./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 69f20c6619059452dea710c235d91f0e8ca980fcacc48c7e37668ab8a6397c50 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 11:26:15,959 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 11:26:15,962 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 11:26:15,999 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 11:26:16,000 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 11:26:16,001 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 11:26:16,003 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 11:26:16,005 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 11:26:16,007 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 11:26:16,009 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 11:26:16,010 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 11:26:16,011 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 11:26:16,012 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 11:26:16,013 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 11:26:16,014 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 11:26:16,016 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 11:26:16,017 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 11:26:16,018 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 11:26:16,020 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 11:26:16,022 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 11:26:16,024 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 11:26:16,029 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 11:26:16,030 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 11:26:16,031 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 11:26:16,036 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 11:26:16,037 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 11:26:16,037 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 11:26:16,038 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 11:26:16,039 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 11:26:16,040 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 11:26:16,041 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 11:26:16,042 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 11:26:16,054 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 11:26:16,055 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 11:26:16,058 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 11:26:16,058 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 11:26:16,059 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 11:26:16,059 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 11:26:16,060 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 11:26:16,061 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 11:26:16,062 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 11:26:16,063 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-16 11:26:16,090 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 11:26:16,090 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 11:26:16,091 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 11:26:16,091 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 11:26:16,092 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 11:26:16,092 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 11:26:16,093 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 11:26:16,093 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 11:26:16,093 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 11:26:16,094 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 11:26:16,094 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 11:26:16,094 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 11:26:16,094 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 11:26:16,095 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 11:26:16,095 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 11:26:16,095 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 11:26:16,096 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 11:26:16,096 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 11:26:16,096 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 11:26:16,096 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 11:26:16,097 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 11:26:16,097 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 11:26:16,097 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 11:26:16,097 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 11:26:16,098 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:26:16,098 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 11:26:16,098 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 11:26:16,099 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 11:26:16,099 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 11:26:16,099 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 11:26:16,099 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 11:26:16,100 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 11:26:16,100 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 11:26:16,100 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 69f20c6619059452dea710c235d91f0e8ca980fcacc48c7e37668ab8a6397c50 [2022-11-16 11:26:16,390 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 11:26:16,430 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 11:26:16,433 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 11:26:16,435 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 11:26:16,436 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 11:26:16,437 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c [2022-11-16 11:26:16,536 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/data/9110bc38d/805dc152a6494e4f88faeef17c371494/FLAGb2f993c76 [2022-11-16 11:26:17,282 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 11:26:17,283 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c [2022-11-16 11:26:17,301 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/data/9110bc38d/805dc152a6494e4f88faeef17c371494/FLAGb2f993c76 [2022-11-16 11:26:17,315 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/data/9110bc38d/805dc152a6494e4f88faeef17c371494 [2022-11-16 11:26:17,318 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 11:26:17,320 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 11:26:17,324 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 11:26:17,324 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 11:26:17,329 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 11:26:17,330 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,331 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@704f5cb8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17, skipping insertion in model container [2022-11-16 11:26:17,332 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,342 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 11:26:17,386 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:26:17,693 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c[11292,11305] [2022-11-16 11:26:17,755 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:26:17,773 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 11:26:17,831 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/sv-benchmarks/c/product-lines/minepump_spec2_product45.cil.c[11292,11305] [2022-11-16 11:26:17,858 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:26:17,876 INFO L208 MainTranslator]: Completed translation [2022-11-16 11:26:17,877 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17 WrapperNode [2022-11-16 11:26:17,877 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 11:26:17,878 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 11:26:17,878 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 11:26:17,879 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 11:26:17,890 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,905 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,943 INFO L138 Inliner]: procedures = 55, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 246 [2022-11-16 11:26:17,943 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 11:26:17,944 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 11:26:17,944 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 11:26:17,945 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 11:26:17,955 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,956 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,972 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,972 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:17,991 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:18,004 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:18,006 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:18,011 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:18,013 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 11:26:18,014 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 11:26:18,015 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 11:26:18,018 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 11:26:18,019 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (1/1) ... [2022-11-16 11:26:18,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:26:18,037 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:26:18,051 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 11:26:18,069 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 11:26:18,102 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 11:26:18,103 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 11:26:18,103 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 11:26:18,104 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 11:26:18,104 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 11:26:18,104 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 11:26:18,104 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 11:26:18,110 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 11:26:18,110 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 11:26:18,111 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 11:26:18,111 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 11:26:18,111 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:26:18,111 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:26:18,111 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-16 11:26:18,112 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-16 11:26:18,112 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 11:26:18,112 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 11:26:18,112 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 11:26:18,112 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 11:26:18,112 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 11:26:18,204 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 11:26:18,211 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 11:26:18,691 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 11:26:18,701 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 11:26:18,701 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 11:26:18,704 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:26:18 BoogieIcfgContainer [2022-11-16 11:26:18,704 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 11:26:18,707 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 11:26:18,707 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 11:26:18,722 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 11:26:18,723 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 11:26:17" (1/3) ... [2022-11-16 11:26:18,724 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42380668 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:26:18, skipping insertion in model container [2022-11-16 11:26:18,724 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:26:17" (2/3) ... [2022-11-16 11:26:18,725 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@42380668 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:26:18, skipping insertion in model container [2022-11-16 11:26:18,725 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:26:18" (3/3) ... [2022-11-16 11:26:18,727 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product45.cil.c [2022-11-16 11:26:18,751 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 11:26:18,752 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 11:26:18,824 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 11:26:18,831 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6c010982, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 11:26:18,832 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 11:26:18,837 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-16 11:26:18,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-16 11:26:18,848 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:18,848 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:18,849 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:18,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:18,855 INFO L85 PathProgramCache]: Analyzing trace with hash 1869668402, now seen corresponding path program 1 times [2022-11-16 11:26:18,865 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:18,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [198487239] [2022-11-16 11:26:18,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:18,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:19,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 11:26:19,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,205 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:19,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:19,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [198487239] [2022-11-16 11:26:19,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [198487239] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:19,218 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:19,218 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:26:19,221 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1007431937] [2022-11-16 11:26:19,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:19,230 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 11:26:19,232 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:19,275 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 11:26:19,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:26:19,280 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:19,362 INFO L93 Difference]: Finished difference Result 181 states and 246 transitions. [2022-11-16 11:26:19,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 11:26:19,365 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-16 11:26:19,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:19,386 INFO L225 Difference]: With dead ends: 181 [2022-11-16 11:26:19,386 INFO L226 Difference]: Without dead ends: 86 [2022-11-16 11:26:19,391 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:26:19,396 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:19,398 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:26:19,421 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-11-16 11:26:19,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-11-16 11:26:19,464 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-16 11:26:19,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-11-16 11:26:19,478 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-11-16 11:26:19,479 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:19,479 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-11-16 11:26:19,480 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,480 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-11-16 11:26:19,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-16 11:26:19,487 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:19,488 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:19,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 11:26:19,488 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:19,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:19,491 INFO L85 PathProgramCache]: Analyzing trace with hash 224653099, now seen corresponding path program 1 times [2022-11-16 11:26:19,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:19,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560855776] [2022-11-16 11:26:19,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:19,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:19,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-16 11:26:19,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:19,706 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:19,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560855776] [2022-11-16 11:26:19,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560855776] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:19,707 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:19,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:26:19,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [919319093] [2022-11-16 11:26:19,708 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:19,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:26:19,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:19,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:26:19,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:26:19,711 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:19,752 INFO L93 Difference]: Finished difference Result 137 states and 177 transitions. [2022-11-16 11:26:19,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:26:19,753 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-16 11:26:19,753 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:19,755 INFO L225 Difference]: With dead ends: 137 [2022-11-16 11:26:19,755 INFO L226 Difference]: Without dead ends: 77 [2022-11-16 11:26:19,756 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:26:19,758 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 12 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:19,758 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 180 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:26:19,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-16 11:26:19,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-16 11:26:19,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 11:26:19,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-11-16 11:26:19,770 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-11-16 11:26:19,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:19,770 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-11-16 11:26:19,771 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,771 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-11-16 11:26:19,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-16 11:26:19,772 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:19,772 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:19,773 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 11:26:19,773 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:19,774 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:19,774 INFO L85 PathProgramCache]: Analyzing trace with hash 13787135, now seen corresponding path program 1 times [2022-11-16 11:26:19,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:19,774 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1307875625] [2022-11-16 11:26:19,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:19,775 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:19,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:26:19,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:19,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:19,882 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:19,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1307875625] [2022-11-16 11:26:19,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1307875625] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:19,883 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:19,883 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:26:19,883 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1102492112] [2022-11-16 11:26:19,884 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:19,884 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:26:19,884 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:19,885 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:26:19,885 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:26:19,886 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:19,904 INFO L93 Difference]: Finished difference Result 146 states and 191 transitions. [2022-11-16 11:26:19,905 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:26:19,905 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-16 11:26:19,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:19,907 INFO L225 Difference]: With dead ends: 146 [2022-11-16 11:26:19,907 INFO L226 Difference]: Without dead ends: 77 [2022-11-16 11:26:19,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:26:19,909 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 80 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:19,910 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 97 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:26:19,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-16 11:26:19,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-16 11:26:19,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 11:26:19,922 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 98 transitions. [2022-11-16 11:26:19,922 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 98 transitions. Word has length 30 [2022-11-16 11:26:19,923 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:19,923 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 98 transitions. [2022-11-16 11:26:19,923 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:26:19,924 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 98 transitions. [2022-11-16 11:26:19,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-16 11:26:19,925 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:19,925 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:19,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 11:26:19,926 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:19,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:19,927 INFO L85 PathProgramCache]: Analyzing trace with hash 689914158, now seen corresponding path program 1 times [2022-11-16 11:26:19,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:19,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2099183191] [2022-11-16 11:26:19,928 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:19,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:19,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:26:20,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:26:20,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-16 11:26:20,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,142 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:20,143 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:20,144 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2099183191] [2022-11-16 11:26:20,144 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2099183191] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:20,144 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:20,145 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:26:20,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2018893793] [2022-11-16 11:26:20,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:20,147 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:26:20,147 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:20,148 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:26:20,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:26:20,148 INFO L87 Difference]: Start difference. First operand 77 states and 98 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-16 11:26:20,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:20,399 INFO L93 Difference]: Finished difference Result 226 states and 288 transitions. [2022-11-16 11:26:20,400 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:26:20,400 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-11-16 11:26:20,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:20,402 INFO L225 Difference]: With dead ends: 226 [2022-11-16 11:26:20,402 INFO L226 Difference]: Without dead ends: 157 [2022-11-16 11:26:20,403 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:26:20,404 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 181 mSDsluCounter, 168 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 183 SdHoareTripleChecker+Valid, 282 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:20,405 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [183 Valid, 282 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:26:20,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 157 states. [2022-11-16 11:26:20,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 157 to 151. [2022-11-16 11:26:20,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 114 states have (on average 1.2719298245614035) internal successors, (145), 122 states have internal predecessors, (145), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-16 11:26:20,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 186 transitions. [2022-11-16 11:26:20,429 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 186 transitions. Word has length 40 [2022-11-16 11:26:20,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:20,430 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 186 transitions. [2022-11-16 11:26:20,430 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-16 11:26:20,430 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 186 transitions. [2022-11-16 11:26:20,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-16 11:26:20,431 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:20,432 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:20,432 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 11:26:20,432 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:20,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:20,433 INFO L85 PathProgramCache]: Analyzing trace with hash 603540022, now seen corresponding path program 1 times [2022-11-16 11:26:20,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:20,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329925536] [2022-11-16 11:26:20,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:20,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:20,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:26:20,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:20,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-16 11:26:20,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:20,673 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:20,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:20,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329925536] [2022-11-16 11:26:20,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329925536] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:20,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:20,676 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:26:20,682 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [486467902] [2022-11-16 11:26:20,682 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:20,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:26:20,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:20,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:26:20,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:26:20,684 INFO L87 Difference]: Start difference. First operand 151 states and 186 transitions. Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 11:26:21,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:21,122 INFO L93 Difference]: Finished difference Result 437 states and 546 transitions. [2022-11-16 11:26:21,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-16 11:26:21,123 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-16 11:26:21,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:21,131 INFO L225 Difference]: With dead ends: 437 [2022-11-16 11:26:21,131 INFO L226 Difference]: Without dead ends: 294 [2022-11-16 11:26:21,134 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-16 11:26:21,141 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 152 mSDsluCounter, 326 mSDsCounter, 0 mSdLazyCounter, 239 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 410 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 239 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:21,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 410 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 239 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:26:21,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2022-11-16 11:26:21,224 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 280. [2022-11-16 11:26:21,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 280 states, 207 states have (on average 1.2318840579710144) internal successors, (255), 222 states have internal predecessors, (255), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-11-16 11:26:21,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 280 states to 280 states and 339 transitions. [2022-11-16 11:26:21,231 INFO L78 Accepts]: Start accepts. Automaton has 280 states and 339 transitions. Word has length 46 [2022-11-16 11:26:21,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:21,233 INFO L495 AbstractCegarLoop]: Abstraction has 280 states and 339 transitions. [2022-11-16 11:26:21,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 3 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 11:26:21,234 INFO L276 IsEmpty]: Start isEmpty. Operand 280 states and 339 transitions. [2022-11-16 11:26:21,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-16 11:26:21,241 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:21,244 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:21,245 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 11:26:21,245 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:21,245 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:21,245 INFO L85 PathProgramCache]: Analyzing trace with hash 735697106, now seen corresponding path program 1 times [2022-11-16 11:26:21,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:21,246 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501390336] [2022-11-16 11:26:21,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:21,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:21,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:21,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:26:21,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:21,443 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:26:21,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:21,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:21,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:21,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-16 11:26:21,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:21,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:21,471 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:21,471 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501390336] [2022-11-16 11:26:21,471 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501390336] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:21,471 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:21,471 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:26:21,472 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [490331060] [2022-11-16 11:26:21,472 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:21,472 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:26:21,473 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:21,473 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:26:21,473 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:26:21,473 INFO L87 Difference]: Start difference. First operand 280 states and 339 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:26:22,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:22,165 INFO L93 Difference]: Finished difference Result 564 states and 684 transitions. [2022-11-16 11:26:22,166 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-11-16 11:26:22,166 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 50 [2022-11-16 11:26:22,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:22,170 INFO L225 Difference]: With dead ends: 564 [2022-11-16 11:26:22,170 INFO L226 Difference]: Without dead ends: 292 [2022-11-16 11:26:22,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=84, Invalid=188, Unknown=0, NotChecked=0, Total=272 [2022-11-16 11:26:22,178 INFO L413 NwaCegarLoop]: 34 mSDtfsCounter, 186 mSDsluCounter, 104 mSDsCounter, 0 mSdLazyCounter, 450 mSolverCounterSat, 64 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 514 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 64 IncrementalHoareTripleChecker+Valid, 450 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:22,181 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 138 Invalid, 514 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [64 Valid, 450 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 11:26:22,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 292 states. [2022-11-16 11:26:22,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 292 to 278. [2022-11-16 11:26:22,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 205 states have (on average 1.2146341463414634) internal successors, (249), 220 states have internal predecessors, (249), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-11-16 11:26:22,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 333 transitions. [2022-11-16 11:26:22,219 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 333 transitions. Word has length 50 [2022-11-16 11:26:22,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:22,220 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 333 transitions. [2022-11-16 11:26:22,220 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 1 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) [2022-11-16 11:26:22,221 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 333 transitions. [2022-11-16 11:26:22,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 11:26:22,222 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:22,222 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:22,222 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 11:26:22,223 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:22,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:22,223 INFO L85 PathProgramCache]: Analyzing trace with hash 25989529, now seen corresponding path program 1 times [2022-11-16 11:26:22,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:22,224 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206005653] [2022-11-16 11:26:22,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:22,224 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:22,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:26:22,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:26:22,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:22,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:22,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,422 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-16 11:26:22,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:22,430 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:26:22,430 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:22,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206005653] [2022-11-16 11:26:22,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206005653] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:22,431 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:22,431 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:26:22,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [963275243] [2022-11-16 11:26:22,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:22,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:26:22,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:22,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:26:22,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:26:22,437 INFO L87 Difference]: Start difference. First operand 278 states and 333 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 11:26:22,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:22,870 INFO L93 Difference]: Finished difference Result 566 states and 691 transitions. [2022-11-16 11:26:22,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:26:22,870 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-16 11:26:22,872 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:22,878 INFO L225 Difference]: With dead ends: 566 [2022-11-16 11:26:22,878 INFO L226 Difference]: Without dead ends: 296 [2022-11-16 11:26:22,879 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:26:22,880 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 128 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 376 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 376 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:22,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 140 Invalid, 427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 376 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:26:22,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-11-16 11:26:22,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 284. [2022-11-16 11:26:22,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 211 states have (on average 1.2085308056872037) internal successors, (255), 226 states have internal predecessors, (255), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-11-16 11:26:22,926 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 339 transitions. [2022-11-16 11:26:22,926 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 339 transitions. Word has length 60 [2022-11-16 11:26:22,927 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:22,927 INFO L495 AbstractCegarLoop]: Abstraction has 284 states and 339 transitions. [2022-11-16 11:26:22,927 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 11:26:22,927 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 339 transitions. [2022-11-16 11:26:22,928 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 11:26:22,929 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:22,929 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:22,929 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 11:26:22,929 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:22,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:22,930 INFO L85 PathProgramCache]: Analyzing trace with hash 727589403, now seen corresponding path program 1 times [2022-11-16 11:26:22,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:22,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1860165293] [2022-11-16 11:26:22,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:22,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:22,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:26:23,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:26:23,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:23,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:23,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-16 11:26:23,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,149 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:26:23,149 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:23,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1860165293] [2022-11-16 11:26:23,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1860165293] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:23,150 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:23,150 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:26:23,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1887214349] [2022-11-16 11:26:23,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:23,151 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:26:23,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:23,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:26:23,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:26:23,153 INFO L87 Difference]: Start difference. First operand 284 states and 339 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:26:23,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:23,569 INFO L93 Difference]: Finished difference Result 584 states and 711 transitions. [2022-11-16 11:26:23,569 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:26:23,569 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-16 11:26:23,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:23,572 INFO L225 Difference]: With dead ends: 584 [2022-11-16 11:26:23,572 INFO L226 Difference]: Without dead ends: 308 [2022-11-16 11:26:23,573 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=56, Invalid=100, Unknown=0, NotChecked=0, Total=156 [2022-11-16 11:26:23,574 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 213 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 296 mSolverCounterSat, 78 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 215 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 296 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:23,575 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [215 Valid, 116 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 296 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:26:23,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2022-11-16 11:26:23,602 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 288. [2022-11-16 11:26:23,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 288 states, 215 states have (on average 1.2046511627906977) internal successors, (259), 230 states have internal predecessors, (259), 36 states have call successors, (36), 30 states have call predecessors, (36), 36 states have return successors, (48), 38 states have call predecessors, (48), 36 states have call successors, (48) [2022-11-16 11:26:23,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 288 states to 288 states and 343 transitions. [2022-11-16 11:26:23,605 INFO L78 Accepts]: Start accepts. Automaton has 288 states and 343 transitions. Word has length 60 [2022-11-16 11:26:23,606 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:23,606 INFO L495 AbstractCegarLoop]: Abstraction has 288 states and 343 transitions. [2022-11-16 11:26:23,606 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:26:23,606 INFO L276 IsEmpty]: Start isEmpty. Operand 288 states and 343 transitions. [2022-11-16 11:26:23,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 11:26:23,607 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:23,608 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:23,608 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 11:26:23,608 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:23,609 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:23,609 INFO L85 PathProgramCache]: Analyzing trace with hash 655202845, now seen corresponding path program 1 times [2022-11-16 11:26:23,609 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:23,609 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [207233793] [2022-11-16 11:26:23,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:23,610 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:23,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:26:23,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 11:26:23,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:23,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,772 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:23,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-16 11:26:23,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:23,777 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:26:23,777 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:23,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [207233793] [2022-11-16 11:26:23,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [207233793] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:23,778 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:26:23,778 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:26:23,778 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394876408] [2022-11-16 11:26:23,779 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:23,779 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:26:23,779 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:23,780 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:26:23,780 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:26:23,780 INFO L87 Difference]: Start difference. First operand 288 states and 343 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-16 11:26:24,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:24,308 INFO L93 Difference]: Finished difference Result 790 states and 993 transitions. [2022-11-16 11:26:24,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 11:26:24,309 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2022-11-16 11:26:24,309 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:24,312 INFO L225 Difference]: With dead ends: 790 [2022-11-16 11:26:24,313 INFO L226 Difference]: Without dead ends: 510 [2022-11-16 11:26:24,314 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:26:24,315 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 312 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 353 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 314 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 353 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:24,315 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [314 Valid, 151 Invalid, 467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 353 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 11:26:24,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 510 states. [2022-11-16 11:26:24,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 510 to 508. [2022-11-16 11:26:24,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 508 states, 379 states have (on average 1.1978891820580475) internal successors, (454), 402 states have internal predecessors, (454), 66 states have call successors, (66), 60 states have call predecessors, (66), 62 states have return successors, (101), 66 states have call predecessors, (101), 66 states have call successors, (101) [2022-11-16 11:26:24,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 508 states to 508 states and 621 transitions. [2022-11-16 11:26:24,369 INFO L78 Accepts]: Start accepts. Automaton has 508 states and 621 transitions. Word has length 60 [2022-11-16 11:26:24,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:24,369 INFO L495 AbstractCegarLoop]: Abstraction has 508 states and 621 transitions. [2022-11-16 11:26:24,370 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 4 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-16 11:26:24,370 INFO L276 IsEmpty]: Start isEmpty. Operand 508 states and 621 transitions. [2022-11-16 11:26:24,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-11-16 11:26:24,371 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:24,371 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:24,372 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-16 11:26:24,372 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:24,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:24,372 INFO L85 PathProgramCache]: Analyzing trace with hash 815870135, now seen corresponding path program 1 times [2022-11-16 11:26:24,373 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:24,373 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [767343211] [2022-11-16 11:26:24,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:24,373 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:24,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 11:26:24,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-16 11:26:24,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-16 11:26:24,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:24,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:24,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-11-16 11:26:24,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,679 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 11:26:24,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:24,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [767343211] [2022-11-16 11:26:24,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [767343211] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:26:24,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [726675134] [2022-11-16 11:26:24,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:24,681 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:26:24,682 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:26:24,685 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:26:24,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 11:26:24,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:24,823 INFO L263 TraceCheckSpWp]: Trace formula consists of 391 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-16 11:26:24,829 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:26:25,188 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:26:25,188 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:26:25,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [726675134] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:25,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:26:25,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2022-11-16 11:26:25,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1479926755] [2022-11-16 11:26:25,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:25,189 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:26:25,189 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:25,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:26:25,190 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-11-16 11:26:25,190 INFO L87 Difference]: Start difference. First operand 508 states and 621 transitions. Second operand has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:26:25,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:25,388 INFO L93 Difference]: Finished difference Result 986 states and 1210 transitions. [2022-11-16 11:26:25,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:26:25,389 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 64 [2022-11-16 11:26:25,389 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:25,392 INFO L225 Difference]: With dead ends: 986 [2022-11-16 11:26:25,392 INFO L226 Difference]: Without dead ends: 486 [2022-11-16 11:26:25,394 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=52, Invalid=368, Unknown=0, NotChecked=0, Total=420 [2022-11-16 11:26:25,394 INFO L413 NwaCegarLoop]: 173 mSDtfsCounter, 65 mSDsluCounter, 471 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 69 SdHoareTripleChecker+Valid, 644 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:25,395 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [69 Valid, 644 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:26:25,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 486 states. [2022-11-16 11:26:25,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 486 to 484. [2022-11-16 11:26:25,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 484 states, 360 states have (on average 1.1805555555555556) internal successors, (425), 382 states have internal predecessors, (425), 64 states have call successors, (64), 58 states have call predecessors, (64), 59 states have return successors, (88), 63 states have call predecessors, (88), 64 states have call successors, (88) [2022-11-16 11:26:25,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 484 states to 484 states and 577 transitions. [2022-11-16 11:26:25,443 INFO L78 Accepts]: Start accepts. Automaton has 484 states and 577 transitions. Word has length 64 [2022-11-16 11:26:25,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:25,443 INFO L495 AbstractCegarLoop]: Abstraction has 484 states and 577 transitions. [2022-11-16 11:26:25,443 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.375) internal successors, (51), 6 states have internal predecessors, (51), 3 states have call successors, (7), 3 states have call predecessors, (7), 5 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:26:25,444 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 577 transitions. [2022-11-16 11:26:25,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-16 11:26:25,450 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:26:25,450 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:25,462 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 11:26:25,656 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-16 11:26:25,657 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:26:25,657 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:26:25,657 INFO L85 PathProgramCache]: Analyzing trace with hash 255377162, now seen corresponding path program 1 times [2022-11-16 11:26:25,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:26:25,658 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1423502384] [2022-11-16 11:26:25,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:25,658 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:26:25,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 11:26:25,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 11:26:25,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:26:25,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:26:25,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:25,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-16 11:26:25,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-16 11:26:25,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2022-11-16 11:26:25,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:25,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:26:25,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:26,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-16 11:26:26,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:26,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:26:26,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:26,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-16 11:26:26,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:26,026 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-11-16 11:26:26,026 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:26:26,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1423502384] [2022-11-16 11:26:26,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1423502384] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:26:26,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1887185804] [2022-11-16 11:26:26,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:26:26,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:26:26,027 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:26:26,029 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:26:26,054 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 11:26:26,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:26:26,179 INFO L263 TraceCheckSpWp]: Trace formula consists of 496 conjuncts, 9 conjunts are in the unsatisfiable core [2022-11-16 11:26:26,183 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:26:26,376 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 35 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-16 11:26:26,376 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:26:26,377 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1887185804] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:26:26,377 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:26:26,377 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2022-11-16 11:26:26,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1026238488] [2022-11-16 11:26:26,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:26:26,378 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:26:26,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:26:26,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:26:26,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=294, Unknown=0, NotChecked=0, Total=342 [2022-11-16 11:26:26,380 INFO L87 Difference]: Start difference. First operand 484 states and 577 transitions. Second operand has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-16 11:26:26,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:26:26,542 INFO L93 Difference]: Finished difference Result 827 states and 996 transitions. [2022-11-16 11:26:26,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:26:26,543 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) Word has length 108 [2022-11-16 11:26:26,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:26:26,544 INFO L225 Difference]: With dead ends: 827 [2022-11-16 11:26:26,544 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 11:26:26,547 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2022-11-16 11:26:26,547 INFO L413 NwaCegarLoop]: 172 mSDtfsCounter, 70 mSDsluCounter, 599 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 771 SdHoareTripleChecker+Invalid, 103 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:26:26,548 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 771 Invalid, 103 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:26:26,548 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 11:26:26,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 11:26:26,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 11:26:26,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 11:26:26,550 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 108 [2022-11-16 11:26:26,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:26:26,551 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 11:26:26,551 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.625) internal successors, (77), 6 states have internal predecessors, (77), 3 states have call successors, (13), 3 states have call predecessors, (13), 5 states have return successors, (12), 5 states have call predecessors, (12), 3 states have call successors, (12) [2022-11-16 11:26:26,551 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 11:26:26,551 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 11:26:26,555 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 11:26:26,567 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 11:26:26,761 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-16 11:26:26,763 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 11:26:31,152 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 566 572) no Hoare annotation was computed. [2022-11-16 11:26:31,153 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 566 572) the Hoare annotation is: true [2022-11-16 11:26:31,153 INFO L899 garLoopResultBuilder]: For program point L830-1(lines 826 837) no Hoare annotation was computed. [2022-11-16 11:26:31,153 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 826 837) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0))) (and (or (not (= |old(~methaneLevelCritical~0)| 0)) .cse0 .cse1) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 (not (<= 1 |old(~methaneLevelCritical~0)|))))) [2022-11-16 11:26:31,153 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 826 837) no Hoare annotation was computed. [2022-11-16 11:26:31,154 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 838 846) the Hoare annotation is: true [2022-11-16 11:26:31,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 838 846) no Hoare annotation was computed. [2022-11-16 11:26:31,154 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 838 846) no Hoare annotation was computed. [2022-11-16 11:26:31,154 INFO L895 garLoopResultBuilder]: At program point L944(line 944) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-11-16 11:26:31,155 INFO L895 garLoopResultBuilder]: At program point L655(lines 650 657) the Hoare annotation is: (let ((.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse2) (or .cse3 .cse1 .cse4) (or .cse0 .cse1 .cse4))) [2022-11-16 11:26:31,155 INFO L899 garLoopResultBuilder]: For program point L944-1(line 944) no Hoare annotation was computed. [2022-11-16 11:26:31,155 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 542 565) no Hoare annotation was computed. [2022-11-16 11:26:31,156 INFO L895 garLoopResultBuilder]: At program point L614(line 614) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))) (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,156 INFO L899 garLoopResultBuilder]: For program point L420(line 420) no Hoare annotation was computed. [2022-11-16 11:26:31,156 INFO L895 garLoopResultBuilder]: At program point L606(line 606) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,156 INFO L899 garLoopResultBuilder]: For program point L606-1(line 606) no Hoare annotation was computed. [2022-11-16 11:26:31,157 INFO L895 garLoopResultBuilder]: At program point L619(line 619) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= ~pumpRunning~0 0))) (.cse4 (not (= |old(~waterLevel~0)| 1))) (.cse5 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse5) (or .cse4 .cse0 .cse1 .cse5) (or .cse0 .cse6 .cse3 .cse7) (or .cse0 .cse6 .cse1 .cse7))) [2022-11-16 11:26:31,157 INFO L895 garLoopResultBuilder]: At program point L619-1(lines 600 624) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse8 .cse9 .cse2 .cse6 .cse5) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse8 .cse9)) (or .cse0 .cse2 .cse6 .cse5 .cse7))) [2022-11-16 11:26:31,157 INFO L899 garLoopResultBuilder]: For program point L553-1(lines 553 559) no Hoare annotation was computed. [2022-11-16 11:26:31,157 INFO L895 garLoopResultBuilder]: At program point L421(lines 416 423) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,158 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 960) no Hoare annotation was computed. [2022-11-16 11:26:31,158 INFO L899 garLoopResultBuilder]: For program point L946(lines 946 963) no Hoare annotation was computed. [2022-11-16 11:26:31,158 INFO L895 garLoopResultBuilder]: At program point L946-1(lines 938 966) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse12 (= 1 ~systemActive~0)) (.cse10 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse13 (= ~methaneLevelCritical~0 0))) (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|))) (.cse5 (not .cse13)) (.cse8 (and .cse13 .cse6 .cse12 .cse10)) (.cse2 (not .cse12)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= ~pumpRunning~0 0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse3 .cse7) (or .cse0 .cse2 .cse5 .cse8 .cse7) (or (and .cse9 .cse10) .cse2 (and .cse11 .cse10) .cse5 .cse8) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse9) .cse2 .cse3 (and .cse11 .cse9))))) [2022-11-16 11:26:31,158 INFO L899 garLoopResultBuilder]: For program point L806(lines 806 810) no Hoare annotation was computed. [2022-11-16 11:26:31,159 INFO L895 garLoopResultBuilder]: At program point L806-2(lines 802 813) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= |old(~pumpRunning~0)| 0))))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1) (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,159 INFO L895 garLoopResultBuilder]: At program point L674(lines 669 677) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 (= ~waterLevel~0 1)) (or .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse3 (= ~pumpRunning~0 0)) (.cse4 (= |timeShift_isPumpRunning_#res#1| 0))) (or (and (<= 1 |timeShift_processEnvironment_~tmp~5#1|) .cse3 .cse4) .cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4) .cse2)) (or .cse1 (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,159 INFO L899 garLoopResultBuilder]: For program point L546-1(lines 545 564) no Hoare annotation was computed. [2022-11-16 11:26:31,159 INFO L899 garLoopResultBuilder]: For program point L608(lines 608 616) no Hoare annotation was computed. [2022-11-16 11:26:31,160 INFO L899 garLoopResultBuilder]: For program point L604(lines 604 621) no Hoare annotation was computed. [2022-11-16 11:26:31,160 INFO L899 garLoopResultBuilder]: For program point L951(lines 951 957) no Hoare annotation was computed. [2022-11-16 11:26:31,160 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 542 565) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse6 .cse2 .cse5) (or .cse6 .cse2 .cse3) (or .cse2 .cse7 .cse3 .cse8) (or .cse2 .cse7 .cse5 .cse8))) [2022-11-16 11:26:31,160 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 542 565) no Hoare annotation was computed. [2022-11-16 11:26:31,161 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 420) no Hoare annotation was computed. [2022-11-16 11:26:31,161 INFO L899 garLoopResultBuilder]: For program point L448(line 448) no Hoare annotation was computed. [2022-11-16 11:26:31,161 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 427 456) no Hoare annotation was computed. [2022-11-16 11:26:31,161 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 427 456) the Hoare annotation is: true [2022-11-16 11:26:31,161 INFO L899 garLoopResultBuilder]: For program point L441(lines 441 445) no Hoare annotation was computed. [2022-11-16 11:26:31,162 INFO L902 garLoopResultBuilder]: At program point L441-1(lines 441 445) the Hoare annotation is: true [2022-11-16 11:26:31,162 INFO L899 garLoopResultBuilder]: For program point L438(line 438) no Hoare annotation was computed. [2022-11-16 11:26:31,162 INFO L902 garLoopResultBuilder]: At program point L437-2(lines 437 451) the Hoare annotation is: true [2022-11-16 11:26:31,162 INFO L902 garLoopResultBuilder]: At program point L433(line 433) the Hoare annotation is: true [2022-11-16 11:26:31,162 INFO L899 garLoopResultBuilder]: For program point L433-1(line 433) no Hoare annotation was computed. [2022-11-16 11:26:31,162 INFO L902 garLoopResultBuilder]: At program point L452(lines 427 456) the Hoare annotation is: true [2022-11-16 11:26:31,163 INFO L895 garLoopResultBuilder]: At program point L766(line 766) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-16 11:26:31,163 INFO L895 garLoopResultBuilder]: At program point L787(lines 744 789) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-16 11:26:31,163 INFO L899 garLoopResultBuilder]: For program point L754(lines 754 760) no Hoare annotation was computed. [2022-11-16 11:26:31,163 INFO L899 garLoopResultBuilder]: For program point L754-1(lines 754 760) no Hoare annotation was computed. [2022-11-16 11:26:31,163 INFO L899 garLoopResultBuilder]: For program point L746(lines 746 750) no Hoare annotation was computed. [2022-11-16 11:26:31,164 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-16 11:26:31,164 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-16 11:26:31,164 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-16 11:26:31,164 INFO L895 garLoopResultBuilder]: At program point L924(lines 919 927) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:26:31,164 INFO L895 garLoopResultBuilder]: At program point L916(lines 912 918) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:26:31,165 INFO L899 garLoopResultBuilder]: For program point L780(lines 780 784) no Hoare annotation was computed. [2022-11-16 11:26:31,165 INFO L895 garLoopResultBuilder]: At program point L780-2(lines 774 785) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (<= 1 ~methaneLevelCritical~0) .cse0 .cse1) (and (= ~methaneLevelCritical~0 0) .cse0 .cse1))) [2022-11-16 11:26:31,165 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 11:26:31,165 INFO L899 garLoopResultBuilder]: For program point L764(lines 764 770) no Hoare annotation was computed. [2022-11-16 11:26:31,165 INFO L899 garLoopResultBuilder]: For program point L764-1(lines 764 770) no Hoare annotation was computed. [2022-11-16 11:26:31,166 INFO L902 garLoopResultBuilder]: At program point L793(lines 734 797) the Hoare annotation is: true [2022-11-16 11:26:31,166 INFO L895 garLoopResultBuilder]: At program point L756(line 756) the Hoare annotation is: (let ((.cse0 (= 1 ~systemActive~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and (= ~methaneLevelCritical~0 0) .cse0 .cse1) (and (= ~pumpRunning~0 0) (<= 1 ~methaneLevelCritical~0) .cse0 .cse1))) [2022-11-16 11:26:31,166 INFO L895 garLoopResultBuilder]: At program point L909(lines 905 911) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:26:31,166 INFO L895 garLoopResultBuilder]: At program point L488(lines 484 490) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:26:31,166 INFO L899 garLoopResultBuilder]: For program point L517(lines 517 524) no Hoare annotation was computed. [2022-11-16 11:26:31,167 INFO L899 garLoopResultBuilder]: For program point L517-2(lines 517 524) no Hoare annotation was computed. [2022-11-16 11:26:31,167 INFO L895 garLoopResultBuilder]: At program point L790(lines 743 791) the Hoare annotation is: false [2022-11-16 11:26:31,167 INFO L902 garLoopResultBuilder]: At program point L501(lines 493 503) the Hoare annotation is: true [2022-11-16 11:26:31,167 INFO L902 garLoopResultBuilder]: At program point L526(lines 507 529) the Hoare annotation is: true [2022-11-16 11:26:31,167 INFO L899 garLoopResultBuilder]: For program point L745(lines 744 789) no Hoare annotation was computed. [2022-11-16 11:26:31,168 INFO L895 garLoopResultBuilder]: At program point L935(lines 930 937) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:26:31,168 INFO L899 garLoopResultBuilder]: For program point L774(lines 774 785) no Hoare annotation was computed. [2022-11-16 11:26:31,168 INFO L899 garLoopResultBuilder]: For program point L818-1(lines 814 825) no Hoare annotation was computed. [2022-11-16 11:26:31,168 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 814 825) no Hoare annotation was computed. [2022-11-16 11:26:31,168 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 814 825) the Hoare annotation is: (let ((.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse4 (= ~waterLevel~0 1)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 2 |old(~waterLevel~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse0 .cse2 .cse6 .cse5 .cse7) (or .cse2 .cse6 .cse3 .cse7))) [2022-11-16 11:26:31,169 INFO L899 garLoopResultBuilder]: For program point L640(lines 640 646) no Hoare annotation was computed. [2022-11-16 11:26:31,169 INFO L895 garLoopResultBuilder]: At program point L638(line 638) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (<= 2 ~waterLevel~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse1 .cse2)) (or .cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2) (not (= ~methaneLevelCritical~0 0))))) [2022-11-16 11:26:31,169 INFO L895 garLoopResultBuilder]: At program point L640-2(lines 633 649) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~6#1|)) (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 .cse3 .cse2))) [2022-11-16 11:26:31,169 INFO L899 garLoopResultBuilder]: For program point L638-1(line 638) no Hoare annotation was computed. [2022-11-16 11:26:31,170 INFO L895 garLoopResultBuilder]: At program point L729(lines 714 732) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0)) (.cse2 (= ~pumpRunning~0 0)) (.cse4 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~0#1| 0)) (.cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~7#1| 0))) (.cse6 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (and (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|))) (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2 .cse4 .cse5 .cse6))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= 1 ~methaneLevelCritical~0)) (and .cse2 .cse3) (and .cse2 .cse4 .cse5 .cse6)))) [2022-11-16 11:26:31,170 INFO L895 garLoopResultBuilder]: At program point L888(lines 879 892) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse3 (and .cse5 (<= 2 ~waterLevel~0))) (.cse4 (and .cse5 (not (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse4)))) [2022-11-16 11:26:31,170 INFO L895 garLoopResultBuilder]: At program point L630(lines 625 632) the Hoare annotation is: (let ((.cse1 (= |old(~pumpRunning~0)| 0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or (not .cse1) .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse0 (<= 2 ~waterLevel~0) .cse2))) [2022-11-16 11:26:31,171 INFO L899 garLoopResultBuilder]: For program point L723(lines 723 727) no Hoare annotation was computed. [2022-11-16 11:26:31,171 INFO L899 garLoopResultBuilder]: For program point L723-2(lines 723 727) no Hoare annotation was computed. [2022-11-16 11:26:31,171 INFO L895 garLoopResultBuilder]: At program point L593(line 593) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0))) (or .cse2 .cse0 .cse1))) [2022-11-16 11:26:31,171 INFO L899 garLoopResultBuilder]: For program point L593-1(lines 574 598) no Hoare annotation was computed. [2022-11-16 11:26:31,171 INFO L899 garLoopResultBuilder]: For program point L883(lines 883 889) no Hoare annotation was computed. [2022-11-16 11:26:31,172 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 574 598) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-16 11:26:31,172 INFO L895 garLoopResultBuilder]: At program point L588(line 588) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |processEnvironment__wrappee__methaneQuery_~tmp~4#1| 0))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2)) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 .cse2) (not (<= 1 ~methaneLevelCritical~0))))) [2022-11-16 11:26:31,172 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 574 598) no Hoare annotation was computed. [2022-11-16 11:26:31,172 INFO L899 garLoopResultBuilder]: For program point L582(lines 582 590) no Hoare annotation was computed. [2022-11-16 11:26:31,172 INFO L899 garLoopResultBuilder]: For program point L578(lines 578 595) no Hoare annotation was computed. [2022-11-16 11:26:31,173 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 658 668) the Hoare annotation is: true [2022-11-16 11:26:31,173 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 658 668) no Hoare annotation was computed. [2022-11-16 11:26:31,173 INFO L902 garLoopResultBuilder]: At program point L663(line 663) the Hoare annotation is: true [2022-11-16 11:26:31,173 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 658 668) no Hoare annotation was computed. [2022-11-16 11:26:31,173 INFO L899 garLoopResultBuilder]: For program point L663-1(line 663) no Hoare annotation was computed. [2022-11-16 11:26:31,177 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:26:31,180 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 11:26:31,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 11:26:31 BoogieIcfgContainer [2022-11-16 11:26:31,238 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 11:26:31,239 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 11:26:31,239 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 11:26:31,239 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 11:26:31,240 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:26:18" (3/4) ... [2022-11-16 11:26:31,244 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 11:26:31,251 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 11:26:31,251 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 11:26:31,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 11:26:31,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 11:26:31,252 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 11:26:31,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 11:26:31,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:26:31,253 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-16 11:26:31,269 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 50 nodes and edges [2022-11-16 11:26:31,270 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-16 11:26:31,271 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-16 11:26:31,272 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 11:26:31,272 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 11:26:31,273 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:26:31,273 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:26:31,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) [2022-11-16 11:26:31,310 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) [2022-11-16 11:26:31,312 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && tmp == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) [2022-11-16 11:26:31,312 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-16 11:26:31,313 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) [2022-11-16 11:26:31,313 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-16 11:26:31,313 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) [2022-11-16 11:26:31,314 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) [2022-11-16 11:26:31,314 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) [2022-11-16 11:26:31,361 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/witness.graphml [2022-11-16 11:26:31,361 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 11:26:31,362 INFO L158 Benchmark]: Toolchain (without parser) took 14041.86ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 82.4MB in the beginning and 65.3MB in the end (delta: 17.1MB). Peak memory consumption was 107.7MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,362 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 81.8MB. Free memory is still 32.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:26:31,362 INFO L158 Benchmark]: CACSL2BoogieTranslator took 553.34ms. Allocated memory is still 117.4MB. Free memory was 82.1MB in the beginning and 82.0MB in the end (delta: 132.8kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,363 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.27ms. Allocated memory is still 117.4MB. Free memory was 82.0MB in the beginning and 79.6MB in the end (delta: 2.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,363 INFO L158 Benchmark]: Boogie Preprocessor took 69.45ms. Allocated memory is still 117.4MB. Free memory was 79.6MB in the beginning and 77.9MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,364 INFO L158 Benchmark]: RCFGBuilder took 689.83ms. Allocated memory is still 117.4MB. Free memory was 77.9MB in the beginning and 59.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,364 INFO L158 Benchmark]: TraceAbstraction took 12531.31ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 58.3MB in the beginning and 71.6MB in the end (delta: -13.3MB). Peak memory consumption was 91.6MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,365 INFO L158 Benchmark]: Witness Printer took 122.23ms. Allocated memory is still 207.6MB. Free memory was 71.6MB in the beginning and 65.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-16 11:26:31,366 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 81.8MB. Free memory is still 32.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 553.34ms. Allocated memory is still 117.4MB. Free memory was 82.1MB in the beginning and 82.0MB in the end (delta: 132.8kB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.27ms. Allocated memory is still 117.4MB. Free memory was 82.0MB in the beginning and 79.6MB in the end (delta: 2.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 69.45ms. Allocated memory is still 117.4MB. Free memory was 79.6MB in the beginning and 77.9MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 689.83ms. Allocated memory is still 117.4MB. Free memory was 77.9MB in the beginning and 59.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 12531.31ms. Allocated memory was 117.4MB in the beginning and 207.6MB in the end (delta: 90.2MB). Free memory was 58.3MB in the beginning and 71.6MB in the end (delta: -13.3MB). Peak memory consumption was 91.6MB. Max. memory is 16.1GB. * Witness Printer took 122.23ms. Allocated memory is still 207.6MB. Free memory was 71.6MB in the beginning and 65.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 420]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 12.4s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 3.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 4.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1428 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1399 mSDsluCounter, 3049 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2049 mSDsCounter, 419 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2094 IncrementalHoareTripleChecker+Invalid, 2513 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 419 mSolverCounterUnsat, 1000 mSDtfsCounter, 2094 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 372 GetRequests, 267 SyntacticMatches, 0 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 145 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=508occurred in iteration=9, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 70 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 1303 PreInvPairs, 1482 NumberOfFragments, 1485 HoareAnnotationTreeSize, 1303 FomulaSimplifications, 0 FormulaSimplificationTreeSizeReduction, 0.3s HoareSimplificationTime, 43 FomulaSimplificationsInter, 6973 FormulaSimplificationTreeSizeReductionInter, 4.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 741 NumberOfCodeBlocks, 741 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 728 ConstructedInterpolants, 0 QuantifiedInterpolants, 1428 SizeOfPredicates, 6 NumberOfNonLiveVariables, 887 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 89/103 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((1 <= tmp && pumpRunning == 0) && \result == 0) || !(1 == systemActive)) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && \result == 0)) || !(1 <= methaneLevelCritical))) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 938]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0)) || !(2 <= \old(waterLevel)))) && (((((pumpRunning == 0 && tmp == 0) || !(1 == systemActive)) || (pumpRunning == \old(pumpRunning) && tmp == 0)) || !(methaneLevelCritical == 0)) || (((methaneLevelCritical == 0 && 2 <= waterLevel) && 1 == systemActive) && tmp == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0)) - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 744]: Loop Invariant Derived loop invariant: ((methaneLevelCritical == 0 && 1 == systemActive) && splverifierCounter == 0) || (((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 633]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && 2 <= waterLevel) && methaneLevelCritical <= tmp)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 743]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 930]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 427]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 650]: Loop Invariant Derived loop invariant: (((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((pumpRunning == 0 || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 905]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 734]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((!(1 == systemActive) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) && ((!(1 == systemActive) || (pumpRunning == \old(pumpRunning) && !(\old(pumpRunning) == 0))) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 600]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || waterLevel == 1) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || waterLevel == 1)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0))) && ((((1 <= tmp && pumpRunning == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && pumpRunning == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || ((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && 2 <= waterLevel)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 625]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || 2 <= waterLevel) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 912]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: (!(1 == systemActive) || !(1 <= methaneLevelCritical)) && (!(1 == systemActive) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 879]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || \old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0)))) && (((!(1 == systemActive) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || (pumpRunning == 0 && !(\result == 0))) RESULT: Ultimate proved your program to be correct! [2022-11-16 11:26:31,402 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_8f3437e8-0506-4e23-ab69-0b9497196091/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE