./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4c4adbf609ddd472cb6a462753c6f5cc9af64c97af02da4060f4102700285790 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 11:32:57,246 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 11:32:57,251 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 11:32:57,289 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 11:32:57,290 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 11:32:57,293 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 11:32:57,296 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 11:32:57,299 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 11:32:57,304 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 11:32:57,305 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 11:32:57,307 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 11:32:57,309 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 11:32:57,310 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 11:32:57,316 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 11:32:57,318 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 11:32:57,319 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 11:32:57,321 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 11:32:57,323 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 11:32:57,325 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 11:32:57,328 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 11:32:57,332 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 11:32:57,333 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 11:32:57,336 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 11:32:57,337 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 11:32:57,346 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 11:32:57,348 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 11:32:57,348 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 11:32:57,350 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 11:32:57,350 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 11:32:57,352 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 11:32:57,352 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 11:32:57,353 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 11:32:57,356 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 11:32:57,357 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 11:32:57,358 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 11:32:57,359 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 11:32:57,359 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 11:32:57,360 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 11:32:57,360 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 11:32:57,361 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 11:32:57,362 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 11:32:57,363 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-16 11:32:57,410 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 11:32:57,410 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 11:32:57,411 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 11:32:57,411 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 11:32:57,412 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-16 11:32:57,412 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-16 11:32:57,413 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 11:32:57,413 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 11:32:57,413 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 11:32:57,414 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 11:32:57,415 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 11:32:57,415 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 11:32:57,415 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 11:32:57,416 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 11:32:57,416 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-16 11:32:57,416 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-16 11:32:57,416 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-16 11:32:57,417 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 11:32:57,417 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 11:32:57,417 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 11:32:57,417 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-16 11:32:57,417 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 11:32:57,418 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 11:32:57,418 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-16 11:32:57,418 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:32:57,418 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 11:32:57,420 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-16 11:32:57,420 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-16 11:32:57,420 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 11:32:57,428 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-16 11:32:57,429 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-16 11:32:57,429 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-16 11:32:57,429 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-16 11:32:57,429 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4c4adbf609ddd472cb6a462753c6f5cc9af64c97af02da4060f4102700285790 [2022-11-16 11:32:57,718 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 11:32:57,747 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 11:32:57,750 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 11:32:57,752 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 11:32:57,753 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 11:32:57,754 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2022-11-16 11:32:57,826 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/data/b1abd3bd9/12cdf27178114b5d8b516e83230cd654/FLAG0c0955fa5 [2022-11-16 11:32:58,353 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 11:32:58,353 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2022-11-16 11:32:58,371 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/data/b1abd3bd9/12cdf27178114b5d8b516e83230cd654/FLAG0c0955fa5 [2022-11-16 11:32:58,681 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/data/b1abd3bd9/12cdf27178114b5d8b516e83230cd654 [2022-11-16 11:32:58,684 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 11:32:58,685 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 11:32:58,687 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 11:32:58,687 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 11:32:58,694 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 11:32:58,695 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:32:58" (1/1) ... [2022-11-16 11:32:58,696 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@28e93568 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:58, skipping insertion in model container [2022-11-16 11:32:58,696 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 11:32:58" (1/1) ... [2022-11-16 11:32:58,704 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 11:32:58,747 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 11:32:59,075 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8617,8630] [2022-11-16 11:32:59,143 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:32:59,159 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 11:32:59,218 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c[8617,8630] [2022-11-16 11:32:59,247 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 11:32:59,264 INFO L208 MainTranslator]: Completed translation [2022-11-16 11:32:59,264 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59 WrapperNode [2022-11-16 11:32:59,265 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 11:32:59,266 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 11:32:59,266 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 11:32:59,266 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 11:32:59,275 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,301 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,330 INFO L138 Inliner]: procedures = 54, calls = 156, calls flagged for inlining = 22, calls inlined = 19, statements flattened = 250 [2022-11-16 11:32:59,330 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 11:32:59,331 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 11:32:59,331 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 11:32:59,331 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 11:32:59,341 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,341 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,345 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,356 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,376 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,381 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,383 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,395 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,400 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 11:32:59,401 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 11:32:59,401 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 11:32:59,402 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 11:32:59,403 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (1/1) ... [2022-11-16 11:32:59,421 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-16 11:32:59,433 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:32:59,447 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-16 11:32:59,451 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-16 11:32:59,483 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 11:32:59,483 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-16 11:32:59,483 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-16 11:32:59,484 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-16 11:32:59,484 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-16 11:32:59,484 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-16 11:32:59,484 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-16 11:32:59,484 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-16 11:32:59,484 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-16 11:32:59,485 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-16 11:32:59,485 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-16 11:32:59,485 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:32:59,485 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:32:59,485 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2022-11-16 11:32:59,486 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2022-11-16 11:32:59,486 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 11:32:59,486 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-16 11:32:59,486 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-16 11:32:59,486 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 11:32:59,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 11:32:59,582 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 11:32:59,585 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 11:33:00,043 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 11:33:00,051 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 11:33:00,051 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-16 11:33:00,055 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:33:00 BoogieIcfgContainer [2022-11-16 11:33:00,056 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 11:33:00,059 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-16 11:33:00,060 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-16 11:33:00,064 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-16 11:33:00,064 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.11 11:32:58" (1/3) ... [2022-11-16 11:33:00,066 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@140a2900 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:33:00, skipping insertion in model container [2022-11-16 11:33:00,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 11:32:59" (2/3) ... [2022-11-16 11:33:00,066 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@140a2900 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.11 11:33:00, skipping insertion in model container [2022-11-16 11:33:00,066 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:33:00" (3/3) ... [2022-11-16 11:33:00,072 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product45.cil.c [2022-11-16 11:33:00,093 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-16 11:33:00,094 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-16 11:33:00,165 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-16 11:33:00,172 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@4921abc, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-16 11:33:00,172 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-16 11:33:00,177 INFO L276 IsEmpty]: Start isEmpty. Operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2022-11-16 11:33:00,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-16 11:33:00,187 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:00,187 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:00,188 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:00,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:00,194 INFO L85 PathProgramCache]: Analyzing trace with hash 1088804663, now seen corresponding path program 1 times [2022-11-16 11:33:00,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:00,204 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [158287546] [2022-11-16 11:33:00,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:00,204 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:00,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:00,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-16 11:33:00,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:00,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:00,544 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:00,544 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [158287546] [2022-11-16 11:33:00,545 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [158287546] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:00,545 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:00,546 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 11:33:00,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900672501] [2022-11-16 11:33:00,548 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:00,566 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-16 11:33:00,567 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:00,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-16 11:33:00,604 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:33:00,607 INFO L87 Difference]: Start difference. First operand has 95 states, 71 states have (on average 1.380281690140845) internal successors, (98), 79 states have internal predecessors, (98), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:00,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:00,650 INFO L93 Difference]: Finished difference Result 182 states and 247 transitions. [2022-11-16 11:33:00,651 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-16 11:33:00,653 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-16 11:33:00,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:00,661 INFO L225 Difference]: With dead ends: 182 [2022-11-16 11:33:00,662 INFO L226 Difference]: Without dead ends: 86 [2022-11-16 11:33:00,666 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-16 11:33:00,669 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:00,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:33:00,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2022-11-16 11:33:00,706 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 86. [2022-11-16 11:33:00,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 64 states have (on average 1.3125) internal successors, (84), 71 states have internal predecessors, (84), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 11 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-16 11:33:00,710 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 111 transitions. [2022-11-16 11:33:00,712 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 111 transitions. Word has length 25 [2022-11-16 11:33:00,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:00,713 INFO L495 AbstractCegarLoop]: Abstraction has 86 states and 111 transitions. [2022-11-16 11:33:00,713 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:00,713 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 111 transitions. [2022-11-16 11:33:00,716 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-16 11:33:00,716 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:00,716 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:00,717 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-16 11:33:00,717 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:00,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:00,718 INFO L85 PathProgramCache]: Analyzing trace with hash 913970031, now seen corresponding path program 1 times [2022-11-16 11:33:00,718 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:00,719 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1325672770] [2022-11-16 11:33:00,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:00,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:00,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:00,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 11:33:00,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:00,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:00,880 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:00,880 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1325672770] [2022-11-16 11:33:00,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1325672770] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:00,881 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:00,881 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:33:00,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [153757520] [2022-11-16 11:33:00,881 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:00,882 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:33:00,883 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:00,883 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:33:00,884 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:33:00,884 INFO L87 Difference]: Start difference. First operand 86 states and 111 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:00,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:00,926 INFO L93 Difference]: Finished difference Result 138 states and 178 transitions. [2022-11-16 11:33:00,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:33:00,942 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-16 11:33:00,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:00,943 INFO L225 Difference]: With dead ends: 138 [2022-11-16 11:33:00,943 INFO L226 Difference]: Without dead ends: 77 [2022-11-16 11:33:00,944 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:33:00,945 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 12 mSDsluCounter, 82 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:00,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 180 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:33:00,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-16 11:33:00,954 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-16 11:33:00,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3275862068965518) internal successors, (77), 65 states have internal predecessors, (77), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 11:33:00,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 99 transitions. [2022-11-16 11:33:00,962 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 99 transitions. Word has length 26 [2022-11-16 11:33:00,962 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:00,962 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 99 transitions. [2022-11-16 11:33:00,962 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:00,963 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 99 transitions. [2022-11-16 11:33:00,967 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-16 11:33:00,967 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:00,967 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:00,967 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-16 11:33:00,968 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:00,968 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:00,968 INFO L85 PathProgramCache]: Analyzing trace with hash 1563838683, now seen corresponding path program 1 times [2022-11-16 11:33:00,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:00,969 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1588204121] [2022-11-16 11:33:00,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:00,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:01,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 11:33:01,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,119 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:01,119 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:01,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1588204121] [2022-11-16 11:33:01,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1588204121] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:01,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:01,120 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 11:33:01,121 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1749259782] [2022-11-16 11:33:01,121 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:01,121 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-16 11:33:01,122 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:01,122 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 11:33:01,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:33:01,123 INFO L87 Difference]: Start difference. First operand 77 states and 99 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:01,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:01,140 INFO L93 Difference]: Finished difference Result 147 states and 192 transitions. [2022-11-16 11:33:01,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 11:33:01,141 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-16 11:33:01,141 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:01,142 INFO L225 Difference]: With dead ends: 147 [2022-11-16 11:33:01,142 INFO L226 Difference]: Without dead ends: 77 [2022-11-16 11:33:01,143 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 11:33:01,144 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 81 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:01,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 97 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:33:01,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2022-11-16 11:33:01,155 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 77. [2022-11-16 11:33:01,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 58 states have (on average 1.3103448275862069) internal successors, (76), 65 states have internal predecessors, (76), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-16 11:33:01,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 98 transitions. [2022-11-16 11:33:01,158 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 98 transitions. Word has length 30 [2022-11-16 11:33:01,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:01,158 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 98 transitions. [2022-11-16 11:33:01,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-16 11:33:01,159 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 98 transitions. [2022-11-16 11:33:01,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-11-16 11:33:01,160 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:01,160 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:01,161 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-16 11:33:01,161 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:01,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:01,162 INFO L85 PathProgramCache]: Analyzing trace with hash 1485355981, now seen corresponding path program 1 times [2022-11-16 11:33:01,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:01,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1509499538] [2022-11-16 11:33:01,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:01,163 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:01,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 11:33:01,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-16 11:33:01,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-16 11:33:01,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:01,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:01,411 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1509499538] [2022-11-16 11:33:01,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1509499538] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:01,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:01,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 11:33:01,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080618593] [2022-11-16 11:33:01,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:01,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-16 11:33:01,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:01,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 11:33:01,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 11:33:01,413 INFO L87 Difference]: Start difference. First operand 77 states and 98 transitions. Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-16 11:33:01,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:01,646 INFO L93 Difference]: Finished difference Result 230 states and 292 transitions. [2022-11-16 11:33:01,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 11:33:01,646 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 40 [2022-11-16 11:33:01,647 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:01,648 INFO L225 Difference]: With dead ends: 230 [2022-11-16 11:33:01,649 INFO L226 Difference]: Without dead ends: 160 [2022-11-16 11:33:01,650 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:33:01,651 INFO L413 NwaCegarLoop]: 117 mSDtfsCounter, 187 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 289 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:01,652 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 289 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:33:01,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-11-16 11:33:01,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 154. [2022-11-16 11:33:01,673 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 154 states, 117 states have (on average 1.264957264957265) internal successors, (148), 125 states have internal predecessors, (148), 18 states have call successors, (18), 15 states have call predecessors, (18), 18 states have return successors, (23), 19 states have call predecessors, (23), 18 states have call successors, (23) [2022-11-16 11:33:01,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 189 transitions. [2022-11-16 11:33:01,675 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 189 transitions. Word has length 40 [2022-11-16 11:33:01,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:01,675 INFO L495 AbstractCegarLoop]: Abstraction has 154 states and 189 transitions. [2022-11-16 11:33:01,676 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 5 states have internal predecessors, (33), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-16 11:33:01,676 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 189 transitions. [2022-11-16 11:33:01,677 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-16 11:33:01,677 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:01,677 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:01,677 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-16 11:33:01,677 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:01,678 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:01,678 INFO L85 PathProgramCache]: Analyzing trace with hash -1430117211, now seen corresponding path program 1 times [2022-11-16 11:33:01,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:01,679 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [598643029] [2022-11-16 11:33:01,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:01,679 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:01,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 11:33:01,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:01,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-11-16 11:33:01,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:01,928 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:01,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:01,929 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [598643029] [2022-11-16 11:33:01,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [598643029] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:01,931 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:01,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:33:01,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1862863177] [2022-11-16 11:33:01,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:01,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:33:01,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:01,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:33:01,940 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:33:01,940 INFO L87 Difference]: Start difference. First operand 154 states and 189 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 11:33:02,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:02,259 INFO L93 Difference]: Finished difference Result 399 states and 509 transitions. [2022-11-16 11:33:02,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:33:02,259 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-16 11:33:02,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:02,269 INFO L225 Difference]: With dead ends: 399 [2022-11-16 11:33:02,269 INFO L226 Difference]: Without dead ends: 252 [2022-11-16 11:33:02,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-16 11:33:02,280 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 141 mSDsluCounter, 262 mSDsCounter, 0 mSdLazyCounter, 191 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 228 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 191 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:02,284 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 349 Invalid, 228 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 191 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:33:02,286 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 252 states. [2022-11-16 11:33:02,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 252 to 244. [2022-11-16 11:33:02,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 185 states have (on average 1.2540540540540541) internal successors, (232), 196 states have internal predecessors, (232), 30 states have call successors, (30), 26 states have call predecessors, (30), 28 states have return successors, (40), 30 states have call predecessors, (40), 30 states have call successors, (40) [2022-11-16 11:33:02,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 302 transitions. [2022-11-16 11:33:02,330 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 302 transitions. Word has length 46 [2022-11-16 11:33:02,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:02,330 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 302 transitions. [2022-11-16 11:33:02,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-16 11:33:02,331 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 302 transitions. [2022-11-16 11:33:02,332 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-16 11:33:02,332 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:02,333 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:02,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-16 11:33:02,333 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:02,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:02,334 INFO L85 PathProgramCache]: Analyzing trace with hash 1782384523, now seen corresponding path program 1 times [2022-11-16 11:33:02,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:02,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694702297] [2022-11-16 11:33:02,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:02,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:02,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:02,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:02,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:02,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:33:02,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:02,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:02,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:02,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-16 11:33:02,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:02,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:02,540 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:02,540 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694702297] [2022-11-16 11:33:02,540 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694702297] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:02,541 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:02,541 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:33:02,542 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1335314892] [2022-11-16 11:33:02,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:02,543 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:33:02,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:02,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:33:02,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:33:02,546 INFO L87 Difference]: Start difference. First operand 244 states and 302 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:03,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:03,138 INFO L93 Difference]: Finished difference Result 586 states and 757 transitions. [2022-11-16 11:33:03,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-16 11:33:03,139 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-16 11:33:03,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:03,144 INFO L225 Difference]: With dead ends: 586 [2022-11-16 11:33:03,145 INFO L226 Difference]: Without dead ends: 439 [2022-11-16 11:33:03,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-16 11:33:03,149 INFO L413 NwaCegarLoop]: 71 mSDtfsCounter, 302 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 361 mSolverCounterSat, 109 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 306 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 470 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 109 IncrementalHoareTripleChecker+Valid, 361 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:03,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [306 Valid, 329 Invalid, 470 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [109 Valid, 361 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-16 11:33:03,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2022-11-16 11:33:03,208 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 405. [2022-11-16 11:33:03,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 306 states have (on average 1.2287581699346406) internal successors, (376), 326 states have internal predecessors, (376), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-16 11:33:03,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 503 transitions. [2022-11-16 11:33:03,212 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 503 transitions. Word has length 50 [2022-11-16 11:33:03,212 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:03,213 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 503 transitions. [2022-11-16 11:33:03,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:03,213 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 503 transitions. [2022-11-16 11:33:03,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-16 11:33:03,215 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:03,215 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:03,215 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-16 11:33:03,215 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:03,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:03,216 INFO L85 PathProgramCache]: Analyzing trace with hash 1648371017, now seen corresponding path program 1 times [2022-11-16 11:33:03,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:03,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1130330146] [2022-11-16 11:33:03,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:03,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:03,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:03,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:33:03,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:03,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-16 11:33:03,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:03,313 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:03,313 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1130330146] [2022-11-16 11:33:03,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1130330146] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:03,314 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:03,314 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 11:33:03,314 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [867838287] [2022-11-16 11:33:03,314 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:03,315 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-16 11:33:03,315 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:03,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 11:33:03,316 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 11:33:03,316 INFO L87 Difference]: Start difference. First operand 405 states and 503 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:03,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:03,667 INFO L93 Difference]: Finished difference Result 751 states and 939 transitions. [2022-11-16 11:33:03,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-16 11:33:03,668 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-16 11:33:03,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:03,674 INFO L225 Difference]: With dead ends: 751 [2022-11-16 11:33:03,675 INFO L226 Difference]: Without dead ends: 439 [2022-11-16 11:33:03,680 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:33:03,684 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 163 mSDsluCounter, 214 mSDsCounter, 0 mSdLazyCounter, 256 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 316 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 256 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:03,684 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 283 Invalid, 316 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 256 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:33:03,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 439 states. [2022-11-16 11:33:03,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 439 to 405. [2022-11-16 11:33:03,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 405 states, 306 states have (on average 1.2254901960784315) internal successors, (375), 326 states have internal predecessors, (375), 50 states have call successors, (50), 39 states have call predecessors, (50), 48 states have return successors, (77), 51 states have call predecessors, (77), 50 states have call successors, (77) [2022-11-16 11:33:03,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 405 states to 405 states and 502 transitions. [2022-11-16 11:33:03,753 INFO L78 Accepts]: Start accepts. Automaton has 405 states and 502 transitions. Word has length 50 [2022-11-16 11:33:03,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:03,755 INFO L495 AbstractCegarLoop]: Abstraction has 405 states and 502 transitions. [2022-11-16 11:33:03,755 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:03,755 INFO L276 IsEmpty]: Start isEmpty. Operand 405 states and 502 transitions. [2022-11-16 11:33:03,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-16 11:33:03,757 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:03,757 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:03,757 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-16 11:33:03,758 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:03,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:03,758 INFO L85 PathProgramCache]: Analyzing trace with hash 1867225735, now seen corresponding path program 1 times [2022-11-16 11:33:03,758 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:03,758 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392657133] [2022-11-16 11:33:03,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:03,759 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:03,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:03,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:33:03,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:03,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-16 11:33:03,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:03,912 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:03,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:03,913 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392657133] [2022-11-16 11:33:03,913 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392657133] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:03,913 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:03,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 11:33:03,914 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2025763550] [2022-11-16 11:33:03,914 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:03,914 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-16 11:33:03,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:03,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 11:33:03,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 11:33:03,915 INFO L87 Difference]: Start difference. First operand 405 states and 502 transitions. Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:04,268 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:04,268 INFO L93 Difference]: Finished difference Result 832 states and 1043 transitions. [2022-11-16 11:33:04,269 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 11:33:04,269 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 50 [2022-11-16 11:33:04,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:04,272 INFO L225 Difference]: With dead ends: 832 [2022-11-16 11:33:04,273 INFO L226 Difference]: Without dead ends: 434 [2022-11-16 11:33:04,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:33:04,275 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 165 mSDsluCounter, 279 mSDsCounter, 0 mSdLazyCounter, 286 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 348 SdHoareTripleChecker+Invalid, 334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:04,278 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 348 Invalid, 334 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 286 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:33:04,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 434 states. [2022-11-16 11:33:04,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 434 to 408. [2022-11-16 11:33:04,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 408 states, 311 states have (on average 1.2186495176848875) internal successors, (379), 330 states have internal predecessors, (379), 49 states have call successors, (49), 38 states have call predecessors, (49), 47 states have return successors, (76), 50 states have call predecessors, (76), 49 states have call successors, (76) [2022-11-16 11:33:04,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 408 states to 408 states and 504 transitions. [2022-11-16 11:33:04,331 INFO L78 Accepts]: Start accepts. Automaton has 408 states and 504 transitions. Word has length 50 [2022-11-16 11:33:04,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:04,331 INFO L495 AbstractCegarLoop]: Abstraction has 408 states and 504 transitions. [2022-11-16 11:33:04,332 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-16 11:33:04,332 INFO L276 IsEmpty]: Start isEmpty. Operand 408 states and 504 transitions. [2022-11-16 11:33:04,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-11-16 11:33:04,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:04,333 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:04,333 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-16 11:33:04,334 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:04,334 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:04,334 INFO L85 PathProgramCache]: Analyzing trace with hash 88017873, now seen corresponding path program 1 times [2022-11-16 11:33:04,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:04,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573609927] [2022-11-16 11:33:04,335 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:04,335 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:04,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,461 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:04,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:33:04,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:04,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,548 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:04,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-16 11:33:04,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,566 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 11:33:04,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:04,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573609927] [2022-11-16 11:33:04,567 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [573609927] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:33:04,567 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1028127230] [2022-11-16 11:33:04,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:04,567 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:33:04,568 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:33:04,579 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:33:04,591 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-16 11:33:04,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:04,738 INFO L263 TraceCheckSpWp]: Trace formula consists of 380 conjuncts, 17 conjunts are in the unsatisfiable core [2022-11-16 11:33:04,744 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:33:05,043 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 11:33:05,043 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:33:05,044 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1028127230] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:05,044 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:33:05,044 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-11-16 11:33:05,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1199583693] [2022-11-16 11:33:05,045 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:05,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:33:05,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:05,046 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:33:05,046 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-16 11:33:05,047 INFO L87 Difference]: Start difference. First operand 408 states and 504 transitions. Second operand has 8 states, 8 states have (on average 6.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 11:33:05,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:05,229 INFO L93 Difference]: Finished difference Result 1193 states and 1500 transitions. [2022-11-16 11:33:05,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:33:05,230 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2022-11-16 11:33:05,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:05,234 INFO L225 Difference]: With dead ends: 1193 [2022-11-16 11:33:05,234 INFO L226 Difference]: Without dead ends: 792 [2022-11-16 11:33:05,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2022-11-16 11:33:05,236 INFO L413 NwaCegarLoop]: 107 mSDtfsCounter, 60 mSDsluCounter, 440 mSDsCounter, 0 mSdLazyCounter, 149 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 547 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 149 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:05,237 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 547 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 149 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-16 11:33:05,238 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 792 states. [2022-11-16 11:33:05,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 792 to 790. [2022-11-16 11:33:05,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 600 states have (on average 1.2066666666666668) internal successors, (724), 634 states have internal predecessors, (724), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (154), 98 states have call predecessors, (154), 97 states have call successors, (154) [2022-11-16 11:33:05,330 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 975 transitions. [2022-11-16 11:33:05,330 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 975 transitions. Word has length 59 [2022-11-16 11:33:05,331 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:05,331 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 975 transitions. [2022-11-16 11:33:05,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.0) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (6), 2 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-16 11:33:05,331 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 975 transitions. [2022-11-16 11:33:05,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-16 11:33:05,333 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:05,333 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:05,348 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-16 11:33:05,548 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-11-16 11:33:05,549 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:05,549 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:05,549 INFO L85 PathProgramCache]: Analyzing trace with hash -229819681, now seen corresponding path program 1 times [2022-11-16 11:33:05,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:05,550 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1503977408] [2022-11-16 11:33:05,550 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:05,550 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:05,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:05,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-16 11:33:05,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:05,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:05,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-16 11:33:05,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:05,706 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-16 11:33:05,706 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:05,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1503977408] [2022-11-16 11:33:05,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1503977408] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:05,707 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:05,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-11-16 11:33:05,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1571095639] [2022-11-16 11:33:05,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:05,708 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-11-16 11:33:05,708 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:05,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-11-16 11:33:05,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-11-16 11:33:05,709 INFO L87 Difference]: Start difference. First operand 790 states and 975 transitions. Second operand has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:33:06,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:06,281 INFO L93 Difference]: Finished difference Result 1596 states and 1965 transitions. [2022-11-16 11:33:06,281 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-16 11:33:06,282 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 60 [2022-11-16 11:33:06,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:06,286 INFO L225 Difference]: With dead ends: 1596 [2022-11-16 11:33:06,286 INFO L226 Difference]: Without dead ends: 813 [2022-11-16 11:33:06,289 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=125, Invalid=337, Unknown=0, NotChecked=0, Total=462 [2022-11-16 11:33:06,290 INFO L413 NwaCegarLoop]: 111 mSDtfsCounter, 312 mSDsluCounter, 394 mSDsCounter, 0 mSdLazyCounter, 472 mSolverCounterSat, 102 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 316 SdHoareTripleChecker+Valid, 505 SdHoareTripleChecker+Invalid, 574 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 102 IncrementalHoareTripleChecker+Valid, 472 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:06,290 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [316 Valid, 505 Invalid, 574 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [102 Valid, 472 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-16 11:33:06,291 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 813 states. [2022-11-16 11:33:06,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 813 to 790. [2022-11-16 11:33:06,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 790 states, 600 states have (on average 1.19) internal successors, (714), 634 states have internal predecessors, (714), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (139), 98 states have call predecessors, (139), 97 states have call successors, (139) [2022-11-16 11:33:06,375 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 790 states to 790 states and 950 transitions. [2022-11-16 11:33:06,375 INFO L78 Accepts]: Start accepts. Automaton has 790 states and 950 transitions. Word has length 60 [2022-11-16 11:33:06,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:06,376 INFO L495 AbstractCegarLoop]: Abstraction has 790 states and 950 transitions. [2022-11-16 11:33:06,376 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.222222222222222) internal successors, (47), 7 states have internal predecessors, (47), 3 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2022-11-16 11:33:06,376 INFO L276 IsEmpty]: Start isEmpty. Operand 790 states and 950 transitions. [2022-11-16 11:33:06,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-11-16 11:33:06,378 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:06,379 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:06,379 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-16 11:33:06,379 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:06,379 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:06,380 INFO L85 PathProgramCache]: Analyzing trace with hash -2090024307, now seen corresponding path program 1 times [2022-11-16 11:33:06,380 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:06,380 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211247074] [2022-11-16 11:33:06,380 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:06,380 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:06,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:06,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-16 11:33:06,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-16 11:33:06,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:06,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:06,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-16 11:33:06,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:06,569 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-16 11:33:06,569 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:06,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211247074] [2022-11-16 11:33:06,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211247074] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:06,570 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:06,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [] total 12 [2022-11-16 11:33:06,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131828171] [2022-11-16 11:33:06,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:06,570 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-11-16 11:33:06,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:06,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-11-16 11:33:06,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=110, Unknown=0, NotChecked=0, Total=132 [2022-11-16 11:33:06,572 INFO L87 Difference]: Start difference. First operand 790 states and 950 transitions. Second operand has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:33:07,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:07,842 INFO L93 Difference]: Finished difference Result 1574 states and 1912 transitions. [2022-11-16 11:33:07,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-11-16 11:33:07,843 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) Word has length 63 [2022-11-16 11:33:07,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:07,847 INFO L225 Difference]: With dead ends: 1574 [2022-11-16 11:33:07,847 INFO L226 Difference]: Without dead ends: 791 [2022-11-16 11:33:07,850 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 284 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=333, Invalid=999, Unknown=0, NotChecked=0, Total=1332 [2022-11-16 11:33:07,851 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 484 mSDsluCounter, 250 mSDsCounter, 0 mSdLazyCounter, 1064 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 294 SdHoareTripleChecker+Invalid, 1306 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 1064 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:07,851 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [489 Valid, 294 Invalid, 1306 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 1064 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-16 11:33:07,852 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 791 states. [2022-11-16 11:33:07,942 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 791 to 758. [2022-11-16 11:33:07,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 568 states have (on average 1.158450704225352) internal successors, (658), 602 states have internal predecessors, (658), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2022-11-16 11:33:07,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 888 transitions. [2022-11-16 11:33:07,948 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 888 transitions. Word has length 63 [2022-11-16 11:33:07,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:07,948 INFO L495 AbstractCegarLoop]: Abstraction has 758 states and 888 transitions. [2022-11-16 11:33:07,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 4.166666666666667) internal successors, (50), 8 states have internal predecessors, (50), 4 states have call successors, (7), 5 states have call predecessors, (7), 3 states have return successors, (6), 5 states have call predecessors, (6), 3 states have call successors, (6) [2022-11-16 11:33:07,949 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 888 transitions. [2022-11-16 11:33:07,952 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-16 11:33:07,952 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:07,952 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:07,953 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-16 11:33:07,953 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:07,953 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:07,954 INFO L85 PathProgramCache]: Analyzing trace with hash -168137563, now seen corresponding path program 1 times [2022-11-16 11:33:07,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:07,954 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009316988] [2022-11-16 11:33:07,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:07,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:07,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 11:33:08,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:33:08,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:08,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:08,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-16 11:33:08,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,102 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-16 11:33:08,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-16 11:33:08,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:08,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-16 11:33:08,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,112 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-16 11:33:08,112 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:08,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009316988] [2022-11-16 11:33:08,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009316988] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:08,112 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 11:33:08,113 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 11:33:08,113 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134904257] [2022-11-16 11:33:08,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:08,113 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-11-16 11:33:08,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:08,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 11:33:08,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-16 11:33:08,114 INFO L87 Difference]: Start difference. First operand 758 states and 888 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 11:33:08,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:08,408 INFO L93 Difference]: Finished difference Result 1513 states and 1792 transitions. [2022-11-16 11:33:08,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-11-16 11:33:08,408 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 97 [2022-11-16 11:33:08,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:08,412 INFO L225 Difference]: With dead ends: 1513 [2022-11-16 11:33:08,412 INFO L226 Difference]: Without dead ends: 762 [2022-11-16 11:33:08,414 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2022-11-16 11:33:08,415 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 96 mSDsluCounter, 318 mSDsCounter, 0 mSdLazyCounter, 299 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 321 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 299 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:08,416 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 385 Invalid, 321 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 299 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-16 11:33:08,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 762 states. [2022-11-16 11:33:08,502 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 762 to 758. [2022-11-16 11:33:08,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 758 states, 568 states have (on average 1.1514084507042253) internal successors, (654), 602 states have internal predecessors, (654), 97 states have call successors, (97), 76 states have call predecessors, (97), 92 states have return successors, (133), 98 states have call predecessors, (133), 97 states have call successors, (133) [2022-11-16 11:33:08,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 758 states to 758 states and 884 transitions. [2022-11-16 11:33:08,508 INFO L78 Accepts]: Start accepts. Automaton has 758 states and 884 transitions. Word has length 97 [2022-11-16 11:33:08,508 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:08,508 INFO L495 AbstractCegarLoop]: Abstraction has 758 states and 884 transitions. [2022-11-16 11:33:08,509 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 5 states have internal predecessors, (66), 2 states have call successors, (8), 5 states have call predecessors, (8), 2 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 11:33:08,509 INFO L276 IsEmpty]: Start isEmpty. Operand 758 states and 884 transitions. [2022-11-16 11:33:08,511 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-16 11:33:08,511 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:08,512 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:08,512 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-11-16 11:33:08,512 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:08,513 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:08,513 INFO L85 PathProgramCache]: Analyzing trace with hash -2079180121, now seen corresponding path program 1 times [2022-11-16 11:33:08,513 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:08,513 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1273200788] [2022-11-16 11:33:08,513 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:08,513 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:08,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-16 11:33:08,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:33:08,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:08,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:08,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-16 11:33:08,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-11-16 11:33:08,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-16 11:33:08,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:08,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-16 11:33:08,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,746 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:33:08,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:08,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1273200788] [2022-11-16 11:33:08,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1273200788] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:33:08,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1385955493] [2022-11-16 11:33:08,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:08,747 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:33:08,747 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:33:08,748 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:33:08,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-16 11:33:08,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:08,872 INFO L263 TraceCheckSpWp]: Trace formula consists of 470 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-16 11:33:08,875 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:33:08,925 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-16 11:33:08,925 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-16 11:33:08,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1385955493] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 11:33:08,926 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-16 11:33:08,926 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [13] total 15 [2022-11-16 11:33:08,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1171255762] [2022-11-16 11:33:08,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 11:33:08,926 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-16 11:33:08,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:08,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 11:33:08,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=179, Unknown=0, NotChecked=0, Total=210 [2022-11-16 11:33:08,927 INFO L87 Difference]: Start difference. First operand 758 states and 884 transitions. Second operand has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 11:33:09,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:09,034 INFO L93 Difference]: Finished difference Result 1367 states and 1613 transitions. [2022-11-16 11:33:09,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 11:33:09,035 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) Word has length 97 [2022-11-16 11:33:09,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:09,038 INFO L225 Difference]: With dead ends: 1367 [2022-11-16 11:33:09,038 INFO L226 Difference]: Without dead ends: 616 [2022-11-16 11:33:09,041 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 112 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=205, Unknown=0, NotChecked=0, Total=240 [2022-11-16 11:33:09,042 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 11 mSDsluCounter, 183 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 279 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:09,042 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 279 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-16 11:33:09,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2022-11-16 11:33:09,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 616. [2022-11-16 11:33:09,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 616 states, 460 states have (on average 1.1521739130434783) internal successors, (530), 488 states have internal predecessors, (530), 81 states have call successors, (81), 64 states have call predecessors, (81), 74 states have return successors, (103), 78 states have call predecessors, (103), 81 states have call successors, (103) [2022-11-16 11:33:09,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 616 states to 616 states and 714 transitions. [2022-11-16 11:33:09,111 INFO L78 Accepts]: Start accepts. Automaton has 616 states and 714 transitions. Word has length 97 [2022-11-16 11:33:09,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:09,111 INFO L495 AbstractCegarLoop]: Abstraction has 616 states and 714 transitions. [2022-11-16 11:33:09,112 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 16.5) internal successors, (66), 4 states have internal predecessors, (66), 2 states have call successors, (8), 2 states have call predecessors, (8), 1 states have return successors, (7), 1 states have call predecessors, (7), 2 states have call successors, (7) [2022-11-16 11:33:09,112 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 714 transitions. [2022-11-16 11:33:09,113 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 98 [2022-11-16 11:33:09,114 INFO L187 NwaCegarLoop]: Found error trace [2022-11-16 11:33:09,114 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:09,123 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-16 11:33:09,319 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-16 11:33:09,319 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-16 11:33:09,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 11:33:09,320 INFO L85 PathProgramCache]: Analyzing trace with hash 1353786525, now seen corresponding path program 1 times [2022-11-16 11:33:09,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 11:33:09,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [542048638] [2022-11-16 11:33:09,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:09,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 11:33:09,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,406 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-16 11:33:09,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-11-16 11:33:09,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-16 11:33:09,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-16 11:33:09,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:09,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-16 11:33:09,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2022-11-16 11:33:09,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-16 11:33:09,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-16 11:33:09,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,605 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-11-16 11:33:09,605 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 11:33:09,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [542048638] [2022-11-16 11:33:09,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [542048638] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-16 11:33:09,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [806695014] [2022-11-16 11:33:09,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 11:33:09,606 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-16 11:33:09,607 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 11:33:09,608 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-16 11:33:09,639 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-16 11:33:09,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 11:33:09,738 INFO L263 TraceCheckSpWp]: Trace formula consists of 470 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-16 11:33:09,741 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-16 11:33:09,946 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 12 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-11-16 11:33:09,946 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-16 11:33:10,366 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-11-16 11:33:10,366 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [806695014] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-16 11:33:10,366 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-16 11:33:10,366 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 8, 9] total 22 [2022-11-16 11:33:10,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593901756] [2022-11-16 11:33:10,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-16 11:33:10,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-16 11:33:10,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 11:33:10,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-16 11:33:10,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-16 11:33:10,368 INFO L87 Difference]: Start difference. First operand 616 states and 714 transitions. Second operand has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-16 11:33:12,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 11:33:12,093 INFO L93 Difference]: Finished difference Result 1288 states and 1544 transitions. [2022-11-16 11:33:12,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 51 states. [2022-11-16 11:33:12,093 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) Word has length 97 [2022-11-16 11:33:12,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-16 11:33:12,094 INFO L225 Difference]: With dead ends: 1288 [2022-11-16 11:33:12,094 INFO L226 Difference]: Without dead ends: 0 [2022-11-16 11:33:12,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 202 SyntacticMatches, 7 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1193 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=1065, Invalid=3627, Unknown=0, NotChecked=0, Total=4692 [2022-11-16 11:33:12,099 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 902 mSDsluCounter, 535 mSDsCounter, 0 mSdLazyCounter, 1163 mSolverCounterSat, 381 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 904 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 1544 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 381 IncrementalHoareTripleChecker+Valid, 1163 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-16 11:33:12,099 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [904 Valid, 583 Invalid, 1544 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [381 Valid, 1163 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-16 11:33:12,100 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-16 11:33:12,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-16 11:33:12,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 11:33:12,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-16 11:33:12,101 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 97 [2022-11-16 11:33:12,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-16 11:33:12,101 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-16 11:33:12,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 6.318181818181818) internal successors, (139), 15 states have internal predecessors, (139), 7 states have call successors, (23), 10 states have call predecessors, (23), 10 states have return successors, (23), 10 states have call predecessors, (23), 7 states have call successors, (23) [2022-11-16 11:33:12,101 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-16 11:33:12,101 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-16 11:33:12,104 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-16 11:33:12,115 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-16 11:33:12,305 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-11-16 11:33:12,307 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-16 11:33:17,837 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 318 324) no Hoare annotation was computed. [2022-11-16 11:33:17,837 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 318 324) the Hoare annotation is: true [2022-11-16 11:33:17,838 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 119 130) the Hoare annotation is: (let ((.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse3 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (= ~methaneLevelCritical~0 1)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse7 (not (= |old(~methaneLevelCritical~0)| 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse2 .cse3 .cse5 .cse4) (or .cse2 .cse5 .cse6 .cse4 .cse7) (or .cse1 .cse2 .cse6 .cse4 .cse7))) [2022-11-16 11:33:17,838 INFO L899 garLoopResultBuilder]: For program point L123-1(lines 119 130) no Hoare annotation was computed. [2022-11-16 11:33:17,839 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 119 130) no Hoare annotation was computed. [2022-11-16 11:33:17,839 INFO L895 garLoopResultBuilder]: At program point L407(lines 402 409) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (and (= ~pumpRunning~0 0) (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse6 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse6 .cse3))) [2022-11-16 11:33:17,839 INFO L895 garLoopResultBuilder]: At program point L366(line 366) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and (<= 1 ~pumpRunning~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) .cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse3) (or .cse1 .cse4 .cse6 .cse5 .cse3)))) [2022-11-16 11:33:17,839 INFO L899 garLoopResultBuilder]: For program point L73(lines 73 79) no Hoare annotation was computed. [2022-11-16 11:33:17,839 INFO L895 garLoopResultBuilder]: At program point L168(lines 163 171) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse12 (= ~pumpRunning~0 0)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse13 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (and .cse7 .cse12 .cse8 .cse9 .cse13 .cse11)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse3) (let ((.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or (and .cse7 .cse8 .cse9 .cse10 .cse11) .cse1 .cse6 .cse5 .cse3 (and .cse12 .cse8 .cse9 .cse10 .cse11))) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse5 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse9 .cse13) .cse4 .cse5 .cse3)))) [2022-11-16 11:33:17,840 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 294 317) no Hoare annotation was computed. [2022-11-16 11:33:17,840 INFO L895 garLoopResultBuilder]: At program point L358(line 358) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and (<= 1 ~pumpRunning~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) .cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse3) (or .cse1 .cse4 .cse6 .cse5 .cse3)))) [2022-11-16 11:33:17,840 INFO L899 garLoopResultBuilder]: For program point L358-1(line 358) no Hoare annotation was computed. [2022-11-16 11:33:17,840 INFO L899 garLoopResultBuilder]: For program point L69(lines 69 82) no Hoare annotation was computed. [2022-11-16 11:33:17,840 INFO L895 garLoopResultBuilder]: At program point L69-1(lines 54 86) the Hoare annotation is: (let ((.cse11 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0)) (.cse17 (= ~methaneLevelCritical~0 0)) (.cse12 (<= ~waterLevel~0 1)) (.cse18 (= 1 ~systemActive~0)) (.cse15 (<= |timeShift___utac_acc__Specification3_spec__1_~tmp___0~0#1| 1)) (.cse2 (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (<= |timeShift_getWaterLevel_#res#1| 1))) (let ((.cse5 (and .cse11 .cse14 .cse17 .cse12 .cse18 .cse15 .cse2 .cse3 .cse16)) (.cse7 (not (<= |old(~waterLevel~0)| 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse13 (not .cse2)) (.cse1 (not .cse18)) (.cse10 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse8 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not .cse17)) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) .cse2 .cse3) .cse4 .cse5 .cse6) (or .cse7 .cse0 .cse1 .cse4 .cse5) (or .cse7 .cse1 .cse8 .cse9 .cse10) (or (and .cse11 .cse12 .cse13) .cse1 .cse8 (and .cse14 .cse12 .cse13) .cse9 .cse6) (or .cse0 .cse1 .cse9 (and .cse14 .cse3 .cse13) .cse6) (or (and .cse14 .cse12 .cse15 .cse2 .cse10 .cse16) .cse1 (and .cse11 .cse12 .cse15 .cse2 .cse10 .cse16) .cse8 .cse4 .cse6)))) [2022-11-16 11:33:17,841 INFO L895 garLoopResultBuilder]: At program point L61(line 61) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse15 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (and .cse8 .cse13 .cse14 .cse12 .cse15)) (.cse11 (and .cse1 .cse14 .cse15)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and .cse13 .cse1 .cse14 .cse2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse3 .cse7 (and .cse8 .cse2) .cse5) (or .cse3 .cse9 .cse7 .cse10 .cse11 .cse5) (or .cse3 .cse9 .cse10 .cse11 .cse4 .cse5) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse7)))) [2022-11-16 11:33:17,841 INFO L899 garLoopResultBuilder]: For program point L61-1(line 61) no Hoare annotation was computed. [2022-11-16 11:33:17,841 INFO L895 garLoopResultBuilder]: At program point L371(line 371) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse2 .cse6 .cse3 .cse4) (or .cse2 .cse6 .cse5 .cse4))) [2022-11-16 11:33:17,841 INFO L895 garLoopResultBuilder]: At program point L371-1(lines 352 376) the Hoare annotation is: (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse1 (= ~pumpRunning~0 0)) (.cse8 (<= 1 ~pumpRunning~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (<= ~waterLevel~0 1)) (.cse12 (= 1 ~systemActive~0)) (.cse15 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (let ((.cse9 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (and .cse8 .cse13 .cse14 .cse12 .cse15)) (.cse11 (and .cse1 .cse14 .cse15)) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (and .cse13 .cse1 .cse14 .cse2)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not .cse12)) (.cse7 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (and .cse1 .cse2) .cse3 .cse4 .cse5) (or .cse6 .cse0 .cse3 .cse7 (and .cse8 .cse2) .cse5) (or .cse3 .cse9 .cse7 .cse10 .cse11 .cse5) (or .cse3 .cse9 .cse10 .cse11 .cse4 .cse5) (or .cse6 (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse3 .cse7)))) [2022-11-16 11:33:17,841 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2022-11-16 11:33:17,841 INFO L899 garLoopResultBuilder]: For program point L590(line 590) no Hoare annotation was computed. [2022-11-16 11:33:17,841 INFO L899 garLoopResultBuilder]: For program point L99(lines 99 103) no Hoare annotation was computed. [2022-11-16 11:33:17,842 INFO L895 garLoopResultBuilder]: At program point L99-2(lines 95 106) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse7)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and (<= 1 ~pumpRunning~0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= ~waterLevel~0 1) .cse7 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse2 .cse3) (or .cse0 .cse1 .cse6 .cse3) (or .cse1 .cse4 .cse6 .cse5 .cse3)))) [2022-11-16 11:33:17,842 INFO L895 garLoopResultBuilder]: At program point L591(lines 586 593) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse3) (or .cse1 .cse5 .cse2 .cse3) (or .cse1 .cse5 .cse4 .cse3))) [2022-11-16 11:33:17,842 INFO L895 garLoopResultBuilder]: At program point L426(lines 421 429) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse5) (or .cse0 (and (<= 1 ~pumpRunning~0) (not (= |timeShift_isPumpRunning_#res#1| 0)) (= |timeShift___utac_acc__Specification3_spec__1_~tmp~0#1| 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse1 .cse5 .cse3))) [2022-11-16 11:33:17,842 INFO L899 garLoopResultBuilder]: For program point L298-1(lines 297 316) no Hoare annotation was computed. [2022-11-16 11:33:17,842 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 368) no Hoare annotation was computed. [2022-11-16 11:33:17,842 INFO L899 garLoopResultBuilder]: For program point L356(lines 356 373) no Hoare annotation was computed. [2022-11-16 11:33:17,842 INFO L899 garLoopResultBuilder]: For program point L63(lines 63 83) no Hoare annotation was computed. [2022-11-16 11:33:17,843 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 294 317) the Hoare annotation is: (let ((.cse8 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse8)) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse8)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse4) (or .cse2 .cse6 .cse7 .cse3 .cse4) (or .cse2 .cse6 .cse5 .cse7 .cse4)))) [2022-11-16 11:33:17,843 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 294 317) no Hoare annotation was computed. [2022-11-16 11:33:17,843 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 590) no Hoare annotation was computed. [2022-11-16 11:33:17,843 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 189 218) no Hoare annotation was computed. [2022-11-16 11:33:17,843 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 189 218) the Hoare annotation is: true [2022-11-16 11:33:17,843 INFO L902 garLoopResultBuilder]: At program point L214(lines 189 218) the Hoare annotation is: true [2022-11-16 11:33:17,843 INFO L899 garLoopResultBuilder]: For program point L210(line 210) no Hoare annotation was computed. [2022-11-16 11:33:17,843 INFO L899 garLoopResultBuilder]: For program point L203(lines 203 207) no Hoare annotation was computed. [2022-11-16 11:33:17,844 INFO L902 garLoopResultBuilder]: At program point L203-1(lines 203 207) the Hoare annotation is: true [2022-11-16 11:33:17,844 INFO L899 garLoopResultBuilder]: For program point L200(line 200) no Hoare annotation was computed. [2022-11-16 11:33:17,844 INFO L902 garLoopResultBuilder]: At program point L199-2(lines 199 213) the Hoare annotation is: true [2022-11-16 11:33:17,844 INFO L902 garLoopResultBuilder]: At program point L195(line 195) the Hoare annotation is: true [2022-11-16 11:33:17,844 INFO L899 garLoopResultBuilder]: For program point L195-1(line 195) no Hoare annotation was computed. [2022-11-16 11:33:17,844 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 131 139) the Hoare annotation is: true [2022-11-16 11:33:17,844 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 131 139) no Hoare annotation was computed. [2022-11-16 11:33:17,844 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 131 139) no Hoare annotation was computed. [2022-11-16 11:33:17,844 INFO L895 garLoopResultBuilder]: At program point L539(lines 496 541) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse7 .cse1 .cse3 .cse4) (and .cse0 .cse7 .cse6 .cse1 .cse3))) [2022-11-16 11:33:17,844 INFO L899 garLoopResultBuilder]: For program point L506(lines 506 512) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point L506-1(lines 506 512) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point L275(lines 275 282) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point L498(lines 498 502) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point L275-2(lines 275 282) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L895 garLoopResultBuilder]: At program point L581(lines 576 584) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:33:17,845 INFO L902 garLoopResultBuilder]: At program point L259(lines 252 261) the Hoare annotation is: true [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L895 garLoopResultBuilder]: At program point L573(lines 569 575) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:33:17,845 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-16 11:33:17,845 INFO L902 garLoopResultBuilder]: At program point L284(lines 265 287) the Hoare annotation is: true [2022-11-16 11:33:17,846 INFO L899 garLoopResultBuilder]: For program point L532(lines 532 536) no Hoare annotation was computed. [2022-11-16 11:33:17,846 INFO L895 garLoopResultBuilder]: At program point L532-2(lines 526 537) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse1 .cse2 .cse3 .cse4))) [2022-11-16 11:33:17,846 INFO L899 garLoopResultBuilder]: For program point L516(lines 516 522) no Hoare annotation was computed. [2022-11-16 11:33:17,846 INFO L899 garLoopResultBuilder]: For program point L516-1(lines 516 522) no Hoare annotation was computed. [2022-11-16 11:33:17,846 INFO L902 garLoopResultBuilder]: At program point L545(lines 486 549) the Hoare annotation is: true [2022-11-16 11:33:17,846 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-16 11:33:17,846 INFO L895 garLoopResultBuilder]: At program point L508(line 508) the Hoare annotation is: (let ((.cse2 (= ~methaneLevelCritical~0 1)) (.cse5 (<= 1 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse0 (= ~pumpRunning~0 0)) (.cse7 (= ~methaneLevelCritical~0 0)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse2 .cse3) (and .cse5 .cse7 .cse1 .cse3 .cse4) (and .cse0 .cse7 .cse6 .cse1 .cse3))) [2022-11-16 11:33:17,846 INFO L895 garLoopResultBuilder]: At program point L248(lines 244 250) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:33:17,846 INFO L895 garLoopResultBuilder]: At program point L566(lines 562 568) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-16 11:33:17,847 INFO L895 garLoopResultBuilder]: At program point L542(lines 495 543) the Hoare annotation is: false [2022-11-16 11:33:17,847 INFO L899 garLoopResultBuilder]: For program point L497(lines 496 541) no Hoare annotation was computed. [2022-11-16 11:33:17,847 INFO L899 garLoopResultBuilder]: For program point L526(lines 526 537) no Hoare annotation was computed. [2022-11-16 11:33:17,847 INFO L895 garLoopResultBuilder]: At program point L518(line 518) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse5 (= ~methaneLevelCritical~0 1)) (.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse4 (<= ~waterLevel~0 2))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse2 .cse5 .cse3 .cse4) (and .cse6 .cse1 .cse2 .cse3 .cse4))) [2022-11-16 11:33:17,847 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 107 118) no Hoare annotation was computed. [2022-11-16 11:33:17,847 INFO L899 garLoopResultBuilder]: For program point L111-1(lines 107 118) no Hoare annotation was computed. [2022-11-16 11:33:17,847 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 107 118) the Hoare annotation is: (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse0 (not (<= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse5 (not (<= 1 ~pumpRunning~0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse4 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse2 .cse3 .cse5 .cse4 .cse6) (or .cse1 .cse2 .cse7 .cse4 .cse6) (or .cse0 .cse2 .cse5 .cse7 .cse4))) [2022-11-16 11:33:17,847 INFO L895 garLoopResultBuilder]: At program point L481(lines 466 484) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0 1)) (.cse11 (= 1 ~systemActive~0)) (.cse10 (= ~pumpRunning~0 0))) (let ((.cse3 (and .cse10 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|))) (.cse4 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not .cse11)) (.cse2 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse10 .cse9 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1|) .cse11 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse7 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not .cse9))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse7 .cse8) (or .cse0 .cse1 .cse2 .cse7 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse5 .cse8) (or .cse1 .cse6 .cse5 .cse8) (or .cse0 .cse1 .cse2 .cse7 .cse8)))) [2022-11-16 11:33:17,848 INFO L895 garLoopResultBuilder]: At program point L382(lines 377 384) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (<= ~waterLevel~0 2))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6) (or .cse4 .cse0 .cse2 .cse3) (or .cse4 .cse0 .cse2 (and (<= 1 ~pumpRunning~0) (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~4#1| ~methaneLevelCritical~0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) .cse5) (or .cse0 .cse1 .cse6 .cse3))) [2022-11-16 11:33:17,848 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2022-11-16 11:33:17,848 INFO L899 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2022-11-16 11:33:17,848 INFO L895 garLoopResultBuilder]: At program point L345(line 345) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse4 .cse7) (or .cse5 .cse1 .cse6 .cse2 .cse7))) [2022-11-16 11:33:17,848 INFO L899 garLoopResultBuilder]: For program point L345-1(lines 326 350) no Hoare annotation was computed. [2022-11-16 11:33:17,848 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 182) no Hoare annotation was computed. [2022-11-16 11:33:17,848 INFO L895 garLoopResultBuilder]: At program point L181(lines 172 185) the Hoare annotation is: (let ((.cse9 (<= ~waterLevel~0 1)) (.cse10 (= 1 ~systemActive~0)) (.cse11 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (and .cse11 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) .cse11 .cse9 .cse10)) (.cse0 (not .cse10)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse8 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not .cse9))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse2 .cse5 .cse6 .cse7) (or .cse4 .cse0 .cse2 .cse7 .cse3) (or .cse4 .cse0 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse0 .cse7 .cse8 .cse3) (or .cse0 .cse1 .cse8 .cse3)))) [2022-11-16 11:33:17,849 INFO L895 garLoopResultBuilder]: At program point L340(line 340) the Hoare annotation is: (let ((.cse8 (<= ~waterLevel~0 1)) (.cse9 (= 1 ~systemActive~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1| 0) (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1|) (= ~pumpRunning~0 0) .cse8 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1|) .cse9 (= |processEnvironment__wrappee__methaneQuery_~tmp~2#1| 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1| 0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse0 (not .cse9)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not .cse8))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse2 .cse6) (or .cse4 .cse0 .cse5 .cse6 .cse7) (or .cse0 .cse1 .cse7 .cse3)))) [2022-11-16 11:33:17,849 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__methaneQueryENTRY(lines 326 350) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse6 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (= 1 ~systemActive~0))) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse4 .cse5) (or .cse6 .cse2 .cse7 .cse5 .cse8) (or .cse6 .cse2 .cse7 .cse3 .cse8))) [2022-11-16 11:33:17,849 INFO L899 garLoopResultBuilder]: For program point L334(lines 334 342) no Hoare annotation was computed. [2022-11-16 11:33:17,849 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 326 350) no Hoare annotation was computed. [2022-11-16 11:33:17,849 INFO L899 garLoopResultBuilder]: For program point L330(lines 330 347) no Hoare annotation was computed. [2022-11-16 11:33:17,849 INFO L899 garLoopResultBuilder]: For program point L392(lines 392 398) no Hoare annotation was computed. [2022-11-16 11:33:17,849 INFO L895 garLoopResultBuilder]: At program point L390(line 390) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= ~waterLevel~0 2))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse7 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|) (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0) (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|) (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse3) (or .cse4 .cse0 .cse2 .cse6 .cse7) (or .cse4 .cse0 .cse2 .cse3) (or .cse0 .cse1 .cse5 .cse3) (or .cse4 .cse0 .cse6 .cse5 .cse7))) [2022-11-16 11:33:17,849 INFO L895 garLoopResultBuilder]: At program point L392-2(lines 385 401) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (= |processEnvironment__wrappee__methaneQuery_activatePump_~tmp~4#1| ~methaneLevelCritical~0)) (.cse7 (= |processEnvironment__wrappee__methaneQuery_isHighWaterSensorDry_#res#1| 0)) (.cse8 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp___0~1#1|)) (.cse9 (= |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_~tmp~5#1| 0)) (.cse10 (<= 1 |processEnvironment__wrappee__methaneQuery_~tmp~2#1|)) (.cse11 (<= 1 |processEnvironment__wrappee__methaneQuery_isHighWaterLevel_#res#1|)) (.cse12 (not (<= ~waterLevel~0 2))) (.cse5 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse3) (or .cse4 .cse0 .cse2 .cse3) (or .cse4 .cse0 .cse2 (and (<= 1 ~pumpRunning~0) .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) .cse12) (or .cse0 .cse1 .cse5 .cse3) (or .cse4 .cse0 (and .cse6 (= ~pumpRunning~0 0) .cse7 .cse8 .cse9 .cse10 .cse11) .cse12 .cse5))) [2022-11-16 11:33:17,850 INFO L899 garLoopResultBuilder]: For program point L390-1(line 390) no Hoare annotation was computed. [2022-11-16 11:33:17,850 INFO L902 garLoopResultBuilder]: At program point isMethaneAlarmENTRY(lines 410 420) the Hoare annotation is: true [2022-11-16 11:33:17,850 INFO L902 garLoopResultBuilder]: At program point L415(line 415) the Hoare annotation is: true [2022-11-16 11:33:17,850 INFO L899 garLoopResultBuilder]: For program point L415-1(line 415) no Hoare annotation was computed. [2022-11-16 11:33:17,850 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 410 420) no Hoare annotation was computed. [2022-11-16 11:33:17,850 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 410 420) no Hoare annotation was computed. [2022-11-16 11:33:17,853 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 11:33:17,855 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-16 11:33:17,892 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.11 11:33:17 BoogieIcfgContainer [2022-11-16 11:33:17,892 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-16 11:33:17,893 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-16 11:33:17,893 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-16 11:33:17,893 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-16 11:33:17,894 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 11:33:00" (3/4) ... [2022-11-16 11:33:17,897 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-16 11:33:17,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-16 11:33:17,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-16 11:33:17,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-16 11:33:17,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-16 11:33:17,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-16 11:33:17,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-16 11:33:17,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2022-11-16 11:33:17,905 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2022-11-16 11:33:17,912 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 51 nodes and edges [2022-11-16 11:33:17,912 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 22 nodes and edges [2022-11-16 11:33:17,913 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2022-11-16 11:33:17,913 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2022-11-16 11:33:17,914 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2022-11-16 11:33:17,914 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:33:17,915 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-16 11:33:17,940 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,941 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) [2022-11-16 11:33:17,941 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && tmp == methaneLevelCritical) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((tmp == methaneLevelCritical && pumpRunning == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) [2022-11-16 11:33:17,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && tmp == methaneLevelCritical) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-16 11:33:17,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-16 11:33:17,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,943 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) [2022-11-16 11:33:17,944 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) [2022-11-16 11:33:17,989 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/witness.graphml [2022-11-16 11:33:17,989 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-16 11:33:17,990 INFO L158 Benchmark]: Toolchain (without parser) took 19305.04ms. Allocated memory was 104.9MB in the beginning and 264.2MB in the end (delta: 159.4MB). Free memory was 82.2MB in the beginning and 218.0MB in the end (delta: -135.8MB). Peak memory consumption was 23.0MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,991 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 104.9MB. Free memory was 77.1MB in the beginning and 77.0MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-16 11:33:17,991 INFO L158 Benchmark]: CACSL2BoogieTranslator took 578.50ms. Allocated memory is still 104.9MB. Free memory was 81.8MB in the beginning and 71.5MB in the end (delta: 10.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,992 INFO L158 Benchmark]: Boogie Procedure Inliner took 64.33ms. Allocated memory is still 104.9MB. Free memory was 71.5MB in the beginning and 69.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,992 INFO L158 Benchmark]: Boogie Preprocessor took 69.72ms. Allocated memory is still 104.9MB. Free memory was 69.0MB in the beginning and 67.2MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,993 INFO L158 Benchmark]: RCFGBuilder took 655.08ms. Allocated memory is still 104.9MB. Free memory was 67.2MB in the beginning and 48.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,993 INFO L158 Benchmark]: TraceAbstraction took 17833.73ms. Allocated memory was 104.9MB in the beginning and 264.2MB in the end (delta: 159.4MB). Free memory was 47.8MB in the beginning and 223.3MB in the end (delta: -175.5MB). Peak memory consumption was 129.8MB. Max. memory is 16.1GB. [2022-11-16 11:33:17,994 INFO L158 Benchmark]: Witness Printer took 96.74ms. Allocated memory is still 264.2MB. Free memory was 223.3MB in the beginning and 218.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-16 11:33:18,000 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 104.9MB. Free memory was 77.1MB in the beginning and 77.0MB in the end (delta: 84.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 578.50ms. Allocated memory is still 104.9MB. Free memory was 81.8MB in the beginning and 71.5MB in the end (delta: 10.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 64.33ms. Allocated memory is still 104.9MB. Free memory was 71.5MB in the beginning and 69.0MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 69.72ms. Allocated memory is still 104.9MB. Free memory was 69.0MB in the beginning and 67.2MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 655.08ms. Allocated memory is still 104.9MB. Free memory was 67.2MB in the beginning and 48.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 17833.73ms. Allocated memory was 104.9MB in the beginning and 264.2MB in the end (delta: 159.4MB). Free memory was 47.8MB in the beginning and 223.3MB in the end (delta: -175.5MB). Peak memory consumption was 129.8MB. Max. memory is 16.1GB. * Witness Printer took 96.74ms. Allocated memory is still 264.2MB. Free memory was 223.3MB in the beginning and 218.0MB in the end (delta: 5.2MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 590]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 95 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.7s, OverallIterations: 14, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 6.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2961 SdHoareTripleChecker+Valid, 3.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2916 mSDsluCounter, 4588 SdHoareTripleChecker+Invalid, 2.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3387 mSDsCounter, 1063 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4380 IncrementalHoareTripleChecker+Invalid, 5443 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1063 mSolverCounterUnsat, 1201 mSDtfsCounter, 4380 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 701 GetRequests, 481 SyntacticMatches, 7 SemanticMatches, 213 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1657 ImplicationChecksByTransitivity, 2.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=790occurred in iteration=9, InterpolantAutomatonStates: 175, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 14 MinimizatonAttempts, 170 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 2707 PreInvPairs, 2954 NumberOfFragments, 3106 HoareAnnotationTreeSize, 2707 FomulaSimplifications, 284 FormulaSimplificationTreeSizeReduction, 0.6s HoareSimplificationTime, 43 FomulaSimplificationsInter, 9286 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 1043 NumberOfCodeBlocks, 1043 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 1122 ConstructedInterpolants, 0 QuantifiedInterpolants, 2114 SizeOfPredicates, 9 NumberOfNonLiveVariables, 1320 ConjunctsInSsa, 34 ConjunctsInUnsatCore, 18 InterpolantComputations, 13 PerfectInterpolantSequences, 212/252 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 54]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && tmp___0 <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && (((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && !(tmp == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && !(tmp == 0))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(tmp == 0))) || !(\old(waterLevel) <= 2))) && ((((((((((pumpRunning == 0 && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(waterLevel <= 2)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == \old(pumpRunning) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 252]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) || ((((1 <= pumpRunning && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0)) || ((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 2)) || ((((pumpRunning == 0 && methaneLevelCritical == 0) && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 486]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || ((((pumpRunning == 0 && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= \result)) || !(waterLevel <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((((tmp___0 == 0 && pumpRunning == \old(pumpRunning)) && 1 <= \result) && pumpRunning == 0) && waterLevel <= 1) && 1 <= tmp) && 1 == systemActive) && \result == 0)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) - InvariantResult [Line: 495]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 377]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && tmp == methaneLevelCritical) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 562]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 352]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || (1 <= pumpRunning && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 1)) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(methaneLevelCritical == 0))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((((pumpRunning == \old(pumpRunning) && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) || ((((pumpRunning == 0 && waterLevel <= 1) && tmp == 0) && waterLevel <= \old(waterLevel)) && \result <= 1))) && ((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || \result == 1)) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((1 <= pumpRunning && tmp == 0) && \old(waterLevel) == waterLevel)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && waterLevel <= 1) && tmp == 0) && \old(waterLevel) == waterLevel) && \result <= 1)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 421]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical == 0))) && ((((!(\old(pumpRunning) == 0) || (((1 <= pumpRunning && !(\result == 0)) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 244]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 586]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 95]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || ((((1 <= pumpRunning && pumpRunning == \old(pumpRunning)) && waterLevel <= 1) && 1 == systemActive) && waterLevel <= \old(waterLevel))) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 199]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 385]: Loop Invariant Derived loop invariant: (((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical == 0)) || ((((((1 <= pumpRunning && tmp == methaneLevelCritical) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((((tmp == methaneLevelCritical && pumpRunning == 0) && \result == 0) && 1 <= tmp___0) && tmp == 0) && 1 <= tmp) && 1 <= \result)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) RESULT: Ultimate proved your program to be correct! [2022-11-16 11:33:18,056 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b1af8513-ee09-41ee-a0be-61ec89e7f880/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE