./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 12:44:42,145 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 12:44:42,147 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 12:44:42,173 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 12:44:42,176 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 12:44:42,180 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 12:44:42,183 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 12:44:42,187 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 12:44:42,189 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 12:44:42,195 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 12:44:42,199 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 12:44:42,201 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 12:44:42,201 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 12:44:42,204 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 12:44:42,205 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 12:44:42,207 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 12:44:42,209 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 12:44:42,210 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 12:44:42,212 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 12:44:42,218 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 12:44:42,223 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 12:44:42,224 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 12:44:42,225 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 12:44:42,228 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 12:44:42,233 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 12:44:42,233 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 12:44:42,234 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 12:44:42,236 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 12:44:42,236 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 12:44:42,237 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 12:44:42,238 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 12:44:42,239 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 12:44:42,241 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 12:44:42,242 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 12:44:42,244 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 12:44:42,245 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 12:44:42,245 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 12:44:42,246 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 12:44:42,246 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 12:44:42,247 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 12:44:42,247 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 12:44:42,251 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-16 12:44:42,292 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 12:44:42,292 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 12:44:42,292 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 12:44:42,293 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 12:44:42,293 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 12:44:42,293 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 12:44:42,294 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 12:44:42,298 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 12:44:42,298 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 12:44:42,299 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 12:44:42,299 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 12:44:42,300 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 12:44:42,300 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 12:44:42,300 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 12:44:42,300 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 12:44:42,300 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 12:44:42,301 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 12:44:42,301 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 12:44:42,301 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 12:44:42,301 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 12:44:42,301 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 12:44:42,302 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 12:44:42,302 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 12:44:42,302 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 12:44:42,302 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 12:44:42,303 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 12:44:42,303 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 12:44:42,303 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 12:44:42,303 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 12:44:42,303 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 12:44:42,305 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 12:44:42,305 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 12:44:42,305 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 12:44:42,306 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 685bdac90b32b89d64927338575dc6f79737e9f84bb9272d4bfb0c942aa4ae35 [2022-11-16 12:44:42,565 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 12:44:42,586 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 12:44:42,589 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 12:44:42,590 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 12:44:42,591 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 12:44:42,592 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2022-11-16 12:44:42,661 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/data/7985605fe/6dae90a9977441bd8a924f28e61a8752/FLAG59212309d [2022-11-16 12:44:43,207 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 12:44:43,208 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c [2022-11-16 12:44:43,227 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/data/7985605fe/6dae90a9977441bd8a924f28e61a8752/FLAG59212309d [2022-11-16 12:44:43,488 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/data/7985605fe/6dae90a9977441bd8a924f28e61a8752 [2022-11-16 12:44:43,491 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 12:44:43,493 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 12:44:43,497 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 12:44:43,498 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 12:44:43,505 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 12:44:43,506 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:44:43" (1/1) ... [2022-11-16 12:44:43,507 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@42c834d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:43, skipping insertion in model container [2022-11-16 12:44:43,508 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:44:43" (1/1) ... [2022-11-16 12:44:43,515 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 12:44:43,572 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 12:44:43,986 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2022-11-16 12:44:43,997 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:44:44,008 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 12:44:44,114 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/sv-benchmarks/c/product-lines/minepump_spec2_product55.cil.c[19412,19425] [2022-11-16 12:44:44,118 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:44:44,140 INFO L208 MainTranslator]: Completed translation [2022-11-16 12:44:44,141 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44 WrapperNode [2022-11-16 12:44:44,141 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 12:44:44,142 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 12:44:44,143 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 12:44:44,143 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 12:44:44,150 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,174 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,218 INFO L138 Inliner]: procedures = 58, calls = 161, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 282 [2022-11-16 12:44:44,219 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 12:44:44,220 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 12:44:44,220 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 12:44:44,220 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 12:44:44,229 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,229 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,231 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,232 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,237 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,242 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,244 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,246 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,248 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 12:44:44,249 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 12:44:44,249 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 12:44:44,249 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 12:44:44,250 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (1/1) ... [2022-11-16 12:44:44,257 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 12:44:44,269 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:44:44,282 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 12:44:44,297 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 12:44:44,335 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 12:44:44,336 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 12:44:44,336 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 12:44:44,336 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 12:44:44,336 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 12:44:44,336 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 12:44:44,337 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 12:44:44,338 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 12:44:44,339 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 12:44:44,339 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:44:44,339 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:44:44,339 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 12:44:44,340 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 12:44:44,340 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-16 12:44:44,340 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-16 12:44:44,340 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-16 12:44:44,341 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-16 12:44:44,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 12:44:44,341 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 12:44:44,341 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 12:44:44,341 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 12:44:44,342 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 12:44:44,447 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 12:44:44,450 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 12:44:44,886 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 12:44:44,894 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 12:44:44,894 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 12:44:44,896 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:44:44 BoogieIcfgContainer [2022-11-16 12:44:44,896 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 12:44:44,899 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 12:44:44,899 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 12:44:44,905 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 12:44:44,906 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 12:44:43" (1/3) ... [2022-11-16 12:44:44,906 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a12b05f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 12:44:44, skipping insertion in model container [2022-11-16 12:44:44,907 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:44:44" (2/3) ... [2022-11-16 12:44:44,907 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7a12b05f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 12:44:44, skipping insertion in model container [2022-11-16 12:44:44,907 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:44:44" (3/3) ... [2022-11-16 12:44:44,908 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product55.cil.c [2022-11-16 12:44:44,927 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 12:44:44,927 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 12:44:44,980 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 12:44:44,987 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1a29cae6, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 12:44:44,988 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 12:44:44,992 INFO L276 IsEmpty]: Start isEmpty. Operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) [2022-11-16 12:44:45,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-16 12:44:45,003 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:45,004 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:45,004 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:45,010 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:45,010 INFO L85 PathProgramCache]: Analyzing trace with hash -898586634, now seen corresponding path program 1 times [2022-11-16 12:44:45,020 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:45,020 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1508983328] [2022-11-16 12:44:45,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:45,021 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:45,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 12:44:45,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:45,276 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:45,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1508983328] [2022-11-16 12:44:45,277 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1508983328] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:45,277 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:45,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 12:44:45,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1518503203] [2022-11-16 12:44:45,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:45,284 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 12:44:45,284 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:45,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 12:44:45,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 12:44:45,313 INFO L87 Difference]: Start difference. First operand has 106 states, 78 states have (on average 1.3846153846153846) internal successors, (108), 89 states have internal predecessors, (108), 17 states have call successors, (17), 9 states have call predecessors, (17), 9 states have return successors, (17), 12 states have call predecessors, (17), 17 states have call successors, (17) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:45,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:45,349 INFO L93 Difference]: Finished difference Result 203 states and 278 transitions. [2022-11-16 12:44:45,350 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 12:44:45,352 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-16 12:44:45,352 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:45,361 INFO L225 Difference]: With dead ends: 203 [2022-11-16 12:44:45,361 INFO L226 Difference]: Without dead ends: 97 [2022-11-16 12:44:45,365 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 12:44:45,368 INFO L413 NwaCegarLoop]: 136 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 136 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:45,369 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 136 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:44:45,386 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-11-16 12:44:45,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 97. [2022-11-16 12:44:45,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 71 states have (on average 1.323943661971831) internal successors, (94), 81 states have internal predecessors, (94), 17 states have call successors, (17), 9 states have call predecessors, (17), 8 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-16 12:44:45,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 127 transitions. [2022-11-16 12:44:45,416 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 127 transitions. Word has length 25 [2022-11-16 12:44:45,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:45,417 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 127 transitions. [2022-11-16 12:44:45,417 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:45,418 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 127 transitions. [2022-11-16 12:44:45,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-16 12:44:45,421 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:45,421 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:45,421 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 12:44:45,421 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:45,422 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:45,422 INFO L85 PathProgramCache]: Analyzing trace with hash 1844424780, now seen corresponding path program 1 times [2022-11-16 12:44:45,423 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:45,423 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13138786] [2022-11-16 12:44:45,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:45,423 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:45,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-16 12:44:45,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,599 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:45,599 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:45,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13138786] [2022-11-16 12:44:45,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13138786] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:45,600 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:45,600 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:44:45,600 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [843639031] [2022-11-16 12:44:45,600 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:45,601 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 12:44:45,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:45,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:44:45,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:44:45,603 INFO L87 Difference]: Start difference. First operand 97 states and 127 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:45,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:45,624 INFO L93 Difference]: Finished difference Result 155 states and 203 transitions. [2022-11-16 12:44:45,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:44:45,624 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-16 12:44:45,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:45,626 INFO L225 Difference]: With dead ends: 155 [2022-11-16 12:44:45,626 INFO L226 Difference]: Without dead ends: 88 [2022-11-16 12:44:45,627 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:44:45,629 INFO L413 NwaCegarLoop]: 114 mSDtfsCounter, 16 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 207 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:45,629 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 207 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:44:45,630 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-11-16 12:44:45,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 88. [2022-11-16 12:44:45,639 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 65 states have (on average 1.3384615384615384) internal successors, (87), 75 states have internal predecessors, (87), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 9 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-16 12:44:45,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 115 transitions. [2022-11-16 12:44:45,641 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 115 transitions. Word has length 26 [2022-11-16 12:44:45,641 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:45,641 INFO L495 AbstractCegarLoop]: Abstraction has 88 states and 115 transitions. [2022-11-16 12:44:45,642 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:45,642 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 115 transitions. [2022-11-16 12:44:45,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-16 12:44:45,643 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:45,644 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:45,644 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 12:44:45,644 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:45,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:45,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1100480442, now seen corresponding path program 1 times [2022-11-16 12:44:45,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:45,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322707103] [2022-11-16 12:44:45,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:45,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:45,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-16 12:44:45,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:45,868 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:45,868 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:45,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322707103] [2022-11-16 12:44:45,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1322707103] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:45,869 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:45,869 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:44:45,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2133262126] [2022-11-16 12:44:45,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:45,870 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:44:45,870 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:45,871 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:44:45,871 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:44:45,871 INFO L87 Difference]: Start difference. First operand 88 states and 115 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:46,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:46,197 INFO L93 Difference]: Finished difference Result 290 states and 386 transitions. [2022-11-16 12:44:46,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 12:44:46,197 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-16 12:44:46,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:46,202 INFO L225 Difference]: With dead ends: 290 [2022-11-16 12:44:46,202 INFO L226 Difference]: Without dead ends: 210 [2022-11-16 12:44:46,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-16 12:44:46,205 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 238 mSDsluCounter, 399 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 238 SdHoareTripleChecker+Valid, 540 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:46,205 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [238 Valid, 540 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 12:44:46,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 210 states. [2022-11-16 12:44:46,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 210 to 204. [2022-11-16 12:44:46,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 204 states, 149 states have (on average 1.3691275167785235) internal successors, (204), 171 states have internal predecessors, (204), 33 states have call successors, (33), 21 states have call predecessors, (33), 21 states have return successors, (34), 21 states have call predecessors, (34), 33 states have call successors, (34) [2022-11-16 12:44:46,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 271 transitions. [2022-11-16 12:44:46,261 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 271 transitions. Word has length 30 [2022-11-16 12:44:46,261 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:46,261 INFO L495 AbstractCegarLoop]: Abstraction has 204 states and 271 transitions. [2022-11-16 12:44:46,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:46,262 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 271 transitions. [2022-11-16 12:44:46,275 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-11-16 12:44:46,275 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:46,275 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:46,275 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 12:44:46,276 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:46,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:46,277 INFO L85 PathProgramCache]: Analyzing trace with hash -1086931004, now seen corresponding path program 1 times [2022-11-16 12:44:46,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:46,279 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297630821] [2022-11-16 12:44:46,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:46,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:46,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:46,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:46,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:46,505 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:46,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:46,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297630821] [2022-11-16 12:44:46,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297630821] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:46,506 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:46,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:44:46,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377686047] [2022-11-16 12:44:46,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:46,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:44:46,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:46,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:44:46,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:44:46,510 INFO L87 Difference]: Start difference. First operand 204 states and 271 transitions. Second operand has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:46,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:46,654 INFO L93 Difference]: Finished difference Result 594 states and 801 transitions. [2022-11-16 12:44:46,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 12:44:46,654 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2022-11-16 12:44:46,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:46,667 INFO L225 Difference]: With dead ends: 594 [2022-11-16 12:44:46,667 INFO L226 Difference]: Without dead ends: 398 [2022-11-16 12:44:46,672 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2022-11-16 12:44:46,678 INFO L413 NwaCegarLoop]: 126 mSDtfsCounter, 84 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 569 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:46,678 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 569 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 12:44:46,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2022-11-16 12:44:46,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 389. [2022-11-16 12:44:46,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 389 states, 280 states have (on average 1.35) internal successors, (378), 323 states have internal predecessors, (378), 66 states have call successors, (66), 42 states have call predecessors, (66), 42 states have return successors, (71), 42 states have call predecessors, (71), 66 states have call successors, (71) [2022-11-16 12:44:46,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 389 states to 389 states and 515 transitions. [2022-11-16 12:44:46,773 INFO L78 Accepts]: Start accepts. Automaton has 389 states and 515 transitions. Word has length 34 [2022-11-16 12:44:46,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:46,774 INFO L495 AbstractCegarLoop]: Abstraction has 389 states and 515 transitions. [2022-11-16 12:44:46,774 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.166666666666667) internal successors, (31), 4 states have internal predecessors, (31), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 12:44:46,774 INFO L276 IsEmpty]: Start isEmpty. Operand 389 states and 515 transitions. [2022-11-16 12:44:46,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-11-16 12:44:46,782 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:46,783 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:46,783 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 12:44:46,783 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:46,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:46,784 INFO L85 PathProgramCache]: Analyzing trace with hash -2070630656, now seen corresponding path program 1 times [2022-11-16 12:44:46,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:46,784 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [976464916] [2022-11-16 12:44:46,784 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:46,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:46,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:46,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 12:44:46,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:46,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-16 12:44:46,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:46,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:46,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:46,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [976464916] [2022-11-16 12:44:46,929 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [976464916] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:46,929 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:46,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:44:46,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1545482319] [2022-11-16 12:44:46,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:46,933 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:44:46,933 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:46,941 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:44:46,941 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:44:46,941 INFO L87 Difference]: Start difference. First operand 389 states and 515 transitions. Second operand has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 12:44:47,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:47,358 INFO L93 Difference]: Finished difference Result 948 states and 1289 transitions. [2022-11-16 12:44:47,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 12:44:47,359 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 38 [2022-11-16 12:44:47,359 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:47,366 INFO L225 Difference]: With dead ends: 948 [2022-11-16 12:44:47,367 INFO L226 Difference]: Without dead ends: 567 [2022-11-16 12:44:47,370 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-16 12:44:47,375 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 135 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 366 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 406 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:47,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [144 Valid, 146 Invalid, 406 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 366 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 12:44:47,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 567 states. [2022-11-16 12:44:47,464 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 567 to 548. [2022-11-16 12:44:47,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 548 states, 399 states have (on average 1.2857142857142858) internal successors, (513), 436 states have internal predecessors, (513), 80 states have call successors, (80), 68 states have call predecessors, (80), 68 states have return successors, (113), 70 states have call predecessors, (113), 80 states have call successors, (113) [2022-11-16 12:44:47,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 548 states to 548 states and 706 transitions. [2022-11-16 12:44:47,473 INFO L78 Accepts]: Start accepts. Automaton has 548 states and 706 transitions. Word has length 38 [2022-11-16 12:44:47,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:47,475 INFO L495 AbstractCegarLoop]: Abstraction has 548 states and 706 transitions. [2022-11-16 12:44:47,475 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 5.5) internal successors, (33), 5 states have internal predecessors, (33), 1 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-16 12:44:47,475 INFO L276 IsEmpty]: Start isEmpty. Operand 548 states and 706 transitions. [2022-11-16 12:44:47,480 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-16 12:44:47,480 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:47,480 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:47,481 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 12:44:47,481 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:47,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:47,482 INFO L85 PathProgramCache]: Analyzing trace with hash 1021483760, now seen corresponding path program 1 times [2022-11-16 12:44:47,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:47,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [453478285] [2022-11-16 12:44:47,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:47,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:47,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:47,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 12:44:47,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:47,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:47,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:47,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:47,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:47,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-16 12:44:47,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:47,667 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:47,667 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:47,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [453478285] [2022-11-16 12:44:47,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [453478285] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:47,668 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:47,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:44:47,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [824435190] [2022-11-16 12:44:47,668 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:47,669 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 12:44:47,669 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:47,670 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:44:47,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:44:47,670 INFO L87 Difference]: Start difference. First operand 548 states and 706 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:44:48,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:48,150 INFO L93 Difference]: Finished difference Result 1212 states and 1581 transitions. [2022-11-16 12:44:48,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:44:48,151 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-11-16 12:44:48,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:48,157 INFO L225 Difference]: With dead ends: 1212 [2022-11-16 12:44:48,157 INFO L226 Difference]: Without dead ends: 672 [2022-11-16 12:44:48,159 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-16 12:44:48,161 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 142 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 428 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 143 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 428 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:48,165 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [143 Valid, 166 Invalid, 483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 428 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 12:44:48,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-11-16 12:44:48,237 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 658. [2022-11-16 12:44:48,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 658 states, 481 states have (on average 1.2536382536382535) internal successors, (603), 518 states have internal predecessors, (603), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2022-11-16 12:44:48,243 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 658 states to 658 states and 832 transitions. [2022-11-16 12:44:48,245 INFO L78 Accepts]: Start accepts. Automaton has 658 states and 832 transitions. Word has length 53 [2022-11-16 12:44:48,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:48,246 INFO L495 AbstractCegarLoop]: Abstraction has 658 states and 832 transitions. [2022-11-16 12:44:48,246 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:44:48,246 INFO L276 IsEmpty]: Start isEmpty. Operand 658 states and 832 transitions. [2022-11-16 12:44:48,248 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-16 12:44:48,249 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:48,249 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:48,249 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 12:44:48,250 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:48,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:48,250 INFO L85 PathProgramCache]: Analyzing trace with hash 1444185586, now seen corresponding path program 1 times [2022-11-16 12:44:48,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:48,251 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [490813220] [2022-11-16 12:44:48,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:48,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:48,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:48,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 12:44:48,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:48,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:48,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:48,408 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:48,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:48,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-16 12:44:48,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:48,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:48,490 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:48,490 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [490813220] [2022-11-16 12:44:48,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [490813220] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:48,490 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:48,490 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 12:44:48,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792627960] [2022-11-16 12:44:48,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:48,491 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 12:44:48,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:48,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 12:44:48,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-11-16 12:44:48,493 INFO L87 Difference]: Start difference. First operand 658 states and 832 transitions. Second operand has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:44:49,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:49,008 INFO L93 Difference]: Finished difference Result 1354 states and 1773 transitions. [2022-11-16 12:44:49,008 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 12:44:49,009 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-11-16 12:44:49,009 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:49,013 INFO L225 Difference]: With dead ends: 1354 [2022-11-16 12:44:49,013 INFO L226 Difference]: Without dead ends: 704 [2022-11-16 12:44:49,015 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=114, Unknown=0, NotChecked=0, Total=156 [2022-11-16 12:44:49,016 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 198 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 538 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 199 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 607 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 538 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:49,017 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [199 Valid, 141 Invalid, 607 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 538 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 12:44:49,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 704 states. [2022-11-16 12:44:49,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 704 to 666. [2022-11-16 12:44:49,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 666 states, 489 states have (on average 1.2494887525562373) internal successors, (611), 526 states have internal predecessors, (611), 88 states have call successors, (88), 68 states have call predecessors, (88), 88 states have return successors, (141), 94 states have call predecessors, (141), 88 states have call successors, (141) [2022-11-16 12:44:49,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 666 states to 666 states and 840 transitions. [2022-11-16 12:44:49,079 INFO L78 Accepts]: Start accepts. Automaton has 666 states and 840 transitions. Word has length 53 [2022-11-16 12:44:49,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:49,079 INFO L495 AbstractCegarLoop]: Abstraction has 666 states and 840 transitions. [2022-11-16 12:44:49,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.5) internal successors, (44), 6 states have internal predecessors, (44), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 12:44:49,080 INFO L276 IsEmpty]: Start isEmpty. Operand 666 states and 840 transitions. [2022-11-16 12:44:49,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-16 12:44:49,081 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:49,081 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:49,081 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 12:44:49,082 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:49,082 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:49,082 INFO L85 PathProgramCache]: Analyzing trace with hash -361252748, now seen corresponding path program 1 times [2022-11-16 12:44:49,082 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:49,083 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [826958860] [2022-11-16 12:44:49,083 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:49,083 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:49,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:49,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 12:44:49,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:49,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:49,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:49,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:49,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:49,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-16 12:44:49,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:49,207 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:49,207 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:49,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [826958860] [2022-11-16 12:44:49,207 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [826958860] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:49,207 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:49,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:44:49,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251707350] [2022-11-16 12:44:49,208 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:49,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:44:49,209 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:49,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:44:49,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:44:49,209 INFO L87 Difference]: Start difference. First operand 666 states and 840 transitions. Second operand has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 12:44:49,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:49,791 INFO L93 Difference]: Finished difference Result 1970 states and 2593 transitions. [2022-11-16 12:44:49,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:44:49,792 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 53 [2022-11-16 12:44:49,793 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:49,801 INFO L225 Difference]: With dead ends: 1970 [2022-11-16 12:44:49,801 INFO L226 Difference]: Without dead ends: 1312 [2022-11-16 12:44:49,804 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=92, Unknown=0, NotChecked=0, Total=132 [2022-11-16 12:44:49,804 INFO L413 NwaCegarLoop]: 61 mSDtfsCounter, 362 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 416 mSolverCounterSat, 131 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 365 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 547 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 131 IncrementalHoareTripleChecker+Valid, 416 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:49,805 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [365 Valid, 180 Invalid, 547 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [131 Valid, 416 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 12:44:49,807 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1312 states. [2022-11-16 12:44:49,911 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1312 to 1300. [2022-11-16 12:44:49,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1300 states, 957 states have (on average 1.219435736677116) internal successors, (1167), 1018 states have internal predecessors, (1167), 174 states have call successors, (174), 158 states have call predecessors, (174), 168 states have return successors, (305), 174 states have call predecessors, (305), 174 states have call successors, (305) [2022-11-16 12:44:49,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1300 states to 1300 states and 1646 transitions. [2022-11-16 12:44:49,922 INFO L78 Accepts]: Start accepts. Automaton has 1300 states and 1646 transitions. Word has length 53 [2022-11-16 12:44:49,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:49,922 INFO L495 AbstractCegarLoop]: Abstraction has 1300 states and 1646 transitions. [2022-11-16 12:44:49,922 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.333333333333333) internal successors, (44), 4 states have internal predecessors, (44), 3 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-16 12:44:49,923 INFO L276 IsEmpty]: Start isEmpty. Operand 1300 states and 1646 transitions. [2022-11-16 12:44:49,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-16 12:44:49,926 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:49,926 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:49,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 12:44:49,926 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:49,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:49,927 INFO L85 PathProgramCache]: Analyzing trace with hash 1451480602, now seen corresponding path program 1 times [2022-11-16 12:44:49,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:49,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [989241974] [2022-11-16 12:44:49,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:49,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:49,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 12:44:50,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,009 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-16 12:44:50,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-16 12:44:50,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:50,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-11-16 12:44:50,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:50,033 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:50,033 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:50,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [989241974] [2022-11-16 12:44:50,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [989241974] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:50,034 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:44:50,034 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:44:50,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131475060] [2022-11-16 12:44:50,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:50,035 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 12:44:50,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:50,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:44:50,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:44:50,037 INFO L87 Difference]: Start difference. First operand 1300 states and 1646 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 12:44:50,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:50,828 INFO L93 Difference]: Finished difference Result 2414 states and 3206 transitions. [2022-11-16 12:44:50,829 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-16 12:44:50,829 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 57 [2022-11-16 12:44:50,830 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:50,842 INFO L225 Difference]: With dead ends: 2414 [2022-11-16 12:44:50,843 INFO L226 Difference]: Without dead ends: 2412 [2022-11-16 12:44:50,844 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2022-11-16 12:44:50,847 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 505 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 370 mSolverCounterSat, 231 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 507 SdHoareTripleChecker+Valid, 129 SdHoareTripleChecker+Invalid, 601 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 231 IncrementalHoareTripleChecker+Valid, 370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:50,847 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [507 Valid, 129 Invalid, 601 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [231 Valid, 370 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-16 12:44:50,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2412 states. [2022-11-16 12:44:51,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2412 to 1891. [2022-11-16 12:44:51,067 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1891 states, 1386 states have (on average 1.22005772005772) internal successors, (1691), 1494 states have internal predecessors, (1691), 263 states have call successors, (263), 197 states have call predecessors, (263), 241 states have return successors, (549), 260 states have call predecessors, (549), 263 states have call successors, (549) [2022-11-16 12:44:51,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1891 states to 1891 states and 2503 transitions. [2022-11-16 12:44:51,079 INFO L78 Accepts]: Start accepts. Automaton has 1891 states and 2503 transitions. Word has length 57 [2022-11-16 12:44:51,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:51,080 INFO L495 AbstractCegarLoop]: Abstraction has 1891 states and 2503 transitions. [2022-11-16 12:44:51,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 3 states have internal predecessors, (46), 2 states have call successors, (6), 5 states have call predecessors, (6), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 12:44:51,080 INFO L276 IsEmpty]: Start isEmpty. Operand 1891 states and 2503 transitions. [2022-11-16 12:44:51,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2022-11-16 12:44:51,085 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:51,086 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:51,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-16 12:44:51,086 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:51,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:51,087 INFO L85 PathProgramCache]: Analyzing trace with hash 1457514374, now seen corresponding path program 1 times [2022-11-16 12:44:51,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:51,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358411474] [2022-11-16 12:44:51,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:51,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:51,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 12:44:51,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-16 12:44:51,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:51,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 12:44:51,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:51,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-16 12:44:51,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-16 12:44:51,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:51,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2022-11-16 12:44:51,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,336 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-16 12:44:51,336 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:51,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358411474] [2022-11-16 12:44:51,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [358411474] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:44:51,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1134400644] [2022-11-16 12:44:51,337 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:51,337 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:44:51,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:44:51,343 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:44:51,374 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 12:44:51,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:51,491 INFO L263 TraceCheckSpWp]: Trace formula consists of 486 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-16 12:44:51,525 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:44:51,615 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:44:51,616 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:44:51,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1134400644] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:51,616 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:44:51,616 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [10] total 10 [2022-11-16 12:44:51,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959136744] [2022-11-16 12:44:51,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:51,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 12:44:51,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:51,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:44:51,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-16 12:44:51,618 INFO L87 Difference]: Start difference. First operand 1891 states and 2503 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 12:44:51,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:51,850 INFO L93 Difference]: Finished difference Result 3333 states and 4492 transitions. [2022-11-16 12:44:51,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:44:51,851 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 100 [2022-11-16 12:44:51,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:51,859 INFO L225 Difference]: With dead ends: 3333 [2022-11-16 12:44:51,859 INFO L226 Difference]: Without dead ends: 1726 [2022-11-16 12:44:51,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 127 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2022-11-16 12:44:51,866 INFO L413 NwaCegarLoop]: 157 mSDtfsCounter, 53 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 230 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:51,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 230 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 14 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 12:44:51,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1726 states. [2022-11-16 12:44:52,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1726 to 1726. [2022-11-16 12:44:52,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1726 states, 1263 states have (on average 1.1916072842438639) internal successors, (1505), 1361 states have internal predecessors, (1505), 240 states have call successors, (240), 190 states have call predecessors, (240), 222 states have return successors, (384), 233 states have call predecessors, (384), 240 states have call successors, (384) [2022-11-16 12:44:52,026 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1726 states to 1726 states and 2129 transitions. [2022-11-16 12:44:52,026 INFO L78 Accepts]: Start accepts. Automaton has 1726 states and 2129 transitions. Word has length 100 [2022-11-16 12:44:52,027 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:52,027 INFO L495 AbstractCegarLoop]: Abstraction has 1726 states and 2129 transitions. [2022-11-16 12:44:52,027 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-11-16 12:44:52,027 INFO L276 IsEmpty]: Start isEmpty. Operand 1726 states and 2129 transitions. [2022-11-16 12:44:52,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-16 12:44:52,031 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:52,032 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:52,043 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 12:44:52,239 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-16 12:44:52,239 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:52,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:52,240 INFO L85 PathProgramCache]: Analyzing trace with hash 2033027807, now seen corresponding path program 1 times [2022-11-16 12:44:52,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:52,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1093944334] [2022-11-16 12:44:52,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:52,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:52,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 12:44:52,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-16 12:44:52,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:52,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 12:44:52,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:52,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-16 12:44:52,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-16 12:44:52,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,326 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-16 12:44:52,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:52,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-16 12:44:52,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,337 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2022-11-16 12:44:52,337 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:52,337 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1093944334] [2022-11-16 12:44:52,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1093944334] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:44:52,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1743892062] [2022-11-16 12:44:52,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:52,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:44:52,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:44:52,339 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:44:52,359 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 12:44:52,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:52,500 INFO L263 TraceCheckSpWp]: Trace formula consists of 505 conjuncts, 3 conjunts are in the unsatisfiable core [2022-11-16 12:44:52,502 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:44:52,526 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 32 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-16 12:44:52,526 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:44:52,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1743892062] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:52,527 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:44:52,527 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [7] total 7 [2022-11-16 12:44:52,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [488316401] [2022-11-16 12:44:52,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:52,528 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 12:44:52,528 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:52,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:44:52,529 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:44:52,529 INFO L87 Difference]: Start difference. First operand 1726 states and 2129 transitions. Second operand has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-16 12:44:52,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:52,616 INFO L93 Difference]: Finished difference Result 1969 states and 2439 transitions. [2022-11-16 12:44:52,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:44:52,617 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 108 [2022-11-16 12:44:52,617 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:52,622 INFO L225 Difference]: With dead ends: 1969 [2022-11-16 12:44:52,622 INFO L226 Difference]: Without dead ends: 718 [2022-11-16 12:44:52,625 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:44:52,626 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 38 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:52,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 251 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 12:44:52,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 718 states. [2022-11-16 12:44:52,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 718 to 718. [2022-11-16 12:44:52,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 718 states, 525 states have (on average 1.1638095238095238) internal successors, (611), 564 states have internal predecessors, (611), 99 states have call successors, (99), 77 states have call predecessors, (99), 93 states have return successors, (155), 99 states have call predecessors, (155), 99 states have call successors, (155) [2022-11-16 12:44:52,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 718 states to 718 states and 865 transitions. [2022-11-16 12:44:52,690 INFO L78 Accepts]: Start accepts. Automaton has 718 states and 865 transitions. Word has length 108 [2022-11-16 12:44:52,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:52,690 INFO L495 AbstractCegarLoop]: Abstraction has 718 states and 865 transitions. [2022-11-16 12:44:52,691 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.333333333333332) internal successors, (82), 3 states have internal predecessors, (82), 3 states have call successors, (11), 3 states have call predecessors, (11), 2 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-11-16 12:44:52,691 INFO L276 IsEmpty]: Start isEmpty. Operand 718 states and 865 transitions. [2022-11-16 12:44:52,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-11-16 12:44:52,693 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 12:44:52,693 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:44:52,704 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 12:44:52,903 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:44:52,904 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 12:44:52,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:44:52,904 INFO L85 PathProgramCache]: Analyzing trace with hash 2017248584, now seen corresponding path program 1 times [2022-11-16 12:44:52,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:44:52,905 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714868656] [2022-11-16 12:44:52,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:52,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:44:52,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-16 12:44:53,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-16 12:44:53,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-16 12:44:53,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 12:44:53,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:53,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,132 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-16 12:44:53,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-16 12:44:53,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,149 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-16 12:44:53,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-16 12:44:53,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 12:44:53,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-11-16 12:44:53,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,161 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 12:44:53,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:44:53,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714868656] [2022-11-16 12:44:53,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1714868656] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 12:44:53,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [707193526] [2022-11-16 12:44:53,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:44:53,162 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:44:53,163 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:44:53,164 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 12:44:53,191 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 12:44:53,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:44:53,303 INFO L263 TraceCheckSpWp]: Trace formula consists of 509 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-16 12:44:53,307 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 12:44:53,462 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-16 12:44:53,463 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 12:44:53,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [707193526] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:44:53,463 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 12:44:53,463 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-11-16 12:44:53,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1022447787] [2022-11-16 12:44:53,463 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:44:53,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 12:44:53,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:44:53,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:44:53,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-11-16 12:44:53,465 INFO L87 Difference]: Start difference. First operand 718 states and 865 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-16 12:44:53,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:44:53,617 INFO L93 Difference]: Finished difference Result 1292 states and 1550 transitions. [2022-11-16 12:44:53,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:44:53,618 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2022-11-16 12:44:53,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 12:44:53,619 INFO L225 Difference]: With dead ends: 1292 [2022-11-16 12:44:53,619 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 12:44:53,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-11-16 12:44:53,622 INFO L413 NwaCegarLoop]: 181 mSDtfsCounter, 46 mSDsluCounter, 766 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 947 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 12:44:53,622 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 947 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 12:44:53,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 12:44:53,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 12:44:53,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:44:53,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 12:44:53,624 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-11-16 12:44:53,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 12:44:53,624 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 12:44:53,624 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-16 12:44:53,624 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 12:44:53,624 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 12:44:53,627 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 12:44:53,635 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 12:44:53,834 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 12:44:53,835 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 12:45:01,023 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 394 401) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 (not (= 1 ~systemActive~0)) .cse1) (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) (= 0 ~systemActive~0)))) [2022-11-16 12:45:01,024 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 394 401) no Hoare annotation was computed. [2022-11-16 12:45:01,024 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 394 401) no Hoare annotation was computed. [2022-11-16 12:45:01,024 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 301 307) no Hoare annotation was computed. [2022-11-16 12:45:01,024 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 301 307) the Hoare annotation is: true [2022-11-16 12:45:01,025 INFO L899 garLoopResultBuilder]: For program point L126-1(lines 122 133) no Hoare annotation was computed. [2022-11-16 12:45:01,025 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 122 133) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 ~pumpRunning~0))) (.cse6 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse2 .cse6 .cse4) (or .cse0 .cse5 .cse1 .cse2 .cse4) (or .cse1 .cse2 (not (<= 2 ~waterLevel~0)) .cse3 .cse6) (or .cse5 .cse2 .cse4 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,025 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 122 133) no Hoare annotation was computed. [2022-11-16 12:45:01,025 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 919 948) no Hoare annotation was computed. [2022-11-16 12:45:01,025 INFO L902 garLoopResultBuilder]: At program point L929-2(lines 929 943) the Hoare annotation is: true [2022-11-16 12:45:01,025 INFO L902 garLoopResultBuilder]: At program point L925(line 925) the Hoare annotation is: true [2022-11-16 12:45:01,026 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 919 948) the Hoare annotation is: true [2022-11-16 12:45:01,026 INFO L899 garLoopResultBuilder]: For program point L925-1(line 925) no Hoare annotation was computed. [2022-11-16 12:45:01,026 INFO L902 garLoopResultBuilder]: At program point L944(lines 919 948) the Hoare annotation is: true [2022-11-16 12:45:01,026 INFO L899 garLoopResultBuilder]: For program point L940(line 940) no Hoare annotation was computed. [2022-11-16 12:45:01,026 INFO L899 garLoopResultBuilder]: For program point L933(lines 933 937) no Hoare annotation was computed. [2022-11-16 12:45:01,026 INFO L902 garLoopResultBuilder]: At program point L933-1(lines 933 937) the Hoare annotation is: true [2022-11-16 12:45:01,027 INFO L899 garLoopResultBuilder]: For program point L930(line 930) no Hoare annotation was computed. [2022-11-16 12:45:01,027 INFO L895 garLoopResultBuilder]: At program point L894(line 894) the Hoare annotation is: (let ((.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 0)) (.cse16 (<= 1 ~methaneLevelCritical~0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse10 (and .cse14 .cse16 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse9 (not .cse16)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (and .cse14 .cse13)) (.cse5 (not .cse15)) (.cse11 (<= 1 ~pumpRunning~0)) (.cse12 (<= 2 ~waterLevel~0)) (.cse6 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse6) (or .cse0 .cse7 .cse4) (or .cse5 .cse8 .cse9 .cse10 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse9) (or .cse1 .cse5 .cse8 .cse9 .cse10) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse2 .cse12 .cse13) .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse5 .cse8 .cse6) (or .cse0 .cse1 .cse7 .cse5 (and .cse11 .cse12 .cse13) .cse6)))) [2022-11-16 12:45:01,027 INFO L899 garLoopResultBuilder]: For program point L894-1(line 894) no Hoare annotation was computed. [2022-11-16 12:45:01,028 INFO L895 garLoopResultBuilder]: At program point L407(line 407) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,028 INFO L899 garLoopResultBuilder]: For program point L407-1(line 407) no Hoare annotation was computed. [2022-11-16 12:45:01,028 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 277 300) no Hoare annotation was computed. [2022-11-16 12:45:01,028 INFO L899 garLoopResultBuilder]: For program point L102(lines 102 106) no Hoare annotation was computed. [2022-11-16 12:45:01,028 INFO L895 garLoopResultBuilder]: At program point L102-2(lines 98 109) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 (and .cse4 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,028 INFO L899 garLoopResultBuilder]: For program point L288-1(lines 288 294) no Hoare annotation was computed. [2022-11-16 12:45:01,029 INFO L899 garLoopResultBuilder]: For program point L1019(line 1019) no Hoare annotation was computed. [2022-11-16 12:45:01,029 INFO L895 garLoopResultBuilder]: At program point L375(line 375) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2 .cse4 .cse5) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,029 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~3#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7 .cse8) .cse1 .cse2 .cse5 .cse3) (or .cse2 .cse5 .cse3 (and .cse4 .cse7 .cse8) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,030 INFO L899 garLoopResultBuilder]: For program point L900(lines 900 910) no Hoare annotation was computed. [2022-11-16 12:45:01,030 INFO L899 garLoopResultBuilder]: For program point L896(lines 896 913) no Hoare annotation was computed. [2022-11-16 12:45:01,030 INFO L895 garLoopResultBuilder]: At program point L896-1(lines 888 916) the Hoare annotation is: (let ((.cse13 (= ~pumpRunning~0 0)) (.cse14 (= ~methAndRunningLastTime~0 0)) (.cse12 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= 0 ~systemActive~0))) (.cse1 (and .cse13 .cse14 .cse12)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (and .cse13 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|))) (.cse8 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse4 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse3 .cse4 .cse2) (or .cse5 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse9 .cse5 .cse1 (and .cse10 .cse11 .cse12) .cse8) (or .cse5 .cse6 .cse3 (and .cse13 .cse14 .cse4) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse14 .cse4)) (or .cse9 .cse5 .cse6 .cse7 .cse8) (or .cse0 .cse9 .cse5 (and .cse10 .cse14 .cse11 .cse4 .cse12) .cse3 (and .cse13 .cse14 .cse4 .cse12))))) [2022-11-16 12:45:01,030 INFO L895 garLoopResultBuilder]: At program point L380(line 380) the Hoare annotation is: (let ((.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (= ~pumpRunning~0 0)) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse1 .cse3 .cse5 .cse6) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse6 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse3 (and .cse7 .cse2 .cse8) .cse6) (or .cse0 .cse1 (and .cse7 .cse8) .cse3 .cse4) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,031 INFO L895 garLoopResultBuilder]: At program point L1020(lines 1015 1022) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse4 .cse3) (or .cse2 .cse4 .cse5) (or .cse2 .cse4 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse5) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,031 INFO L895 garLoopResultBuilder]: At program point L380-1(lines 361 385) the Hoare annotation is: (let ((.cse12 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 0)) (.cse15 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ~systemActive~0))) (let ((.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse8 (and .cse13 .cse15 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse14)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse7 (not .cse15)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse9 (and .cse13 .cse12)) (.cse4 (not .cse14)) (.cse10 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse4 .cse6 .cse7 .cse8 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse7) (or .cse1 .cse4 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse2 .cse11 .cse12) .cse7) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse13 .cse4 .cse6 .cse5) (or .cse0 .cse1 .cse9 .cse4 (and .cse10 .cse11 .cse12) .cse5) (or .cse0 (not (= 0 ~systemActive~0)))))) [2022-11-16 12:45:01,032 INFO L895 garLoopResultBuilder]: At program point L409(lines 402 412) the Hoare annotation is: (let ((.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~pumpRunning~0)| 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5 .cse6) (or .cse0 .cse1 .cse2 .cse6) (or .cse1 .cse2 .cse5 .cse3 (and .cse4 (= ~methAndRunningLastTime~0 0) .cse7)) (or .cse2 .cse5 .cse3 (and .cse4 .cse7) (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,032 INFO L899 garLoopResultBuilder]: For program point L281-1(lines 280 299) no Hoare annotation was computed. [2022-11-16 12:45:01,032 INFO L899 garLoopResultBuilder]: For program point L901(lines 901 907) no Hoare annotation was computed. [2022-11-16 12:45:01,032 INFO L895 garLoopResultBuilder]: At program point L418(lines 413 421) the Hoare annotation is: (let ((.cse11 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse12 (= ~pumpRunning~0 0)) (.cse14 (<= 1 ~methaneLevelCritical~0)) (.cse13 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse15 (= 1 ~systemActive~0))) (let ((.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 0 ~systemActive~0))) (.cse3 (not (= |old(~waterLevel~0)| 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (and .cse12 .cse14 (<= 1 |timeShift_isMethaneAlarm_#res#1|) .cse13 (<= 1 |timeShift_processEnvironment_~tmp~3#1|) .cse15)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not .cse15)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse8 (not .cse14)) (.cse10 (and .cse12 .cse13 .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7) (or .cse1 .cse5 .cse6 .cse8 .cse9) (or .cse0 .cse7 .cse4) (or .cse0 .cse1 .cse5 .cse7) (or .cse0 .cse10 .cse4) (or .cse0 .cse1 .cse2 .cse3 .cse5 .cse8) (or .cse5 .cse6 .cse8 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse5 (and (<= 1 ~pumpRunning~0) .cse2 (<= 2 ~waterLevel~0) .cse11) .cse8 .cse10)))) [2022-11-16 12:45:01,032 INFO L899 garLoopResultBuilder]: For program point L369(lines 369 377) no Hoare annotation was computed. [2022-11-16 12:45:01,033 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 277 300) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse2 (= ~methAndRunningLastTime~0 0)) (.cse12 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse8 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse12 .cse5)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse10 (and .cse4 .cse2 .cse5)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= 1 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 (and .cse4 .cse5) .cse3) (or .cse6 .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse6 .cse10 .cse8) (or .cse6 .cse7 .cse11 .cse9 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 .cse6 .cse10 .cse11) (or (and .cse12 .cse2 .cse5) .cse1 .cse6 .cse7 .cse11)))) [2022-11-16 12:45:01,033 INFO L899 garLoopResultBuilder]: For program point L365(lines 365 382) no Hoare annotation was computed. [2022-11-16 12:45:01,033 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 277 300) no Hoare annotation was computed. [2022-11-16 12:45:01,033 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1019) no Hoare annotation was computed. [2022-11-16 12:45:01,034 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 134 142) the Hoare annotation is: true [2022-11-16 12:45:01,034 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 134 142) no Hoare annotation was computed. [2022-11-16 12:45:01,034 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 134 142) no Hoare annotation was computed. [2022-11-16 12:45:01,034 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) .cse1 .cse2) (and .cse0 (= |ULTIMATE.start_valid_product_#res#1| 1) (<= 2 ~waterLevel~0) .cse1 .cse2 (not (= 0 ~systemActive~0))))) [2022-11-16 12:45:01,034 INFO L899 garLoopResultBuilder]: For program point L213(lines 212 259) no Hoare annotation was computed. [2022-11-16 12:45:01,034 INFO L899 garLoopResultBuilder]: For program point L242(lines 242 255) no Hoare annotation was computed. [2022-11-16 12:45:01,035 INFO L902 garLoopResultBuilder]: At program point L1010(lines 991 1013) the Hoare annotation is: true [2022-11-16 12:45:01,035 INFO L895 garLoopResultBuilder]: At program point L977(lines 973 979) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-11-16 12:45:01,035 INFO L895 garLoopResultBuilder]: At program point L234(line 234) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-16 12:45:01,035 INFO L902 garLoopResultBuilder]: At program point L263(lines 202 267) the Hoare annotation is: true [2022-11-16 12:45:01,035 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point L222(lines 222 228) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point L222-1(lines 222 228) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point L214(lines 214 218) no Hoare annotation was computed. [2022-11-16 12:45:01,036 INFO L895 garLoopResultBuilder]: At program point L260(lines 211 261) the Hoare annotation is: false [2022-11-16 12:45:01,036 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 12:45:01,037 INFO L895 garLoopResultBuilder]: At program point L508(lines 496 510) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0) (= 0 ~systemActive~0) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-11-16 12:45:01,037 INFO L899 garLoopResultBuilder]: For program point L248(lines 248 254) no Hoare annotation was computed. [2022-11-16 12:45:01,037 INFO L895 garLoopResultBuilder]: At program point L248-2(lines 242 255) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-16 12:45:01,037 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 506) no Hoare annotation was computed. [2022-11-16 12:45:01,037 INFO L895 garLoopResultBuilder]: At program point L83(lines 78 86) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:45:01,038 INFO L899 garLoopResultBuilder]: For program point L500-1(lines 500 506) no Hoare annotation was computed. [2022-11-16 12:45:01,038 INFO L895 garLoopResultBuilder]: At program point L75(lines 71 77) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:45:01,038 INFO L899 garLoopResultBuilder]: For program point L232(lines 232 238) no Hoare annotation was computed. [2022-11-16 12:45:01,038 INFO L899 garLoopResultBuilder]: For program point L232-1(lines 232 238) no Hoare annotation was computed. [2022-11-16 12:45:01,038 INFO L895 garLoopResultBuilder]: At program point L257(lines 212 259) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-16 12:45:01,039 INFO L895 garLoopResultBuilder]: At program point L224(line 224) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse8 (= ~methaneLevelCritical~0 0)) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (= |ULTIMATE.start_main_~tmp~10#1| 1))) (or (and .cse0 .cse1 (<= 2 ~waterLevel~0) .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse7 .cse8 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 (= |ULTIMATE.start_valid_product_#res#1| 1) .cse4 (= 0 ~systemActive~0) .cse5) (and .cse6 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-16 12:45:01,039 INFO L902 garLoopResultBuilder]: At program point L988(lines 980 990) the Hoare annotation is: true [2022-11-16 12:45:01,039 INFO L895 garLoopResultBuilder]: At program point L885(lines 880 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (= ~waterLevel~0 1) (= |ULTIMATE.start_main_~tmp~10#1| 1)) [2022-11-16 12:45:01,039 INFO L899 garLoopResultBuilder]: For program point L1001(lines 1001 1008) no Hoare annotation was computed. [2022-11-16 12:45:01,039 INFO L899 garLoopResultBuilder]: For program point L1001-2(lines 1001 1008) no Hoare annotation was computed. [2022-11-16 12:45:01,040 INFO L895 garLoopResultBuilder]: At program point L68(lines 64 70) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 12:45:01,040 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 309 333) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-16 12:45:01,040 INFO L895 garLoopResultBuilder]: At program point L473(lines 458 476) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~4#1| 0)) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3 .cse4) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 .cse4 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-16 12:45:01,040 INFO L895 garLoopResultBuilder]: At program point L184(lines 175 188) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and .cse5 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)))) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse3 (not (<= 1 ~methaneLevelCritical~0)) .cse4 (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse3 .cse1 .cse4)))) [2022-11-16 12:45:01,040 INFO L899 garLoopResultBuilder]: For program point L467(lines 467 471) no Hoare annotation was computed. [2022-11-16 12:45:01,041 INFO L899 garLoopResultBuilder]: For program point L467-2(lines 467 471) no Hoare annotation was computed. [2022-11-16 12:45:01,041 INFO L895 garLoopResultBuilder]: At program point L391(lines 386 393) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse3 .cse0 .cse1))) [2022-11-16 12:45:01,041 INFO L895 garLoopResultBuilder]: At program point L323(line 323) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~1#1| 0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 .cse1 .cse3) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse3 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-16 12:45:01,041 INFO L899 garLoopResultBuilder]: For program point L317(lines 317 325) no Hoare annotation was computed. [2022-11-16 12:45:01,041 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 309 333) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L899 garLoopResultBuilder]: For program point L313(lines 313 330) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L899 garLoopResultBuilder]: For program point L179(lines 179 185) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L895 garLoopResultBuilder]: At program point L328(line 328) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-11-16 12:45:01,042 INFO L899 garLoopResultBuilder]: For program point L328-1(lines 309 333) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L899 garLoopResultBuilder]: For program point L114-1(lines 110 121) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 110 121) no Hoare annotation was computed. [2022-11-16 12:45:01,042 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 110 121) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse4 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or .cse4 .cse0 .cse1 .cse3 .cse5) (or .cse4 .cse3 .cse5 (not (= 0 ~systemActive~0))) (or .cse0 .cse6 .cse2 .cse3 .cse5) (or .cse4 .cse0 .cse6 .cse3 .cse5))) [2022-11-16 12:45:01,042 INFO L895 garLoopResultBuilder]: At program point L349(line 349) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-11-16 12:45:01,043 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 335 359) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-16 12:45:01,043 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-11-16 12:45:01,043 INFO L899 garLoopResultBuilder]: For program point L343(lines 343 351) no Hoare annotation was computed. [2022-11-16 12:45:01,043 INFO L899 garLoopResultBuilder]: For program point L339(lines 339 356) no Hoare annotation was computed. [2022-11-16 12:45:01,043 INFO L895 garLoopResultBuilder]: At program point L492(lines 477 495) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-11-16 12:45:01,043 INFO L899 garLoopResultBuilder]: For program point L486(lines 486 490) no Hoare annotation was computed. [2022-11-16 12:45:01,043 INFO L899 garLoopResultBuilder]: For program point L486-2(lines 486 490) no Hoare annotation was computed. [2022-11-16 12:45:01,043 INFO L895 garLoopResultBuilder]: At program point L354(line 354) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse3 .cse0 .cse1) (or .cse2 .cse3 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))))) [2022-11-16 12:45:01,043 INFO L899 garLoopResultBuilder]: For program point L354-1(lines 335 359) no Hoare annotation was computed. [2022-11-16 12:45:01,044 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 335 359) no Hoare annotation was computed. [2022-11-16 12:45:01,044 INFO L895 garLoopResultBuilder]: At program point L194(lines 189 197) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) .cse1) (or .cse2 .cse0 (not (<= 1 ~methaneLevelCritical~0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse2 .cse0 .cse1))) [2022-11-16 12:45:01,047 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:45:01,049 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 12:45:01,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 12:45:01 BoogieIcfgContainer [2022-11-16 12:45:01,085 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 12:45:01,085 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 12:45:01,086 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 12:45:01,086 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 12:45:01,086 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:44:44" (3/4) ... [2022-11-16 12:45:01,089 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 12:45:01,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-16 12:45:01,095 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-16 12:45:01,096 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 12:45:01,097 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-16 12:45:01,117 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2022-11-16 12:45:01,118 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-16 12:45:01,118 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-16 12:45:01,119 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 12:45:01,119 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 12:45:01,120 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 12:45:01,120 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 12:45:01,148 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 [2022-11-16 12:45:01,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2022-11-16 12:45:01,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 [2022-11-16 12:45:01,149 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) [2022-11-16 12:45:01,150 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-16 12:45:01,151 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-16 12:45:01,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) [2022-11-16 12:45:01,153 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-16 12:45:01,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 [2022-11-16 12:45:01,154 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) [2022-11-16 12:45:01,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-16 12:45:01,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) [2022-11-16 12:45:01,155 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) [2022-11-16 12:45:01,156 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-16 12:45:01,160 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) [2022-11-16 12:45:01,160 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-16 12:45:01,204 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/witness.graphml [2022-11-16 12:45:01,205 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 12:45:01,205 INFO L158 Benchmark]: Toolchain (without parser) took 17712.05ms. Allocated memory was 98.6MB in the beginning and 218.1MB in the end (delta: 119.5MB). Free memory was 59.8MB in the beginning and 174.2MB in the end (delta: -114.4MB). Peak memory consumption was 4.8MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,205 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 98.6MB. Free memory is still 76.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 12:45:01,206 INFO L158 Benchmark]: CACSL2BoogieTranslator took 644.19ms. Allocated memory is still 98.6MB. Free memory was 59.5MB in the beginning and 67.1MB in the end (delta: -7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,206 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.68ms. Allocated memory is still 98.6MB. Free memory was 67.1MB in the beginning and 64.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,207 INFO L158 Benchmark]: Boogie Preprocessor took 28.94ms. Allocated memory is still 98.6MB. Free memory was 64.6MB in the beginning and 62.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,207 INFO L158 Benchmark]: RCFGBuilder took 647.26ms. Allocated memory is still 98.6MB. Free memory was 62.8MB in the beginning and 42.7MB in the end (delta: 20.1MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,208 INFO L158 Benchmark]: TraceAbstraction took 16186.06ms. Allocated memory was 98.6MB in the beginning and 218.1MB in the end (delta: 119.5MB). Free memory was 41.8MB in the beginning and 180.5MB in the end (delta: -138.7MB). Peak memory consumption was 101.1MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,208 INFO L158 Benchmark]: Witness Printer took 119.30ms. Allocated memory is still 218.1MB. Free memory was 180.5MB in the beginning and 174.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-16 12:45:01,210 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 98.6MB. Free memory is still 76.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 644.19ms. Allocated memory is still 98.6MB. Free memory was 59.5MB in the beginning and 67.1MB in the end (delta: -7.6MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 76.68ms. Allocated memory is still 98.6MB. Free memory was 67.1MB in the beginning and 64.6MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 28.94ms. Allocated memory is still 98.6MB. Free memory was 64.6MB in the beginning and 62.8MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 647.26ms. Allocated memory is still 98.6MB. Free memory was 62.8MB in the beginning and 42.7MB in the end (delta: 20.1MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * TraceAbstraction took 16186.06ms. Allocated memory was 98.6MB in the beginning and 218.1MB in the end (delta: 119.5MB). Free memory was 41.8MB in the beginning and 180.5MB in the end (delta: -138.7MB). Peak memory consumption was 101.1MB. Max. memory is 16.1GB. * Witness Printer took 119.30ms. Allocated memory is still 218.1MB. Free memory was 180.5MB in the beginning and 174.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1019]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 106 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.1s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1841 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1817 mSDsluCounter, 3642 SdHoareTripleChecker+Invalid, 1.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2444 mSDsCounter, 553 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2381 IncrementalHoareTripleChecker+Invalid, 2934 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 553 mSolverCounterUnsat, 1198 mSDtfsCounter, 2381 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 538 GetRequests, 441 SyntacticMatches, 1 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 97 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1891occurred in iteration=9, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 12 MinimizatonAttempts, 619 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3303 PreInvPairs, 3552 NumberOfFragments, 3293 HoareAnnotationTreeSize, 3303 FomulaSimplifications, 240 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 49 FomulaSimplificationsInter, 16720 FormulaSimplificationTreeSizeReductionInter, 6.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 1005 NumberOfCodeBlocks, 1005 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 990 ConstructedInterpolants, 0 QuantifiedInterpolants, 1694 SizeOfPredicates, 5 NumberOfNonLiveVariables, 1500 ConjunctsInSsa, 15 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 224/234 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 880]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1) && tmp == 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive)) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || tmp == 0) || !(0 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp)) || !(1 <= methaneLevelCritical))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || ((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 386]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && (((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 980]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 78]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 64]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 458]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && tmp___0 == 0) && !(tmp == 0)) && \result == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 212]: Loop Invariant Derived loop invariant: (((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1)) || (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && tmp == 1) - InvariantResult [Line: 361]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || pumpRunning == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 202]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 71]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 1015]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(1 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && !(\result == 0))) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && 2 <= waterLevel)) - InvariantResult [Line: 98]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && (!(\old(pumpRunning) == 0) || !(0 == systemActive)) - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && \result == 1) && splverifierCounter == 0) && 0 == systemActive) && tmp == 1 - InvariantResult [Line: 413]: Loop Invariant Derived loop invariant: (((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(0 == systemActive)) && ((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive))) && ((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == 0)) || !(0 == systemActive))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((!(\old(pumpRunning) == 0) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) || !(0 == systemActive))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || methAndRunningLastTime == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= methaneLevelCritical) && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel)))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel)) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-16 12:45:01,271 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_e6fa0f01-5e4d-47fb-9b35-2d722d129ce9/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE