive~0))) (let ((.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse10 (not .cse7))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse2 (and .cse8 .cse9 (= ~waterLevel~0 1) .cse10)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse8 .cse9 (<= 2 ~waterLevel~0) .cse10)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse4) (or .cse0 .cse3 .cse5 .cse6) (or .cse0 .cse4 .cse5 .cse6) (or .cse3 .cse5 .cse7 .cse6) (or .cse4 (and .cse8 .cse9) .cse7 .cse6))))) [2022-11-16 12:07:57,276 INFO L895 garLoopResultBuilder]: At program point L351-1(lines 332 356) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0))) (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse11 (not .cse4)) (.cse2 (= ~pumpRunning~0 0))) (let ((.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= |timeShift_isLowWaterSensorDry_#res#1| 0) .cse2 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse1 .cse2 (= ~waterLevel~0 1) .cse11)) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and (<= 2 ~waterLevel~0) .cse11)) (.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse5 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse9) (or .cse6 .cse10 .cse9 .cse5) (or .cse10 .cse9 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse0) (or .cse6 .cse10 .cse0 .cse5))))) [2022-11-16 12:07:57,277 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2022-11-16 12:07:57,277 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2022-11-16 12:07:57,277 INFO L899 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2022-11-16 12:07:57,277 INFO L899 garLoopResultBuilder]: For program point L278-1(lines 277 296) no Hoare annotation was computed. [2022-11-16 12:07:57,277 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 348) no Hoare annotation was computed. [2022-11-16 12:07:57,278 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 353) no Hoare annotation was computed. [2022-11-16 12:07:57,278 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 274 297) the Hoare annotation is: (let ((.cse9 (<= 2 ~waterLevel~0))) (let ((.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse9)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (= 0 ~systemActive~0)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4)) (or .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse6 .cse8) (or .cse0 .cse2 (and .cse3 .cse9) .cse8) (or .cse5 .cse2 .cse7 .cse8) (or .cse0 .cse1 .cse6 .cse4) (or .cse0 .cse3 (not (<= 1 |old(~waterLevel~0)|)) .cse6)))) [2022-11-16 12:07:57,278 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2022-11-16 12:07:57,278 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 184) no Hoare annotation was computed. [2022-11-16 12:07:57,278 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 274 297) no Hoare annotation was computed. [2022-11-16 12:07:57,278 INFO L895 garLoopResultBuilder]: At program point L171-1(lines 163 187) the Hoare annotation is: (let ((.cse16 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse8 (= 0 ~systemActive~0))) (let ((.cse0 (not (<= 1 ~methaneLevelCritical~0))) (.cse14 (and .cse16 .cse11 (not .cse8))) (.cse2 (= |timeShift_isLowWaterSensorDry_#res#1| 0)) (.cse3 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse4 (<= 1 |timeShift_isLowWaterLevel_#res#1|)) (.cse5 (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|)) (.cse6 (<= 1 ~waterLevel~0)) (.cse7 (= |timeShift_isLowWaterLevel_~tmp~6#1| 0)) (.cse9 (not (<= 2 |old(~waterLevel~0)|))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse12 (not (= |old(~waterLevel~0)| 1))) (.cse1 (= ~pumpRunning~0 0)) (.cse13 (= ~waterLevel~0 1)) (.cse15 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1) (and .cse2 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 .cse9) (or .cse10 .cse11 .cse0 .cse9) (or .cse10 .cse12 .cse0 .cse13) (or .cse10 .cse1 (not (<= 1 |old(~waterLevel~0)|)) .cse0) (or .cse10 .cse14 .cse15 (and .cse1 .cse16 .cse11) .cse9) (or .cse14 .cse15 (and .cse2 .cse1 .cse16 .cse3 .cse4 .cse5 .cse6 .cse7) .cse8 .cse9) (or .cse10 .cse12 (and .cse1 .cse16 .cse13) .cse15)))) [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 96 104) the Hoare annotation is: true [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 221 227) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 217) no Hoare annotation was computed. [2022-11-16 12:07:57,279 INFO L895 garLoopResultBuilder]: At program point L259(lines 210 260) the Hoare annotation is: false [2022-11-16 12:07:57,279 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-16 12:07:57,280 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-16 12:07:57,280 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-16 12:07:57,280 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2022-11-16 12:07:57,280 INFO L895 garLoopResultBuilder]: At program point L247-2(lines 241 254) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse3 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)) (and .cse5 .cse2 .cse3 .cse4))) [2022-11-16 12:07:57,280 INFO L902 garLoopResultBuilder]: At program point L974(lines 967 976) the Hoare annotation is: true [2022-11-16 12:07:57,280 INFO L895 garLoopResultBuilder]: At program point L491(line 491) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (not (= 0 ~systemActive~0)))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1 .cse2) (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1 .cse2))) [2022-11-16 12:07:57,280 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2022-11-16 12:07:57,280 INFO L899 garLoopResultBuilder]: For program point L231-1(lines 231 237) no Hoare annotation was computed. [2022-11-16 12:07:57,281 INFO L895 garLoopResultBuilder]: At program point L900(lines 895 903) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:07:57,281 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 12:07:57,281 INFO L895 garLoopResultBuilder]: At program point L256(lines 211 258) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse3 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)))) [2022-11-16 12:07:57,281 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse3 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)))) [2022-11-16 12:07:57,281 INFO L895 garLoopResultBuilder]: At program point L892(lines 888 894) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:07:57,281 INFO L899 garLoopResultBuilder]: For program point L987(lines 987 994) no Hoare annotation was computed. [2022-11-16 12:07:57,281 INFO L899 garLoopResultBuilder]: For program point L987-2(lines 987 994) no Hoare annotation was computed. [2022-11-16 12:07:57,282 INFO L902 garLoopResultBuilder]: At program point L996(lines 977 999) the Hoare annotation is: true [2022-11-16 12:07:57,282 INFO L895 garLoopResultBuilder]: At program point L885(lines 881 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:07:57,282 INFO L899 garLoopResultBuilder]: For program point L212(lines 211 258) no Hoare annotation was computed. [2022-11-16 12:07:57,282 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 254) no Hoare annotation was computed. [2022-11-16 12:07:57,283 INFO L895 garLoopResultBuilder]: At program point L497(lines 485 499) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse2 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse2 (= ~waterLevel~0 1)))) [2022-11-16 12:07:57,283 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse2 (<= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse2 .cse3 (not (= 0 ~systemActive~0))) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse3 (<= 1 ~waterLevel~0)) (and .cse0 .cse1 .cse3 (= ~waterLevel~0 1)))) [2022-11-16 12:07:57,283 INFO L899 garLoopResultBuilder]: For program point L489(lines 489 495) no Hoare annotation was computed. [2022-11-16 12:07:57,283 INFO L899 garLoopResultBuilder]: For program point L489-1(lines 489 495) no Hoare annotation was computed. [2022-11-16 12:07:57,283 INFO L902 garLoopResultBuilder]: At program point L262(lines 201 266) the Hoare annotation is: true [2022-11-16 12:07:57,284 INFO L895 garLoopResultBuilder]: At program point L964(lines 960 966) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:07:57,284 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 306 330) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (not (<= 1 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-16 12:07:57,284 INFO L895 garLoopResultBuilder]: At program point L320(line 320) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0)) (.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse5 (not .cse3))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (<= 1 ~waterLevel~0)) (not (= ~methaneLevelCritical~0 0)) .cse3 (and .cse4 .cse5))))) [2022-11-16 12:07:57,284 INFO L899 garLoopResultBuilder]: For program point L314(lines 314 322) no Hoare annotation was computed. [2022-11-16 12:07:57,284 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 327) no Hoare annotation was computed. [2022-11-16 12:07:57,285 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2022-11-16 12:07:57,285 INFO L895 garLoopResultBuilder]: At program point L362(lines 357 364) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-16 12:07:57,285 INFO L895 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-16 12:07:57,285 INFO L899 garLoopResultBuilder]: For program point L325-1(lines 306 330) no Hoare annotation was computed. [2022-11-16 12:07:57,285 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 306 330) no Hoare annotation was computed. [2022-11-16 12:07:57,286 INFO L899 garLoopResultBuilder]: For program point L373(lines 373 379) no Hoare annotation was computed. [2022-11-16 12:07:57,286 INFO L895 garLoopResultBuilder]: At program point L373-2(lines 366 382) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) (and (= ~pumpRunning~0 0) .cse2 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) .cse3) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3))) [2022-11-16 12:07:57,286 INFO L895 garLoopResultBuilder]: At program point L146(lines 137 150) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= ~waterLevel~0 1))) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or .cse4 .cse0 (and .cse1 .cse5) .cse2 .cse3) (or .cse4 .cse0 .cse6 .cse3 .cse5) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse6 .cse3))) [2022-11-16 12:07:57,286 INFO L895 garLoopResultBuilder]: At program point L462(lines 447 465) the Hoare annotation is: (let ((.cse8 (= ~pumpRunning~0 0))) (let ((.cse1 (not (<= 2 ~waterLevel~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8)) (.cse5 (not (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse7 (and .cse8 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse6 .cse7 .cse4) (or .cse0 .cse1 .cse6 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse7 .cse4)))) [2022-11-16 12:07:57,287 INFO L895 garLoopResultBuilder]: At program point L398(lines 391 401) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse4 (= 0 ~systemActive~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) (and .cse2 .cse3) .cse4) (or .cse0 .cse1 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (and .cse2 .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|))))) [2022-11-16 12:07:57,287 INFO L895 garLoopResultBuilder]: At program point L396(line 396) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (<= 1 ~waterLevel~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) .cse3) (or .cse0 .cse1 .cse2 (not (<= 1 ~methaneLevelCritical~0)) .cse3))) [2022-11-16 12:07:57,287 INFO L899 garLoopResultBuilder]: For program point L396-1(line 396) no Hoare annotation was computed. [2022-11-16 12:07:57,287 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 460) no Hoare annotation was computed. [2022-11-16 12:07:57,288 INFO L899 garLoopResultBuilder]: For program point L456-2(lines 456 460) no Hoare annotation was computed. [2022-11-16 12:07:57,288 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2022-11-16 12:07:57,288 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2022-11-16 12:07:57,288 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 72 83) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse3 (= ~waterLevel~0 1)) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse5 .cse2 (= 0 ~systemActive~0) .cse6) (or .cse0 .cse5 .cse4 .cse6) (or .cse0 .cse5 .cse2 .cse6))) [2022-11-16 12:07:57,292 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:07:57,294 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 12:07:57,329 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 12:07:57 BoogieIcfgContainer [2022-11-16 12:07:57,329 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 12:07:57,330 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 12:07:57,330 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 12:07:57,330 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 12:07:57,331 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:07:41" (3/4) ... [2022-11-16 12:07:57,334 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 12:07:57,350 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-16 12:07:57,351 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 12:07:57,351 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 12:07:57,351 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 12:07:57,351 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 12:07:57,351 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 12:07:57,352 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:07:57,352 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 12:07:57,359 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 52 nodes and edges [2022-11-16 12:07:57,362 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-16 12:07:57,363 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-16 12:07:57,363 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 12:07:57,364 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 12:07:57,364 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 12:07:57,365 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 12:07:57,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-16 12:07:57,393 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-16 12:07:57,395 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) [2022-11-16 12:07:57,397 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((2 <= waterLevel && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) [2022-11-16 12:07:57,398 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1)) || !(methaneLevelCritical == 0)) [2022-11-16 12:07:57,399 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) [2022-11-16 12:07:57,399 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 12:07:57,399 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 12:07:57,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-16 12:07:57,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-16 12:07:57,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) [2022-11-16 12:07:57,400 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 12:07:57,401 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-16 12:07:57,401 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) [2022-11-16 12:07:57,450 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/witness.graphml [2022-11-16 12:07:57,451 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 12:07:57,451 INFO L158 Benchmark]: Toolchain (without parser) took 17066.69ms. Allocated memory was 113.2MB in the beginning and 257.9MB in the end (delta: 144.7MB). Free memory was 71.8MB in the beginning and 212.9MB in the end (delta: -141.1MB). Peak memory consumption was 3.2MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,451 INFO L158 Benchmark]: CDTParser took 0.36ms. Allocated memory is still 113.2MB. Free memory is still 89.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 12:07:57,452 INFO L158 Benchmark]: CACSL2BoogieTranslator took 566.40ms. Allocated memory is still 113.2MB. Free memory was 71.6MB in the beginning and 77.5MB in the end (delta: -5.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,452 INFO L158 Benchmark]: Boogie Procedure Inliner took 59.53ms. Allocated memory is still 113.2MB. Free memory was 77.5MB in the beginning and 74.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,453 INFO L158 Benchmark]: Boogie Preprocessor took 67.93ms. Allocated memory is still 113.2MB. Free memory was 74.9MB in the beginning and 73.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,453 INFO L158 Benchmark]: RCFGBuilder took 739.27ms. Allocated memory is still 113.2MB. Free memory was 72.8MB in the beginning and 53.8MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,454 INFO L158 Benchmark]: TraceAbstraction took 15503.89ms. Allocated memory was 113.2MB in the beginning and 257.9MB in the end (delta: 144.7MB). Free memory was 52.9MB in the beginning and 219.2MB in the end (delta: -166.3MB). Peak memory consumption was 107.9MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,455 INFO L158 Benchmark]: Witness Printer took 120.59ms. Allocated memory is still 257.9MB. Free memory was 219.2MB in the beginning and 212.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-16 12:07:57,457 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.36ms. Allocated memory is still 113.2MB. Free memory is still 89.6MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 566.40ms. Allocated memory is still 113.2MB. Free memory was 71.6MB in the beginning and 77.5MB in the end (delta: -5.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 59.53ms. Allocated memory is still 113.2MB. Free memory was 77.5MB in the beginning and 74.9MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 67.93ms. Allocated memory is still 113.2MB. Free memory was 74.9MB in the beginning and 73.3MB in the end (delta: 1.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 739.27ms. Allocated memory is still 113.2MB. Free memory was 72.8MB in the beginning and 53.8MB in the end (delta: 19.0MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 15503.89ms. Allocated memory was 113.2MB in the beginning and 257.9MB in the end (delta: 144.7MB). Free memory was 52.9MB in the beginning and 219.2MB in the end (delta: -166.3MB). Peak memory consumption was 107.9MB. Max. memory is 16.1GB. * Witness Printer took 120.59ms. Allocated memory is still 257.9MB. Free memory was 219.2MB in the beginning and 212.9MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 15.4s, OverallIterations: 11, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1422 SdHoareTripleChecker+Valid, 1.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1400 mSDsluCounter, 3544 SdHoareTripleChecker+Invalid, 1.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2432 mSDsCounter, 313 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1618 IncrementalHoareTripleChecker+Invalid, 1931 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 313 mSolverCounterUnsat, 1112 mSDtfsCounter, 1618 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 426 GetRequests, 333 SyntacticMatches, 3 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1785occurred in iteration=10, InterpolantAutomatonStates: 76, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.9s AutomataMinimizationTime, 11 MinimizatonAttempts, 450 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 3373 PreInvPairs, 3758 NumberOfFragments, 2458 HoareAnnotationTreeSize, 3373 FomulaSimplifications, 662 FormulaSimplificationTreeSizeReduction, 0.8s HoareSimplificationTime, 45 FomulaSimplificationsInter, 16048 FormulaSimplificationTreeSizeReductionInter, 6.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 805 NumberOfCodeBlocks, 805 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 791 ConstructedInterpolants, 0 QuantifiedInterpolants, 1372 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1308 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 14 InterpolantComputations, 11 PerfectInterpolantSequences, 129/135 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel)))) && (((((2 <= waterLevel && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel == 1) && !(0 == systemActive))) || !(1 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || (2 <= waterLevel && !(0 == systemActive))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 210]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && splverifierCounter == 0) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive))) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 1 <= waterLevel)) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 895]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: (((((((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || ((((((\result == 0 && pumpRunning == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((((!(\old(pumpRunning) == 0) || ((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp == 0) && 2 <= waterLevel)) || !(2 <= \old(waterLevel)))) && ((((((tmp == 0 && 2 <= waterLevel) && !(0 == systemActive)) || !(methaneLevelCritical == 0)) || (((((((\result == 0 && pumpRunning == 0) && tmp == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || ((pumpRunning == 0 && tmp == 0) && waterLevel == 1)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp) && methaneLevelCritical <= \result)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && 2 <= waterLevel) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && splverifierCounter == 0) && 1 <= waterLevel)) || (((pumpRunning == 0 && methaneLevelCritical == 0) && splverifierCounter == 0) && waterLevel == 1) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(methaneLevelCritical == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((((((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methaneLevelCritical == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((!(1 <= methaneLevelCritical) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: (((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical))) && (((!(methaneLevelCritical == 0) || (pumpRunning == \old(pumpRunning) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(1 <= methaneLevelCritical)) && (((!(1 <= methaneLevelCritical) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && (((!(methaneLevelCritical == 0) || ((pumpRunning == \old(pumpRunning) && \result == 0) && 1 <= waterLevel)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || (pumpRunning == 0 && \result == 1)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || 0 == systemActive) || \result == 1)) && ((((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || 0 == systemActive) - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || (pumpRunning == 0 && \result == 0)) || !(1 <= methaneLevelCritical)) && (((!(\old(pumpRunning) == 0) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((!(methaneLevelCritical == 0) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 <= methaneLevelCritical)) || waterLevel == 1)) && ((!(\old(pumpRunning) == 0) || !(1 <= \old(waterLevel))) || !(methaneLevelCritical == 0))) && ((((!(1 <= methaneLevelCritical) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || (((((((\result == 0 && pumpRunning == 0) && \result == 0) && 1 <= tmp) && 1 <= \result) && 1 <= tmp___0) && 1 <= waterLevel) && tmp == 0)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(2 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) || 0 == systemActive)) && ((((!(waterLevel == 1) || !(\old(pumpRunning) == 0)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) && ((((!(\old(pumpRunning) == 0) || !(1 <= waterLevel)) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= \result)) - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-16 12:07:57,520 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_51772c31-af09-4515-b239-6e7cf30e68fe/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE