./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8393723b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-8393723 [2022-11-18 20:16:43,662 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-18 20:16:43,664 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-18 20:16:43,705 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-18 20:16:43,707 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-18 20:16:43,711 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-18 20:16:43,713 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-18 20:16:43,716 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-18 20:16:43,719 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-18 20:16:43,722 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-18 20:16:43,724 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-18 20:16:43,726 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-18 20:16:43,727 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-18 20:16:43,732 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-18 20:16:43,733 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-18 20:16:43,735 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-18 20:16:43,737 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-18 20:16:43,739 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-18 20:16:43,740 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-18 20:16:43,745 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-18 20:16:43,747 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-18 20:16:43,749 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-18 20:16:43,752 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-18 20:16:43,753 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-18 20:16:43,763 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-18 20:16:43,763 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-18 20:16:43,764 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-18 20:16:43,766 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-18 20:16:43,766 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-18 20:16:43,767 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-18 20:16:43,768 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-18 20:16:43,769 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-18 20:16:43,771 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-18 20:16:43,773 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-18 20:16:43,775 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-18 20:16:43,775 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-18 20:16:43,776 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-18 20:16:43,777 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-18 20:16:43,777 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-18 20:16:43,778 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-18 20:16:43,778 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-18 20:16:43,779 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-18 20:16:43,819 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-18 20:16:43,820 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-18 20:16:43,820 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-18 20:16:43,820 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-18 20:16:43,821 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-18 20:16:43,821 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-18 20:16:43,822 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-18 20:16:43,822 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-18 20:16:43,822 INFO L138 SettingsManager]: * Use SBE=true [2022-11-18 20:16:43,823 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-18 20:16:43,824 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-18 20:16:43,824 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-18 20:16:43,824 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-18 20:16:43,824 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-18 20:16:43,824 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-18 20:16:43,825 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-18 20:16:43,826 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-18 20:16:43,826 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-18 20:16:43,826 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-18 20:16:43,826 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:16:43,826 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-18 20:16:43,828 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-18 20:16:43,828 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-18 20:16:43,828 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-18 20:16:43,829 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-18 20:16:43,829 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-18 20:16:43,829 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-18 20:16:43,829 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-18 20:16:43,829 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 [2022-11-18 20:16:44,184 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-18 20:16:44,212 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-18 20:16:44,216 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-18 20:16:44,218 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-18 20:16:44,218 INFO L275 PluginConnector]: CDTParser initialized [2022-11-18 20:16:44,220 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2022-11-18 20:16:44,287 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/data/ad3e67a49/a54ca0aa8abc424dae13ec04b5c750e5/FLAG815e44dad [2022-11-18 20:16:44,813 INFO L306 CDTParser]: Found 1 translation units. [2022-11-18 20:16:44,816 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2022-11-18 20:16:44,833 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/data/ad3e67a49/a54ca0aa8abc424dae13ec04b5c750e5/FLAG815e44dad [2022-11-18 20:16:45,128 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/data/ad3e67a49/a54ca0aa8abc424dae13ec04b5c750e5 [2022-11-18 20:16:45,131 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-18 20:16:45,134 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-18 20:16:45,138 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-18 20:16:45,138 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-18 20:16:45,142 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-18 20:16:45,143 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,145 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@18065422 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45, skipping insertion in model container [2022-11-18 20:16:45,145 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,153 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-18 20:16:45,213 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-18 20:16:45,488 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2022-11-18 20:16:45,516 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:16:45,524 INFO L203 MainTranslator]: Completed pre-run [2022-11-18 20:16:45,576 WARN L234 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2022-11-18 20:16:45,592 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-18 20:16:45,613 INFO L208 MainTranslator]: Completed translation [2022-11-18 20:16:45,613 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45 WrapperNode [2022-11-18 20:16:45,614 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-18 20:16:45,615 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-18 20:16:45,616 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-18 20:16:45,616 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-18 20:16:45,623 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,647 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,686 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 227 [2022-11-18 20:16:45,687 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-18 20:16:45,687 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-18 20:16:45,687 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-18 20:16:45,688 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-18 20:16:45,696 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,697 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,709 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,716 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,725 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,729 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,736 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,738 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,740 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-18 20:16:45,741 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-18 20:16:45,745 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-18 20:16:45,745 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-18 20:16:45,752 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (1/1) ... [2022-11-18 20:16:45,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-18 20:16:45,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:16:45,783 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-18 20:16:45,793 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-18 20:16:45,825 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-18 20:16:45,825 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-18 20:16:45,826 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-18 20:16:45,826 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-18 20:16:45,826 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-18 20:16:45,826 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-18 20:16:45,826 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-18 20:16:45,826 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-18 20:16:45,826 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-18 20:16:45,827 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:16:45,827 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:16:45,827 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-18 20:16:45,827 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-18 20:16:45,827 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-18 20:16:45,827 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-18 20:16:45,828 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-18 20:16:45,828 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-18 20:16:45,828 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-18 20:16:45,906 INFO L235 CfgBuilder]: Building ICFG [2022-11-18 20:16:45,909 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-18 20:16:46,267 INFO L276 CfgBuilder]: Performing block encoding [2022-11-18 20:16:46,278 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-18 20:16:46,291 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-18 20:16:46,293 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:16:46 BoogieIcfgContainer [2022-11-18 20:16:46,294 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-18 20:16:46,296 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-18 20:16:46,296 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-18 20:16:46,301 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-18 20:16:46,301 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 18.11 08:16:45" (1/3) ... [2022-11-18 20:16:46,302 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4013ebe5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:16:46, skipping insertion in model container [2022-11-18 20:16:46,302 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 08:16:45" (2/3) ... [2022-11-18 20:16:46,302 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4013ebe5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 18.11 08:16:46, skipping insertion in model container [2022-11-18 20:16:46,303 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:16:46" (3/3) ... [2022-11-18 20:16:46,304 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product58.cil.c [2022-11-18 20:16:46,332 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-18 20:16:46,332 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-18 20:16:46,408 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-18 20:16:46,415 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@a207f4c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-18 20:16:46,416 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-18 20:16:46,421 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-18 20:16:46,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-18 20:16:46,431 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:46,432 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:46,432 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:46,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:46,438 INFO L85 PathProgramCache]: Analyzing trace with hash -1031602919, now seen corresponding path program 1 times [2022-11-18 20:16:46,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:46,448 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1507929515] [2022-11-18 20:16:46,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:46,449 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:46,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:46,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-18 20:16:46,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:46,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:46,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:46,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1507929515] [2022-11-18 20:16:46,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1507929515] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:46,628 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:46,628 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-18 20:16:46,629 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004101412] [2022-11-18 20:16:46,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:46,634 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-18 20:16:46,635 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:46,661 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-18 20:16:46,662 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:16:46,664 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:46,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:46,700 INFO L93 Difference]: Finished difference Result 180 states and 245 transitions. [2022-11-18 20:16:46,701 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-18 20:16:46,702 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-18 20:16:46,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:46,711 INFO L225 Difference]: With dead ends: 180 [2022-11-18 20:16:46,712 INFO L226 Difference]: Without dead ends: 85 [2022-11-18 20:16:46,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-18 20:16:46,718 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:46,720 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:16:46,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-18 20:16:46,780 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-18 20:16:46,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-18 20:16:46,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-18 20:16:46,786 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-11-18 20:16:46,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:46,786 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-18 20:16:46,787 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:46,787 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-18 20:16:46,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-18 20:16:46,790 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:46,790 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:46,790 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-18 20:16:46,790 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:46,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:46,791 INFO L85 PathProgramCache]: Analyzing trace with hash -1999893422, now seen corresponding path program 1 times [2022-11-18 20:16:46,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:46,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1324745813] [2022-11-18 20:16:46,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:46,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:46,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:46,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-18 20:16:46,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:46,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:46,916 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:46,917 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1324745813] [2022-11-18 20:16:46,917 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1324745813] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:46,917 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:46,917 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:16:46,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702424656] [2022-11-18 20:16:46,918 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:46,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:16:46,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:46,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:16:46,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:16:46,920 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:46,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:46,962 INFO L93 Difference]: Finished difference Result 135 states and 175 transitions. [2022-11-18 20:16:46,963 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:16:46,964 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-18 20:16:46,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:46,966 INFO L225 Difference]: With dead ends: 135 [2022-11-18 20:16:46,966 INFO L226 Difference]: Without dead ends: 76 [2022-11-18 20:16:46,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:16:46,968 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:46,968 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:16:46,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-18 20:16:46,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-18 20:16:46,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 20:16:46,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-11-18 20:16:46,994 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-11-18 20:16:46,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:46,995 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-11-18 20:16:46,996 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:46,996 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-11-18 20:16:46,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-18 20:16:46,999 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:46,999 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:46,999 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-18 20:16:47,000 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:47,000 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:47,001 INFO L85 PathProgramCache]: Analyzing trace with hash -2069285612, now seen corresponding path program 1 times [2022-11-18 20:16:47,001 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:47,002 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1568686689] [2022-11-18 20:16:47,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:47,003 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:47,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:16:47,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:47,163 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:47,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1568686689] [2022-11-18 20:16:47,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1568686689] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:47,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:47,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-18 20:16:47,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1606238048] [2022-11-18 20:16:47,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:47,165 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-18 20:16:47,165 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:47,166 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-18 20:16:47,166 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:16:47,166 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:47,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:47,213 INFO L93 Difference]: Finished difference Result 145 states and 190 transitions. [2022-11-18 20:16:47,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-18 20:16:47,217 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-18 20:16:47,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:47,218 INFO L225 Difference]: With dead ends: 145 [2022-11-18 20:16:47,219 INFO L226 Difference]: Without dead ends: 76 [2022-11-18 20:16:47,219 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-18 20:16:47,221 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:47,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 96 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-18 20:16:47,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-18 20:16:47,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-18 20:16:47,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-18 20:16:47,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-11-18 20:16:47,247 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2022-11-18 20:16:47,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:47,247 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-11-18 20:16:47,248 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-18 20:16:47,248 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-11-18 20:16:47,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-18 20:16:47,249 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:47,249 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:47,250 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-18 20:16:47,250 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:47,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:47,250 INFO L85 PathProgramCache]: Analyzing trace with hash -513760969, now seen corresponding path program 1 times [2022-11-18 20:16:47,251 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:47,259 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [575769369] [2022-11-18 20:16:47,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:47,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:47,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:16:47,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-18 20:16:47,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,394 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-18 20:16:47,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,398 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:47,398 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:47,398 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [575769369] [2022-11-18 20:16:47,399 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [575769369] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:47,399 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:47,399 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-18 20:16:47,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [999599816] [2022-11-18 20:16:47,400 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:47,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-18 20:16:47,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:47,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-18 20:16:47,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-18 20:16:47,401 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:16:47,677 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:47,678 INFO L93 Difference]: Finished difference Result 224 states and 286 transitions. [2022-11-18 20:16:47,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:16:47,679 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-11-18 20:16:47,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:47,687 INFO L225 Difference]: With dead ends: 224 [2022-11-18 20:16:47,688 INFO L226 Difference]: Without dead ends: 155 [2022-11-18 20:16:47,692 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-18 20:16:47,696 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 185 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:47,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 302 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:16:47,703 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-11-18 20:16:47,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 149. [2022-11-18 20:16:47,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 125 states have internal predecessors, (149), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-11-18 20:16:47,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 184 transitions. [2022-11-18 20:16:47,740 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 184 transitions. Word has length 41 [2022-11-18 20:16:47,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:47,741 INFO L495 AbstractCegarLoop]: Abstraction has 149 states and 184 transitions. [2022-11-18 20:16:47,741 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-18 20:16:47,742 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 184 transitions. [2022-11-18 20:16:47,745 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:16:47,746 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:47,746 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:47,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-18 20:16:47,746 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:47,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:47,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1561264077, now seen corresponding path program 1 times [2022-11-18 20:16:47,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:47,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1390463955] [2022-11-18 20:16:47,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:47,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:47,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:16:47,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:47,988 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:47,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-18 20:16:48,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:48,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:48,009 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1390463955] [2022-11-18 20:16:48,009 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1390463955] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:48,010 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:48,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:16:48,014 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [862160160] [2022-11-18 20:16:48,014 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:48,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:16:48,017 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:48,018 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:16:48,018 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:16:48,018 INFO L87 Difference]: Start difference. First operand 149 states and 184 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:16:48,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:48,227 INFO L93 Difference]: Finished difference Result 309 states and 384 transitions. [2022-11-18 20:16:48,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:16:48,228 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-18 20:16:48,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:48,232 INFO L225 Difference]: With dead ends: 309 [2022-11-18 20:16:48,232 INFO L226 Difference]: Without dead ends: 167 [2022-11-18 20:16:48,234 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:16:48,237 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 103 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:48,240 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 369 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:16:48,241 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-18 20:16:48,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 152. [2022-11-18 20:16:48,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 120 states have (on average 1.2666666666666666) internal successors, (152), 128 states have internal predecessors, (152), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-11-18 20:16:48,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 187 transitions. [2022-11-18 20:16:48,279 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 187 transitions. Word has length 47 [2022-11-18 20:16:48,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:48,281 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 187 transitions. [2022-11-18 20:16:48,281 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:16:48,281 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 187 transitions. [2022-11-18 20:16:48,287 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-18 20:16:48,287 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:48,287 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:48,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-18 20:16:48,288 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:48,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:48,288 INFO L85 PathProgramCache]: Analyzing trace with hash 1342409359, now seen corresponding path program 1 times [2022-11-18 20:16:48,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:48,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852337] [2022-11-18 20:16:48,289 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:48,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:48,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:16:48,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,433 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:48,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-18 20:16:48,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,451 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:48,452 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:48,452 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852337] [2022-11-18 20:16:48,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852337] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:48,452 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:48,452 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:16:48,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [317851747] [2022-11-18 20:16:48,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:48,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:16:48,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:48,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:16:48,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:16:48,455 INFO L87 Difference]: Start difference. First operand 152 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:16:48,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:48,748 INFO L93 Difference]: Finished difference Result 396 states and 506 transitions. [2022-11-18 20:16:48,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-18 20:16:48,748 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-18 20:16:48,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:48,754 INFO L225 Difference]: With dead ends: 396 [2022-11-18 20:16:48,754 INFO L226 Difference]: Without dead ends: 251 [2022-11-18 20:16:48,755 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:16:48,759 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 131 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:48,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 388 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:16:48,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-11-18 20:16:48,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 243. [2022-11-18 20:16:48,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 191 states have (on average 1.2513089005235603) internal successors, (239), 202 states have internal predecessors, (239), 26 states have call successors, (26), 23 states have call predecessors, (26), 25 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-11-18 20:16:48,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 301 transitions. [2022-11-18 20:16:48,804 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 301 transitions. Word has length 47 [2022-11-18 20:16:48,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:48,804 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 301 transitions. [2022-11-18 20:16:48,805 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-18 20:16:48,805 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 301 transitions. [2022-11-18 20:16:48,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-18 20:16:48,806 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:48,806 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:48,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-18 20:16:48,807 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:48,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:48,808 INFO L85 PathProgramCache]: Analyzing trace with hash 2094412649, now seen corresponding path program 1 times [2022-11-18 20:16:48,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:48,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1867704093] [2022-11-18 20:16:48,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:48,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:48,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,896 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:48,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:16:48,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:48,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-18 20:16:48,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:48,922 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:48,922 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:48,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1867704093] [2022-11-18 20:16:48,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1867704093] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:48,923 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:48,923 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:16:48,923 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1025176639] [2022-11-18 20:16:48,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:48,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:16:48,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:48,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:16:48,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:16:48,925 INFO L87 Difference]: Start difference. First operand 243 states and 301 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:49,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:49,493 INFO L93 Difference]: Finished difference Result 583 states and 754 transitions. [2022-11-18 20:16:49,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-18 20:16:49,494 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-18 20:16:49,495 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:49,501 INFO L225 Difference]: With dead ends: 583 [2022-11-18 20:16:49,502 INFO L226 Difference]: Without dead ends: 438 [2022-11-18 20:16:49,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-18 20:16:49,506 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 306 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 342 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 342 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:49,507 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [309 Valid, 397 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 342 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-11-18 20:16:49,509 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 438 states. [2022-11-18 20:16:49,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 438 to 404. [2022-11-18 20:16:49,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 318 states have (on average 1.229559748427673) internal successors, (391), 338 states have internal predecessors, (391), 42 states have call successors, (42), 34 states have call predecessors, (42), 43 states have return successors, (69), 43 states have call predecessors, (69), 42 states have call successors, (69) [2022-11-18 20:16:49,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 502 transitions. [2022-11-18 20:16:49,576 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 502 transitions. Word has length 51 [2022-11-18 20:16:49,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:49,578 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 502 transitions. [2022-11-18 20:16:49,578 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:49,578 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 502 transitions. [2022-11-18 20:16:49,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-18 20:16:49,580 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:49,580 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:49,581 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-18 20:16:49,581 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:49,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:49,581 INFO L85 PathProgramCache]: Analyzing trace with hash 1960399143, now seen corresponding path program 1 times [2022-11-18 20:16:49,582 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:49,582 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1658157971] [2022-11-18 20:16:49,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:49,582 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:49,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:49,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:49,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:49,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:16:49,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:49,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:49,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:49,712 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-18 20:16:49,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:49,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:49,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:49,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1658157971] [2022-11-18 20:16:49,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1658157971] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:49,716 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:49,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-18 20:16:49,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [658673510] [2022-11-18 20:16:49,716 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:49,717 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-18 20:16:49,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:49,718 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-18 20:16:49,718 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-18 20:16:49,718 INFO L87 Difference]: Start difference. First operand 404 states and 502 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:50,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:50,028 INFO L93 Difference]: Finished difference Result 736 states and 919 transitions. [2022-11-18 20:16:50,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-18 20:16:50,029 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-18 20:16:50,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:50,032 INFO L225 Difference]: With dead ends: 736 [2022-11-18 20:16:50,033 INFO L226 Difference]: Without dead ends: 426 [2022-11-18 20:16:50,034 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-18 20:16:50,034 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 149 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:50,035 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 336 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-18 20:16:50,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2022-11-18 20:16:50,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 398. [2022-11-18 20:16:50,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 398 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 333 states have internal predecessors, (385), 41 states have call successors, (41), 33 states have call predecessors, (41), 42 states have return successors, (68), 42 states have call predecessors, (68), 41 states have call successors, (68) [2022-11-18 20:16:50,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 494 transitions. [2022-11-18 20:16:50,083 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 494 transitions. Word has length 51 [2022-11-18 20:16:50,083 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:50,084 INFO L495 AbstractCegarLoop]: Abstraction has 398 states and 494 transitions. [2022-11-18 20:16:50,084 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:50,084 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 494 transitions. [2022-11-18 20:16:50,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-18 20:16:50,085 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:50,086 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:50,086 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-18 20:16:50,086 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:50,086 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:50,087 INFO L85 PathProgramCache]: Analyzing trace with hash -1800767755, now seen corresponding path program 1 times [2022-11-18 20:16:50,087 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:50,087 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [839504570] [2022-11-18 20:16:50,087 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:50,087 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:50,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:50,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:16:50,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:50,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-18 20:16:50,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,348 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 20:16:50,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:50,348 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [839504570] [2022-11-18 20:16:50,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [839504570] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:16:50,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [212584250] [2022-11-18 20:16:50,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:50,349 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:16:50,350 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:16:50,355 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:16:50,363 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-18 20:16:50,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:50,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-18 20:16:50,473 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:16:50,887 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-18 20:16:50,887 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-18 20:16:50,888 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [212584250] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:50,888 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-18 20:16:50,888 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-11-18 20:16:50,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173087097] [2022-11-18 20:16:50,889 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:50,889 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:16:50,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:50,890 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:16:50,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-18 20:16:50,890 INFO L87 Difference]: Start difference. First operand 398 states and 494 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:51,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:51,119 INFO L93 Difference]: Finished difference Result 1163 states and 1470 transitions. [2022-11-18 20:16:51,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-18 20:16:51,120 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-18 20:16:51,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:51,126 INFO L225 Difference]: With dead ends: 1163 [2022-11-18 20:16:51,126 INFO L226 Difference]: Without dead ends: 772 [2022-11-18 20:16:51,128 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=170, Unknown=0, NotChecked=0, Total=210 [2022-11-18 20:16:51,130 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 64 mSDsluCounter, 378 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:51,131 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 482 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-18 20:16:51,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2022-11-18 20:16:51,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 770. [2022-11-18 20:16:51,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 606 states have (on average 1.2145214521452146) internal successors, (736), 640 states have internal predecessors, (736), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (138), 82 states have call predecessors, (138), 81 states have call successors, (138) [2022-11-18 20:16:51,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 955 transitions. [2022-11-18 20:16:51,239 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 955 transitions. Word has length 56 [2022-11-18 20:16:51,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:51,239 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 955 transitions. [2022-11-18 20:16:51,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:51,240 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 955 transitions. [2022-11-18 20:16:51,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-18 20:16:51,242 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:51,243 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:51,259 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-18 20:16:51,458 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:16:51,459 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:51,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:51,459 INFO L85 PathProgramCache]: Analyzing trace with hash 804933449, now seen corresponding path program 1 times [2022-11-18 20:16:51,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:51,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [531958659] [2022-11-18 20:16:51,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:51,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:51,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:51,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:51,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:51,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-18 20:16:51,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:51,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:51,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:51,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-18 20:16:51,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:51,593 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-18 20:16:51,593 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:51,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [531958659] [2022-11-18 20:16:51,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [531958659] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:51,594 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:51,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-18 20:16:51,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1950251093] [2022-11-18 20:16:51,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:51,595 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-18 20:16:51,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:51,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-18 20:16:51,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-18 20:16:51,596 INFO L87 Difference]: Start difference. First operand 770 states and 955 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:52,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:52,120 INFO L93 Difference]: Finished difference Result 1547 states and 1916 transitions. [2022-11-18 20:16:52,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-18 20:16:52,120 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-18 20:16:52,121 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:52,126 INFO L225 Difference]: With dead ends: 1547 [2022-11-18 20:16:52,126 INFO L226 Difference]: Without dead ends: 784 [2022-11-18 20:16:52,129 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2022-11-18 20:16:52,130 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 219 mSDsluCounter, 367 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:52,131 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [222 Valid, 487 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-18 20:16:52,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 784 states. [2022-11-18 20:16:52,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 784 to 770. [2022-11-18 20:16:52,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 606 states have (on average 1.198019801980198) internal successors, (726), 640 states have internal predecessors, (726), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (123), 82 states have call predecessors, (123), 81 states have call successors, (123) [2022-11-18 20:16:52,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 930 transitions. [2022-11-18 20:16:52,209 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 930 transitions. Word has length 57 [2022-11-18 20:16:52,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:52,210 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 930 transitions. [2022-11-18 20:16:52,210 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-18 20:16:52,211 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 930 transitions. [2022-11-18 20:16:52,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-18 20:16:52,212 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:52,212 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:52,213 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-18 20:16:52,213 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:52,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:52,214 INFO L85 PathProgramCache]: Analyzing trace with hash 1321374617, now seen corresponding path program 1 times [2022-11-18 20:16:52,214 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:52,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [782582347] [2022-11-18 20:16:52,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:52,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:52,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:52,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-18 20:16:52,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-18 20:16:52,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:52,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-18 20:16:52,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:52,410 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-18 20:16:52,410 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:52,410 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [782582347] [2022-11-18 20:16:52,411 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [782582347] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-18 20:16:52,411 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-18 20:16:52,411 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-18 20:16:52,411 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1914700653] [2022-11-18 20:16:52,411 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-18 20:16:52,412 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-18 20:16:52,412 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:52,413 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-18 20:16:52,413 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2022-11-18 20:16:52,413 INFO L87 Difference]: Start difference. First operand 770 states and 930 transitions. Second operand has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:16:54,047 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:54,048 INFO L93 Difference]: Finished difference Result 1873 states and 2319 transitions. [2022-11-18 20:16:54,048 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-18 20:16:54,049 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-18 20:16:54,049 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:54,054 INFO L225 Difference]: With dead ends: 1873 [2022-11-18 20:16:54,055 INFO L226 Difference]: Without dead ends: 1110 [2022-11-18 20:16:54,059 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=491, Invalid=1765, Unknown=0, NotChecked=0, Total=2256 [2022-11-18 20:16:54,060 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 441 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 1408 mSolverCounterSat, 187 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 446 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 1595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 187 IncrementalHoareTripleChecker+Valid, 1408 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:54,061 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [446 Valid, 385 Invalid, 1595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [187 Valid, 1408 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-11-18 20:16:54,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1110 states. [2022-11-18 20:16:54,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1110 to 738. [2022-11-18 20:16:54,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 738 states, 574 states have (on average 1.1672473867595818) internal successors, (670), 608 states have internal predecessors, (670), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (117), 82 states have call predecessors, (117), 81 states have call successors, (117) [2022-11-18 20:16:54,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 868 transitions. [2022-11-18 20:16:54,139 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 868 transitions. Word has length 60 [2022-11-18 20:16:54,139 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:54,140 INFO L495 AbstractCegarLoop]: Abstraction has 738 states and 868 transitions. [2022-11-18 20:16:54,140 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-18 20:16:54,140 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 868 transitions. [2022-11-18 20:16:54,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-18 20:16:54,143 INFO L187 NwaCegarLoop]: Found error trace [2022-11-18 20:16:54,143 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:16:54,143 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-18 20:16:54,144 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-18 20:16:54,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-18 20:16:54,144 INFO L85 PathProgramCache]: Analyzing trace with hash 981971162, now seen corresponding path program 1 times [2022-11-18 20:16:54,144 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-18 20:16:54,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1926735882] [2022-11-18 20:16:54,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:54,145 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-18 20:16:54,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-18 20:16:54,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-18 20:16:54,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-18 20:16:54,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,247 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-18 20:16:54,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-18 20:16:54,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-18 20:16:54,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,254 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-18 20:16:54,254 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-18 20:16:54,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1926735882] [2022-11-18 20:16:54,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1926735882] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-18 20:16:54,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [165869220] [2022-11-18 20:16:54,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-18 20:16:54,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-18 20:16:54,255 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 [2022-11-18 20:16:54,256 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-18 20:16:54,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-18 20:16:54,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-18 20:16:54,362 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-18 20:16:54,366 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-18 20:16:54,571 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-18 20:16:54,571 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-18 20:16:54,949 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-18 20:16:54,949 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [165869220] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-18 20:16:54,949 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-18 20:16:54,949 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2022-11-18 20:16:54,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979715196] [2022-11-18 20:16:54,950 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-18 20:16:54,950 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-18 20:16:54,950 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-18 20:16:54,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-18 20:16:54,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2022-11-18 20:16:54,952 INFO L87 Difference]: Start difference. First operand 738 states and 868 transitions. Second operand has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-18 20:16:56,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-18 20:16:56,113 INFO L93 Difference]: Finished difference Result 1495 states and 1837 transitions. [2022-11-18 20:16:56,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-18 20:16:56,114 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 89 [2022-11-18 20:16:56,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-18 20:16:56,115 INFO L225 Difference]: With dead ends: 1495 [2022-11-18 20:16:56,115 INFO L226 Difference]: Without dead ends: 0 [2022-11-18 20:16:56,119 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 239 GetRequests, 188 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 385 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=628, Invalid=1442, Unknown=0, NotChecked=0, Total=2070 [2022-11-18 20:16:56,120 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 539 mSDsluCounter, 498 mSDsCounter, 0 mSdLazyCounter, 725 mSolverCounterSat, 191 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 541 SdHoareTripleChecker+Valid, 574 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 191 IncrementalHoareTripleChecker+Valid, 725 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-11-18 20:16:56,120 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [541 Valid, 574 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [191 Valid, 725 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-11-18 20:16:56,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-18 20:16:56,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-18 20:16:56,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-18 20:16:56,121 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-18 20:16:56,122 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 89 [2022-11-18 20:16:56,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-18 20:16:56,122 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-18 20:16:56,122 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-18 20:16:56,123 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-18 20:16:56,123 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-18 20:16:56,125 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-18 20:16:56,140 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-18 20:16:56,340 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-18 20:16:56,343 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-18 20:17:06,310 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2022-11-18 20:17:06,310 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2022-11-18 20:17:06,310 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 596 607) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~pumpRunning~0 1))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse7 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse8 (not (<= 0 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse3 .cse6 .cse7 .cse8) (or .cse0 .cse2 .cse3 .cse6 .cse7 .cse8))) [2022-11-18 20:17:06,310 INFO L899 garLoopResultBuilder]: For program point L600-1(lines 596 607) no Hoare annotation was computed. [2022-11-18 20:17:06,311 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 596 607) no Hoare annotation was computed. [2022-11-18 20:17:06,311 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 608 616) the Hoare annotation is: true [2022-11-18 20:17:06,311 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 608 616) no Hoare annotation was computed. [2022-11-18 20:17:06,311 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 608 616) no Hoare annotation was computed. [2022-11-18 20:17:06,311 INFO L899 garLoopResultBuilder]: For program point L576(lines 576 580) no Hoare annotation was computed. [2022-11-18 20:17:06,311 INFO L895 garLoopResultBuilder]: At program point L576-2(lines 572 583) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7 .cse4) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse7 .cse4) (or .cse5 .cse1 .cse6 .cse2 .cse3 .cse4))) [2022-11-18 20:17:06,312 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse11 (= ~pumpRunning~0 1)) (.cse5 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse1 .cse2 .cse8) (or .cse5 .cse0 .cse6 .cse7 .cse8 (and .cse9 .cse10 .cse3 .cse11)) (or (and .cse9 .cse10 .cse11) .cse5 .cse0 .cse2 .cse8))) [2022-11-18 20:17:06,312 INFO L895 garLoopResultBuilder]: At program point L560(lines 555 562) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse0 .cse4 .cse5 .cse3) (or .cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3))) [2022-11-18 20:17:06,312 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 781 804) no Hoare annotation was computed. [2022-11-18 20:17:06,313 INFO L895 garLoopResultBuilder]: At program point L895(lines 890 897) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse8 .cse9 .cse5) (or .cse0 .cse1 .cse9 .cse7 (and .cse3 .cse4)) (or .cse10 .cse0 .cse2 .cse6 .cse7) (or .cse10 .cse8 .cse9 .cse7))) [2022-11-18 20:17:06,313 INFO L895 garLoopResultBuilder]: At program point L668(lines 663 671) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7 .cse4) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse7 .cse4) (or .cse5 .cse1 .cse6 .cse2 .cse3 .cse4))) [2022-11-18 20:17:06,313 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse7 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3) (or .cse6 .cse7 .cse0 .cse4 .cse5 .cse3))) [2022-11-18 20:17:06,314 INFO L895 garLoopResultBuilder]: At program point L858-1(lines 839 863) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 1))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse2 .cse14)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (and .cse1 .cse10 .cse13)) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse10 .cse13 .cse14))) (and (or .cse0 (and .cse1 .cse2) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (or (and .cse1 .cse10 .cse2) .cse0 .cse6 .cse11 .cse12 .cse4 .cse5) (or .cse6 .cse7 .cse11 .cse8 .cse12 .cse4 .cse9)))) [2022-11-18 20:17:06,314 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2022-11-18 20:17:06,314 INFO L899 garLoopResultBuilder]: For program point L982(lines 982 986) no Hoare annotation was computed. [2022-11-18 20:17:06,314 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-11-18 20:17:06,314 INFO L899 garLoopResultBuilder]: For program point L982-2(lines 982 986) no Hoare annotation was computed. [2022-11-18 20:17:06,314 INFO L899 garLoopResultBuilder]: For program point L689(lines 689 702) no Hoare annotation was computed. [2022-11-18 20:17:06,315 INFO L895 garLoopResultBuilder]: At program point L689-1(lines 674 706) the Hoare annotation is: (let ((.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse9 (not (= 1 ~systemActive~0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse12 (not (<= ~methaneLevelCritical~0 0))) (.cse13 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (and .cse0 .cse1 .cse2) .cse3 (and .cse4 .cse0 .cse1) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse5 .cse6) (or (and .cse4 .cse0 .cse7 .cse8) .cse9 .cse10 .cse5 .cse6 (and .cse11 .cse0 .cse7 .cse8 .cse2)) (or (and .cse4 .cse7 .cse1) .cse3 .cse9 .cse12 .cse13 .cse6 (and .cse1 .cse2)) (or (and .cse11 .cse7 .cse2) .cse9 .cse10 .cse12 .cse13 .cse6 (and .cse4 .cse7)) (or (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse10 .cse12 .cse13 .cse8))) [2022-11-18 20:17:06,315 INFO L895 garLoopResultBuilder]: At program point L681(line 681) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 1))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse2 .cse14)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (and .cse1 .cse10 .cse13)) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse10 .cse13 .cse14))) (and (or .cse0 (and .cse1 .cse2) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (or (and .cse1 .cse10 .cse2) .cse0 .cse6 .cse11 .cse12 .cse4 .cse5) (or .cse6 .cse7 .cse11 .cse8 .cse12 .cse4 .cse9)))) [2022-11-18 20:17:06,315 INFO L899 garLoopResultBuilder]: For program point L681-1(line 681) no Hoare annotation was computed. [2022-11-18 20:17:06,315 INFO L899 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2022-11-18 20:17:06,315 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2022-11-18 20:17:06,316 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-11-18 20:17:06,316 INFO L895 garLoopResultBuilder]: At program point L645(lines 640 648) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse1 .cse4 .cse5 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse7) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse8 .cse9 .cse10) .cse0 .cse1 .cse2 .cse3 .cse6 (and .cse10 .cse11))) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse5 .cse6) (let ((.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse9 .cse12 .cse7 .cse11) .cse4 .cse2 (and .cse8 .cse9 .cse12 .cse7) .cse3 .cse6)))) [2022-11-18 20:17:06,316 INFO L895 garLoopResultBuilder]: At program point L988(lines 973 991) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse9 (<= ~waterLevel~0 1)) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (= ~pumpRunning~0 1)) (.cse5 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse5 .cse0 (and .cse9 .cse10) .cse2 .cse8) (or .cse4 .cse1 .cse2 .cse8) (or (and .cse9 .cse3 .cse10) .cse5 .cse0 .cse6 .cse7 .cse8))) [2022-11-18 20:17:06,317 INFO L895 garLoopResultBuilder]: At program point L914(lines 909 917) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3) (or .cse6 .cse0 .cse4 .cse5 .cse3 (and (= |timeShift_isPumpRunning_#res#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse4 .cse5))) [2022-11-18 20:17:06,317 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 781 804) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (and .cse9 (= ~pumpRunning~0 1))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and (= ~pumpRunning~0 0) .cse9)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse4 .cse5) (or .cse7 .cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse6 .cse4) (or .cse7 .cse8 .cse0 .cse2 .cse3 .cse4)))) [2022-11-18 20:17:06,317 INFO L899 garLoopResultBuilder]: For program point L559(line 559) no Hoare annotation was computed. [2022-11-18 20:17:06,317 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 703) no Hoare annotation was computed. [2022-11-18 20:17:06,317 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2022-11-18 20:17:06,318 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 559) no Hoare annotation was computed. [2022-11-18 20:17:06,318 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-18 20:17:06,318 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-18 20:17:06,318 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-18 20:17:06,318 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-18 20:17:06,318 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-18 20:17:06,319 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-18 20:17:06,319 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-18 20:17:06,319 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-18 20:17:06,319 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-18 20:17:06,319 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-18 20:17:06,319 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2022-11-18 20:17:06,320 INFO L895 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 20:17:06,320 INFO L899 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2022-11-18 20:17:06,320 INFO L899 garLoopResultBuilder]: For program point L721(lines 721 725) no Hoare annotation was computed. [2022-11-18 20:17:06,320 INFO L895 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 20:17:06,320 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-18 20:17:06,320 INFO L895 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2022-11-18 20:17:06,320 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-18 20:17:06,321 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-18 20:17:06,321 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-18 20:17:06,321 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-18 20:17:06,321 INFO L895 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 20:17:06,321 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2022-11-18 20:17:06,321 INFO L899 garLoopResultBuilder]: For program point L739-1(lines 739 745) no Hoare annotation was computed. [2022-11-18 20:17:06,322 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-18 20:17:06,322 INFO L895 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (<= ~waterLevel~0 1) .cse0 .cse6 .cse2 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-18 20:17:06,322 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-18 20:17:06,322 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (<= ~waterLevel~0 1) .cse0 .cse6 .cse2 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-18 20:17:06,322 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-18 20:17:06,323 INFO L899 garLoopResultBuilder]: For program point L757(lines 757 761) no Hoare annotation was computed. [2022-11-18 20:17:06,323 INFO L895 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-18 20:17:06,323 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-18 20:17:06,323 INFO L899 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2022-11-18 20:17:06,323 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 762) no Hoare annotation was computed. [2022-11-18 20:17:06,323 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-18 20:17:06,324 INFO L895 garLoopResultBuilder]: At program point L997(lines 992 999) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-18 20:17:06,324 INFO L902 garLoopResultBuilder]: At program point L770(lines 709 774) the Hoare annotation is: true [2022-11-18 20:17:06,324 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 813 837) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse3 .cse4) (or .cse7 .cse8 .cse0 .cse5 .cse9 .cse6) (or .cse7 .cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse9 .cse2))) [2022-11-18 20:17:06,324 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse3 .cse4) (or .cse7 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse8 .cse2) (or .cse7 .cse0 .cse5 .cse8 .cse6))) [2022-11-18 20:17:06,324 INFO L899 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2022-11-18 20:17:06,325 INFO L899 garLoopResultBuilder]: For program point L880(lines 880 886) no Hoare annotation was computed. [2022-11-18 20:17:06,325 INFO L895 garLoopResultBuilder]: At program point L880-2(lines 873 889) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse10 (= ~pumpRunning~0 1)) (.cse1 (not .cse7)) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse17 (not (= |old(~pumpRunning~0)| 1))) (.cse15 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse16 (not (= ~methaneLevelCritical~0 1))) (.cse18 (not .cse6))) (and (let ((.cse8 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse5 .cse7 .cse8 .cse9 .cse11 .cse12 .cse10))) (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0))) (or .cse0 (and .cse5 .cse13 .cse14 .cse7 .cse11 .cse12) (and .cse5 .cse13 .cse14 .cse6 .cse7) .cse15 (and .cse5 .cse6 .cse7 .cse10) .cse3 .cse16 (and .cse5 .cse7 .cse11 .cse12 .cse10))) (or .cse1 .cse17 .cse2 .cse4 .cse18) (or .cse17 .cse15 .cse16 .cse18)))) [2022-11-18 20:17:06,325 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 659) no Hoare annotation was computed. [2022-11-18 20:17:06,325 INFO L895 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse12 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (and .cse12 .cse11)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse1 .cse7 .cse3 .cse8 .cse5) (or .cse6 .cse9 .cse7 .cse8 .cse10) (or .cse9 .cse2 .cse4 .cse10)))) [2022-11-18 20:17:06,326 INFO L895 garLoopResultBuilder]: At program point L905(lines 898 908) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 1))) (let ((.cse12 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse10 (not (= ~methaneLevelCritical~0 1))) (.cse15 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not .cse4)) (.cse13 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (<= ~waterLevel~0 2))) (.cse14 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse7 .cse4) .cse8 .cse9 .cse10) (or .cse11 .cse12 .cse13 .cse14 .cse15) (or .cse12 .cse8 .cse10 .cse15) (let ((.cse16 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or .cse0 .cse11 (and .cse1 .cse2 .cse3 .cse7 .cse4 .cse16) .cse13 .cse9 .cse14 (and .cse1 .cse2 .cse3 .cse4 .cse16 .cse5 .cse6)))))) [2022-11-18 20:17:06,326 INFO L895 garLoopResultBuilder]: At program point L903(line 903) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse13 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse13 .cse14 .cse15 .cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (.cse2 (and .cse13 .cse14 .cse15 .cse11 .cse12)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse6 (not .cse12)) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse6 .cse9 .cse7 .cse8 .cse10) (or .cse9 .cse3 .cse5 .cse10)))) [2022-11-18 20:17:06,326 INFO L899 garLoopResultBuilder]: For program point L903-1(line 903) no Hoare annotation was computed. [2022-11-18 20:17:06,326 INFO L899 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2022-11-18 20:17:06,327 INFO L899 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2022-11-18 20:17:06,327 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2022-11-18 20:17:06,327 INFO L895 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0 1))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not .cse10)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 0) .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse5 .cse7 .cse2 .cse8 .cse4)))) [2022-11-18 20:17:06,327 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 829) no Hoare annotation was computed. [2022-11-18 20:17:06,327 INFO L895 garLoopResultBuilder]: At program point L658(lines 649 662) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 1))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse9 (and .cse6 .cse12)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not .cse12))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse2 .cse8 .cse3 .cse9) (or .cse5 .cse10 .cse8 .cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse9) (or .cse1 .cse10 .cse11 .cse4)))) [2022-11-18 20:17:06,328 INFO L899 garLoopResultBuilder]: For program point L817(lines 817 834) no Hoare annotation was computed. [2022-11-18 20:17:06,328 INFO L895 garLoopResultBuilder]: At program point L869(lines 864 871) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse7)) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (= |old(~pumpRunning~0)| 1))) (.cse14 (not .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse16 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse10 (= ~pumpRunning~0 1))) (and (let ((.cse8 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse5 .cse7 .cse8 .cse9 .cse11 .cse12 .cse10))) (or .cse1 .cse13 .cse2 .cse4 .cse14) (or .cse13 .cse15 .cse16 .cse14) (or .cse0 .cse15 (and .cse5 .cse6 .cse7 .cse10) .cse3 .cse16 (and .cse5 .cse7 .cse11 .cse12 .cse10))))) [2022-11-18 20:17:06,328 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 584 595) no Hoare annotation was computed. [2022-11-18 20:17:06,328 INFO L899 garLoopResultBuilder]: For program point L588-1(lines 584 595) no Hoare annotation was computed. [2022-11-18 20:17:06,329 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 584 595) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~pumpRunning~0 1))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse6 .cse7 .cse3) (or .cse0 .cse6 .cse1 .cse7 .cse3 .cse4))) [2022-11-18 20:17:06,332 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-18 20:17:06,334 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-18 20:17:06,370 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 18.11 08:17:06 BoogieIcfgContainer [2022-11-18 20:17:06,371 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-18 20:17:06,371 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-18 20:17:06,371 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-18 20:17:06,372 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-18 20:17:06,372 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 08:16:46" (3/4) ... [2022-11-18 20:17:06,375 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-18 20:17:06,382 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-18 20:17:06,382 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-18 20:17:06,382 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-18 20:17:06,382 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-18 20:17:06,382 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-18 20:17:06,383 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-18 20:17:06,383 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-18 20:17:06,390 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-18 20:17:06,390 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-18 20:17:06,391 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-18 20:17:06,391 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:17:06,391 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-18 20:17:06,416 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,417 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) [2022-11-18 20:17:06,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((((tmp == 0 && waterLevel <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) [2022-11-18 20:17:06,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) [2022-11-18 20:17:06,418 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result <= 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || ((((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == \old(pumpRunning) && \result == 0)) || (pumpRunning == 0 && waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-18 20:17:06,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-18 20:17:06,419 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1)) [2022-11-18 20:17:06,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-18 20:17:06,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-18 20:17:06,420 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,421 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2022-11-18 20:17:06,450 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/witness.graphml [2022-11-18 20:17:06,450 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-18 20:17:06,451 INFO L158 Benchmark]: Toolchain (without parser) took 21316.65ms. Allocated memory was 130.0MB in the beginning and 228.6MB in the end (delta: 98.6MB). Free memory was 92.6MB in the beginning and 175.1MB in the end (delta: -82.5MB). Peak memory consumption was 16.0MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,451 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 130.0MB. Free memory is still 110.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:17:06,451 INFO L158 Benchmark]: CACSL2BoogieTranslator took 475.98ms. Allocated memory is still 130.0MB. Free memory was 92.4MB in the beginning and 97.8MB in the end (delta: -5.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,452 INFO L158 Benchmark]: Boogie Procedure Inliner took 71.33ms. Allocated memory is still 130.0MB. Free memory was 97.8MB in the beginning and 95.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,452 INFO L158 Benchmark]: Boogie Preprocessor took 52.65ms. Allocated memory is still 130.0MB. Free memory was 95.4MB in the beginning and 94.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-18 20:17:06,453 INFO L158 Benchmark]: RCFGBuilder took 553.14ms. Allocated memory is still 130.0MB. Free memory was 94.0MB in the beginning and 76.9MB in the end (delta: 17.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,453 INFO L158 Benchmark]: TraceAbstraction took 20074.65ms. Allocated memory was 130.0MB in the beginning and 228.6MB in the end (delta: 98.6MB). Free memory was 76.1MB in the beginning and 181.4MB in the end (delta: -105.3MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,453 INFO L158 Benchmark]: Witness Printer took 78.98ms. Allocated memory is still 228.6MB. Free memory was 181.4MB in the beginning and 175.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-18 20:17:06,455 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 130.0MB. Free memory is still 110.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 475.98ms. Allocated memory is still 130.0MB. Free memory was 92.4MB in the beginning and 97.8MB in the end (delta: -5.4MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 71.33ms. Allocated memory is still 130.0MB. Free memory was 97.8MB in the beginning and 95.4MB in the end (delta: 2.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 52.65ms. Allocated memory is still 130.0MB. Free memory was 95.4MB in the beginning and 94.1MB in the end (delta: 1.2MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 553.14ms. Allocated memory is still 130.0MB. Free memory was 94.0MB in the beginning and 76.9MB in the end (delta: 17.2MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 20074.65ms. Allocated memory was 130.0MB in the beginning and 228.6MB in the end (delta: 98.6MB). Free memory was 76.1MB in the beginning and 181.4MB in the end (delta: -105.3MB). Peak memory consumption was 109.1MB. Max. memory is 16.1GB. * Witness Printer took 78.98ms. Allocated memory is still 228.6MB. Free memory was 181.4MB in the beginning and 175.1MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 559]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 19.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2272 SdHoareTripleChecker+Valid, 3.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2242 mSDsluCounter, 4112 SdHoareTripleChecker+Invalid, 2.5s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2958 mSDsCounter, 660 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3565 IncrementalHoareTripleChecker+Invalid, 4225 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 660 mSolverCounterUnsat, 1154 mSDtfsCounter, 3565 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 510 GetRequests, 333 SyntacticMatches, 8 SemanticMatches, 169 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 1.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=770occurred in iteration=9, InterpolantAutomatonStates: 154, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 479 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1994 PreInvPairs, 2484 NumberOfFragments, 3346 HoareAnnotationTreeSize, 1994 FomulaSimplifications, 372 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 44 FomulaSimplificationsInter, 37936 FormulaSimplificationTreeSizeReductionInter, 9.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.6s InterpolantComputationTime, 726 NumberOfCodeBlocks, 726 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 800 ConstructedInterpolants, 0 QuantifiedInterpolants, 1789 SizeOfPredicates, 8 NumberOfNonLiveVariables, 561 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 74/93 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 649]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == \old(pumpRunning) && \result == 0)) || (pumpRunning == 0 && waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 864]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1)) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: ((((((((((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((((tmp == 0 && waterLevel <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2)) || (((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical)) || (((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && pumpRunning == 1) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 898]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 572]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && pumpRunning == 1) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 640]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result <= 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || ((((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-11-18 20:17:06,496 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f9587acf-b985-4b62-a211-f0b9430bf00c/bin/uautomizer-TMbwUNV5ro/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE