./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 12:40:24,121 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 12:40:24,124 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 12:40:24,146 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 12:40:24,147 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 12:40:24,148 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 12:40:24,150 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 12:40:24,152 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 12:40:24,154 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 12:40:24,156 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 12:40:24,157 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 12:40:24,158 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 12:40:24,159 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 12:40:24,160 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 12:40:24,162 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 12:40:24,163 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 12:40:24,164 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 12:40:24,165 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 12:40:24,167 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 12:40:24,169 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 12:40:24,171 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 12:40:24,172 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 12:40:24,174 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 12:40:24,175 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 12:40:24,179 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 12:40:24,179 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 12:40:24,180 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 12:40:24,181 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 12:40:24,181 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 12:40:24,183 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 12:40:24,183 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 12:40:24,184 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 12:40:24,185 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 12:40:24,186 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 12:40:24,187 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 12:40:24,187 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 12:40:24,188 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 12:40:24,188 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 12:40:24,189 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 12:40:24,190 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 12:40:24,191 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 12:40:24,192 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 12:40:24,216 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 12:40:24,217 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 12:40:24,217 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 12:40:24,217 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 12:40:24,218 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 12:40:24,218 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 12:40:24,219 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 12:40:24,220 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 12:40:24,220 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 12:40:24,220 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 12:40:24,221 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 12:40:24,221 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 12:40:24,221 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 12:40:24,221 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 12:40:24,222 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 12:40:24,222 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 12:40:24,222 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 12:40:24,222 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 12:40:24,223 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 12:40:24,223 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 12:40:24,223 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 12:40:24,223 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 12:40:24,224 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 12:40:24,224 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 12:40:24,224 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:40:24,225 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 12:40:24,225 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 12:40:24,225 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 12:40:24,225 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 12:40:24,226 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 12:40:24,226 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 12:40:24,226 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 12:40:24,226 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 12:40:24,227 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2022-11-20 12:40:24,493 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 12:40:24,527 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 12:40:24,530 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 12:40:24,531 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 12:40:24,532 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 12:40:24,533 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-11-20 12:40:27,755 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 12:40:28,094 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 12:40:28,099 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-11-20 12:40:28,114 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/data/74315eabd/6612dd30513a4b769a8b4254329fb798/FLAG7874ad90a [2022-11-20 12:40:28,129 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/data/74315eabd/6612dd30513a4b769a8b4254329fb798 [2022-11-20 12:40:28,132 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 12:40:28,133 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 12:40:28,135 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 12:40:28,135 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 12:40:28,139 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 12:40:28,140 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,141 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@46fb16a8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28, skipping insertion in model container [2022-11-20 12:40:28,142 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,153 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 12:40:28,212 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 12:40:28,526 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-11-20 12:40:28,539 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:40:28,559 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 12:40:28,682 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-11-20 12:40:28,683 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 12:40:28,706 INFO L208 MainTranslator]: Completed translation [2022-11-20 12:40:28,707 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28 WrapperNode [2022-11-20 12:40:28,707 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 12:40:28,708 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 12:40:28,709 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 12:40:28,709 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 12:40:28,718 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,745 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,781 INFO L138 Inliner]: procedures = 58, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 224 [2022-11-20 12:40:28,785 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 12:40:28,785 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 12:40:28,785 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 12:40:28,785 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 12:40:28,795 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,795 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,798 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,798 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,804 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,809 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,811 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,813 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,816 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 12:40:28,817 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 12:40:28,817 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 12:40:28,817 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 12:40:28,818 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (1/1) ... [2022-11-20 12:40:28,837 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 12:40:28,866 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:40:28,878 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 12:40:28,880 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 12:40:28,915 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 12:40:28,915 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 12:40:28,915 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 12:40:28,916 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-20 12:40:28,916 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-20 12:40:28,916 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 12:40:28,916 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 12:40:28,916 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 12:40:28,916 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 12:40:28,916 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:40:28,917 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:40:28,917 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 12:40:28,917 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 12:40:28,917 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 12:40:28,917 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 12:40:28,917 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 12:40:28,918 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 12:40:28,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 12:40:28,918 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 12:40:28,918 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 12:40:28,918 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 12:40:28,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 12:40:29,012 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 12:40:29,015 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 12:40:29,384 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 12:40:29,394 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 12:40:29,394 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 12:40:29,397 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:40:29 BoogieIcfgContainer [2022-11-20 12:40:29,397 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 12:40:29,400 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 12:40:29,400 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 12:40:29,404 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 12:40:29,405 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 12:40:28" (1/3) ... [2022-11-20 12:40:29,406 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@61405cd3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:40:29, skipping insertion in model container [2022-11-20 12:40:29,406 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 12:40:28" (2/3) ... [2022-11-20 12:40:29,406 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@61405cd3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 12:40:29, skipping insertion in model container [2022-11-20 12:40:29,407 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:40:29" (3/3) ... [2022-11-20 12:40:29,408 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2022-11-20 12:40:29,448 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 12:40:29,448 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 12:40:29,527 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 12:40:29,538 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@37c70fe3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 12:40:29,539 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 12:40:29,543 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 12:40:29,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-20 12:40:29,554 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:29,555 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:29,556 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:29,561 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:29,561 INFO L85 PathProgramCache]: Analyzing trace with hash 244440816, now seen corresponding path program 1 times [2022-11-20 12:40:29,589 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:29,589 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2123998415] [2022-11-20 12:40:29,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:29,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:29,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:29,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 12:40:29,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:29,804 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:29,805 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:29,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2123998415] [2022-11-20 12:40:29,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2123998415] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:29,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:29,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 12:40:29,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47877657] [2022-11-20 12:40:29,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:29,814 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 12:40:29,815 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:29,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 12:40:29,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:40:29,849 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:29,891 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:29,891 INFO L93 Difference]: Finished difference Result 197 states and 268 transitions. [2022-11-20 12:40:29,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 12:40:29,893 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-20 12:40:29,894 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:29,904 INFO L225 Difference]: With dead ends: 197 [2022-11-20 12:40:29,904 INFO L226 Difference]: Without dead ends: 94 [2022-11-20 12:40:29,909 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 12:40:29,913 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:29,914 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:40:29,933 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-11-20 12:40:29,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-11-20 12:40:29,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 12:40:29,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-11-20 12:40:29,965 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2022-11-20 12:40:29,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:29,966 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-11-20 12:40:29,966 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:29,967 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-11-20 12:40:29,969 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-20 12:40:29,969 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:29,970 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:29,970 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 12:40:29,970 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:29,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:29,971 INFO L85 PathProgramCache]: Analyzing trace with hash -1307515066, now seen corresponding path program 1 times [2022-11-20 12:40:29,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:29,972 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1898498667] [2022-11-20 12:40:29,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:29,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:29,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-20 12:40:30,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,115 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:30,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:30,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1898498667] [2022-11-20 12:40:30,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1898498667] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:30,120 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:30,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 12:40:30,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035475632] [2022-11-20 12:40:30,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:30,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 12:40:30,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:30,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:40:30,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:40:30,134 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:30,173 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:30,173 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2022-11-20 12:40:30,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:40:30,175 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-20 12:40:30,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:30,181 INFO L225 Difference]: With dead ends: 152 [2022-11-20 12:40:30,183 INFO L226 Difference]: Without dead ends: 85 [2022-11-20 12:40:30,186 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 12:40:30,189 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:30,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:40:30,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-20 12:40:30,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-20 12:40:30,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 12:40:30,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-20 12:40:30,208 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2022-11-20 12:40:30,208 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:30,209 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-20 12:40:30,209 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:30,209 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-20 12:40:30,211 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-20 12:40:30,211 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:30,211 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:30,211 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 12:40:30,212 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:30,213 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:30,213 INFO L85 PathProgramCache]: Analyzing trace with hash 1771610293, now seen corresponding path program 1 times [2022-11-20 12:40:30,213 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:30,214 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [501849952] [2022-11-20 12:40:30,214 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:30,214 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:30,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:30,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,471 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:30,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:30,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [501849952] [2022-11-20 12:40:30,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [501849952] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:30,473 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:30,473 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:40:30,473 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1525102180] [2022-11-20 12:40:30,474 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:30,474 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:40:30,475 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:30,475 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:40:30,475 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:40:30,476 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:30,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:30,606 INFO L93 Difference]: Finished difference Result 162 states and 213 transitions. [2022-11-20 12:40:30,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:40:30,607 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-20 12:40:30,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:30,609 INFO L225 Difference]: With dead ends: 162 [2022-11-20 12:40:30,609 INFO L226 Difference]: Without dead ends: 85 [2022-11-20 12:40:30,610 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:40:30,612 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 137 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:30,613 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 275 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:40:30,614 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-20 12:40:30,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-20 12:40:30,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-20 12:40:30,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-11-20 12:40:30,628 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2022-11-20 12:40:30,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:30,628 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-11-20 12:40:30,629 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-20 12:40:30,629 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-11-20 12:40:30,631 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-11-20 12:40:30,631 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:30,631 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:30,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 12:40:30,632 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:30,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:30,633 INFO L85 PathProgramCache]: Analyzing trace with hash 1359704802, now seen corresponding path program 1 times [2022-11-20 12:40:30,633 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:30,633 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [290381608] [2022-11-20 12:40:30,634 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:30,634 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:30,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:30,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-20 12:40:30,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-11-20 12:40:30,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:30,704 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 12:40:30,704 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:30,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [290381608] [2022-11-20 12:40:30,705 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [290381608] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:30,705 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:30,706 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 12:40:30,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1318951522] [2022-11-20 12:40:30,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:30,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 12:40:30,707 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:30,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 12:40:30,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 12:40:30,708 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-20 12:40:30,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:30,965 INFO L93 Difference]: Finished difference Result 242 states and 316 transitions. [2022-11-20 12:40:30,966 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:40:30,966 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2022-11-20 12:40:30,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:30,968 INFO L225 Difference]: With dead ends: 242 [2022-11-20 12:40:30,968 INFO L226 Difference]: Without dead ends: 165 [2022-11-20 12:40:30,969 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:40:30,970 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 167 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:30,971 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 223 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:40:30,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-11-20 12:40:30,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-11-20 12:40:31,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 119 states have (on average 1.2941176470588236) internal successors, (154), 127 states have internal predecessors, (154), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-20 12:40:31,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 203 transitions. [2022-11-20 12:40:31,002 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 203 transitions. Word has length 44 [2022-11-20 12:40:31,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:31,002 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 203 transitions. [2022-11-20 12:40:31,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-20 12:40:31,009 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 203 transitions. [2022-11-20 12:40:31,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 12:40:31,013 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:31,014 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:31,014 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 12:40:31,014 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:31,016 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:31,016 INFO L85 PathProgramCache]: Analyzing trace with hash 179521665, now seen corresponding path program 1 times [2022-11-20 12:40:31,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:31,017 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038380993] [2022-11-20 12:40:31,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:31,017 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:31,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:31,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:31,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-20 12:40:31,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:31,259 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:31,259 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038380993] [2022-11-20 12:40:31,259 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2038380993] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:31,266 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:31,266 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:40:31,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [858851912] [2022-11-20 12:40:31,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:31,269 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:40:31,269 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:31,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:40:31,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:40:31,270 INFO L87 Difference]: Start difference. First operand 159 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 12:40:31,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:31,526 INFO L93 Difference]: Finished difference Result 318 states and 414 transitions. [2022-11-20 12:40:31,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:40:31,527 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-20 12:40:31,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:31,535 INFO L225 Difference]: With dead ends: 318 [2022-11-20 12:40:31,535 INFO L226 Difference]: Without dead ends: 167 [2022-11-20 12:40:31,536 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 12:40:31,538 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 70 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:31,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 429 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:40:31,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-20 12:40:31,559 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 162. [2022-11-20 12:40:31,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-20 12:40:31,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-11-20 12:40:31,562 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 50 [2022-11-20 12:40:31,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:31,562 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-11-20 12:40:31,563 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 12:40:31,563 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-11-20 12:40:31,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 12:40:31,564 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:31,565 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:31,565 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 12:40:31,565 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:31,565 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:31,566 INFO L85 PathProgramCache]: Analyzing trace with hash 602223491, now seen corresponding path program 1 times [2022-11-20 12:40:31,566 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:31,566 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951260168] [2022-11-20 12:40:31,566 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:31,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:31,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:31,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:31,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-20 12:40:31,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:31,752 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:31,753 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:31,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951260168] [2022-11-20 12:40:31,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951260168] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:31,753 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:31,754 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:40:31,754 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997584150] [2022-11-20 12:40:31,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:31,755 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:40:31,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:31,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:40:31,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:40:31,757 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 12:40:31,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:31,929 INFO L93 Difference]: Finished difference Result 326 states and 428 transitions. [2022-11-20 12:40:31,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 12:40:31,930 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-11-20 12:40:31,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:31,936 INFO L225 Difference]: With dead ends: 326 [2022-11-20 12:40:31,936 INFO L226 Difference]: Without dead ends: 172 [2022-11-20 12:40:31,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:40:31,942 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 73 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:31,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 334 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:40:31,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2022-11-20 12:40:31,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 164. [2022-11-20 12:40:31,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 124 states have (on average 1.282258064516129) internal successors, (159), 132 states have internal predecessors, (159), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-20 12:40:31,978 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 208 transitions. [2022-11-20 12:40:31,978 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 208 transitions. Word has length 50 [2022-11-20 12:40:31,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:31,978 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 208 transitions. [2022-11-20 12:40:31,978 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 12:40:31,987 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 208 transitions. [2022-11-20 12:40:31,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-11-20 12:40:31,995 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:31,995 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:31,995 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 12:40:31,995 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:31,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:31,996 INFO L85 PathProgramCache]: Analyzing trace with hash -1203214843, now seen corresponding path program 1 times [2022-11-20 12:40:31,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:31,996 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302755167] [2022-11-20 12:40:31,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:31,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:32,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,090 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:32,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:32,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-20 12:40:32,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:32,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:32,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302755167] [2022-11-20 12:40:32,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302755167] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:32,145 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:32,146 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:40:32,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162658871] [2022-11-20 12:40:32,146 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:32,146 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:40:32,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:32,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:40:32,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:40:32,147 INFO L87 Difference]: Start difference. First operand 164 states and 208 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 12:40:32,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:32,467 INFO L93 Difference]: Finished difference Result 458 states and 602 transitions. [2022-11-20 12:40:32,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:40:32,468 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2022-11-20 12:40:32,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:32,472 INFO L225 Difference]: With dead ends: 458 [2022-11-20 12:40:32,472 INFO L226 Difference]: Without dead ends: 302 [2022-11-20 12:40:32,474 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 12:40:32,478 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 223 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:32,479 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 347 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:40:32,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2022-11-20 12:40:32,542 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 294. [2022-11-20 12:40:32,543 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 221 states have (on average 1.257918552036199) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-20 12:40:32,547 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 376 transitions. [2022-11-20 12:40:32,548 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 376 transitions. Word has length 50 [2022-11-20 12:40:32,551 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:32,551 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 376 transitions. [2022-11-20 12:40:32,552 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-20 12:40:32,554 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 376 transitions. [2022-11-20 12:40:32,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-20 12:40:32,556 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:32,556 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:32,556 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 12:40:32,557 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:32,557 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:32,557 INFO L85 PathProgramCache]: Analyzing trace with hash 1971090006, now seen corresponding path program 1 times [2022-11-20 12:40:32,557 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:32,558 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1221069144] [2022-11-20 12:40:32,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:32,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:32,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:32,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:32,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 12:40:32,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-11-20 12:40:32,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:32,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:32,697 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:32,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1221069144] [2022-11-20 12:40:32,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1221069144] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:32,698 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:32,698 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 12:40:32,698 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [694692175] [2022-11-20 12:40:32,698 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:32,699 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 12:40:32,699 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:32,699 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 12:40:32,700 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 12:40:32,700 INFO L87 Difference]: Start difference. First operand 294 states and 376 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:40:33,000 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:33,000 INFO L93 Difference]: Finished difference Result 596 states and 775 transitions. [2022-11-20 12:40:33,001 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-20 12:40:33,001 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-11-20 12:40:33,001 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:33,005 INFO L225 Difference]: With dead ends: 596 [2022-11-20 12:40:33,005 INFO L226 Difference]: Without dead ends: 310 [2022-11-20 12:40:33,007 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-20 12:40:33,009 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 152 mSDsluCounter, 295 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:33,010 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 386 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 12:40:33,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310 states. [2022-11-20 12:40:33,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310 to 290. [2022-11-20 12:40:33,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 217 states have (on average 1.2258064516129032) internal successors, (266), 229 states have internal predecessors, (266), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-20 12:40:33,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 364 transitions. [2022-11-20 12:40:33,050 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 364 transitions. Word has length 52 [2022-11-20 12:40:33,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:33,050 INFO L495 AbstractCegarLoop]: Abstraction has 290 states and 364 transitions. [2022-11-20 12:40:33,051 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:40:33,051 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 364 transitions. [2022-11-20 12:40:33,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-11-20 12:40:33,052 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:33,052 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:33,053 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 12:40:33,053 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:33,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:33,054 INFO L85 PathProgramCache]: Analyzing trace with hash 1743345695, now seen corresponding path program 1 times [2022-11-20 12:40:33,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:33,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697845764] [2022-11-20 12:40:33,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:33,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:33,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:40:33,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-20 12:40:33,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:33,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-20 12:40:33,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,166 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:33,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:33,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697845764] [2022-11-20 12:40:33,167 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [697845764] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:33,167 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 12:40:33,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 12:40:33,167 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246208205] [2022-11-20 12:40:33,167 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:33,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 12:40:33,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:33,169 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 12:40:33,169 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 12:40:33,169 INFO L87 Difference]: Start difference. First operand 290 states and 364 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:40:33,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:33,595 INFO L93 Difference]: Finished difference Result 594 states and 792 transitions. [2022-11-20 12:40:33,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-20 12:40:33,596 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-11-20 12:40:33,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:33,599 INFO L225 Difference]: With dead ends: 594 [2022-11-20 12:40:33,600 INFO L226 Difference]: Without dead ends: 592 [2022-11-20 12:40:33,600 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-20 12:40:33,601 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 328 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:33,601 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [332 Valid, 225 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 12:40:33,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-11-20 12:40:33,652 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 528. [2022-11-20 12:40:33,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 393 states have (on average 1.2340966921119594) internal successors, (485), 420 states have internal predecessors, (485), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2022-11-20 12:40:33,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 711 transitions. [2022-11-20 12:40:33,657 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 711 transitions. Word has length 54 [2022-11-20 12:40:33,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:33,657 INFO L495 AbstractCegarLoop]: Abstraction has 528 states and 711 transitions. [2022-11-20 12:40:33,657 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 12:40:33,658 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 711 transitions. [2022-11-20 12:40:33,660 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-11-20 12:40:33,660 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:33,660 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:33,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 12:40:33,661 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:33,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:33,661 INFO L85 PathProgramCache]: Analyzing trace with hash 2104240770, now seen corresponding path program 1 times [2022-11-20 12:40:33,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:33,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464647837] [2022-11-20 12:40:33,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:33,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:33,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:40:33,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:33,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 12:40:33,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:33,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,839 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:40:33,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-20 12:40:33,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:33,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-11-20 12:40:33,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,854 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-20 12:40:33,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:33,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464647837] [2022-11-20 12:40:33,855 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464647837] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:40:33,855 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1490181588] [2022-11-20 12:40:33,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:33,856 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:40:33,856 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:40:33,863 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:40:33,892 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 12:40:33,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:33,992 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-20 12:40:33,999 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:40:34,101 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:34,101 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 12:40:34,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1490181588] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:34,102 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 12:40:34,102 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-11-20 12:40:34,102 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1508842532] [2022-11-20 12:40:34,102 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:34,103 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 12:40:34,111 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:34,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 12:40:34,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-20 12:40:34,112 INFO L87 Difference]: Start difference. First operand 528 states and 711 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-20 12:40:34,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:34,169 INFO L93 Difference]: Finished difference Result 899 states and 1241 transitions. [2022-11-20 12:40:34,169 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 12:40:34,169 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 98 [2022-11-20 12:40:34,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:34,172 INFO L225 Difference]: With dead ends: 899 [2022-11-20 12:40:34,172 INFO L226 Difference]: Without dead ends: 433 [2022-11-20 12:40:34,174 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-20 12:40:34,175 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 51 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:34,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 222 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 12:40:34,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2022-11-20 12:40:34,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 433. [2022-11-20 12:40:34,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 433 states, 322 states have (on average 1.2111801242236024) internal successors, (390), 345 states have internal predecessors, (390), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2022-11-20 12:40:34,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 433 states to 433 states and 538 transitions. [2022-11-20 12:40:34,235 INFO L78 Accepts]: Start accepts. Automaton has 433 states and 538 transitions. Word has length 98 [2022-11-20 12:40:34,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:34,236 INFO L495 AbstractCegarLoop]: Abstraction has 433 states and 538 transitions. [2022-11-20 12:40:34,236 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-20 12:40:34,236 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 538 transitions. [2022-11-20 12:40:34,238 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-11-20 12:40:34,238 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:34,238 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:34,249 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 12:40:34,449 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-11-20 12:40:34,450 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:34,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:34,450 INFO L85 PathProgramCache]: Analyzing trace with hash 192141936, now seen corresponding path program 1 times [2022-11-20 12:40:34,450 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:34,450 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [319410750] [2022-11-20 12:40:34,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:34,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:34,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:40:34,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-11-20 12:40:34,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 12:40:34,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:34,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:40:34,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,736 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-11-20 12:40:34,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-20 12:40:34,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:40:34,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:34,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-11-20 12:40:34,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,764 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-20 12:40:34,764 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:34,764 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [319410750] [2022-11-20 12:40:34,764 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [319410750] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:40:34,765 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1319015316] [2022-11-20 12:40:34,765 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:34,765 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:40:34,765 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:40:34,775 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:40:34,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 12:40:34,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:34,887 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-20 12:40:34,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:40:35,072 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 35 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 12:40:35,073 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 12:40:35,399 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-20 12:40:35,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1319015316] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 12:40:35,400 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 12:40:35,400 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 7] total 18 [2022-11-20 12:40:35,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462794111] [2022-11-20 12:40:35,400 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 12:40:35,401 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-20 12:40:35,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:35,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-20 12:40:35,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2022-11-20 12:40:35,403 INFO L87 Difference]: Start difference. First operand 433 states and 538 transitions. Second operand has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-20 12:40:40,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:40,864 INFO L93 Difference]: Finished difference Result 2106 states and 2835 transitions. [2022-11-20 12:40:40,865 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2022-11-20 12:40:40,865 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) Word has length 108 [2022-11-20 12:40:40,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:40,875 INFO L225 Difference]: With dead ends: 2106 [2022-11-20 12:40:40,875 INFO L226 Difference]: Without dead ends: 1681 [2022-11-20 12:40:40,882 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 356 GetRequests, 253 SyntacticMatches, 3 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3648 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=1232, Invalid=9070, Unknown=0, NotChecked=0, Total=10302 [2022-11-20 12:40:40,883 INFO L413 NwaCegarLoop]: 277 mSDtfsCounter, 1849 mSDsluCounter, 1757 mSDsCounter, 0 mSdLazyCounter, 3611 mSolverCounterSat, 991 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1857 SdHoareTripleChecker+Valid, 2034 SdHoareTripleChecker+Invalid, 4602 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 991 IncrementalHoareTripleChecker+Valid, 3611 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.2s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:40,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1857 Valid, 2034 Invalid, 4602 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [991 Valid, 3611 Invalid, 0 Unknown, 0 Unchecked, 3.2s Time] [2022-11-20 12:40:40,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1681 states. [2022-11-20 12:40:41,035 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1681 to 1402. [2022-11-20 12:40:41,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1402 states, 1031 states have (on average 1.1677982541222114) internal successors, (1204), 1096 states have internal predecessors, (1204), 192 states have call successors, (192), 149 states have call predecessors, (192), 178 states have return successors, (311), 190 states have call predecessors, (311), 192 states have call successors, (311) [2022-11-20 12:40:41,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1402 states to 1402 states and 1707 transitions. [2022-11-20 12:40:41,047 INFO L78 Accepts]: Start accepts. Automaton has 1402 states and 1707 transitions. Word has length 108 [2022-11-20 12:40:41,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:41,048 INFO L495 AbstractCegarLoop]: Abstraction has 1402 states and 1707 transitions. [2022-11-20 12:40:41,048 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-20 12:40:41,049 INFO L276 IsEmpty]: Start isEmpty. Operand 1402 states and 1707 transitions. [2022-11-20 12:40:41,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-11-20 12:40:41,052 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 12:40:41,052 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:41,059 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 12:40:41,259 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:40:41,259 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 12:40:41,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 12:40:41,260 INFO L85 PathProgramCache]: Analyzing trace with hash 1625453290, now seen corresponding path program 1 times [2022-11-20 12:40:41,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 12:40:41,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1392000981] [2022-11-20 12:40:41,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:41,261 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 12:40:41,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 12:40:41,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 12:40:41,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-20 12:40:41,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-20 12:40:41,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:41,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 12:40:41,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-11-20 12:40:41,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-11-20 12:40:41,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 12:40:41,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 12:40:41,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-11-20 12:40:41,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,525 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-20 12:40:41,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 12:40:41,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1392000981] [2022-11-20 12:40:41,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1392000981] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 12:40:41,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [706567366] [2022-11-20 12:40:41,526 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 12:40:41,527 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 12:40:41,527 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 12:40:41,528 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 12:40:41,561 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 12:40:41,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 12:40:41,649 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 12:40:41,653 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 12:40:41,843 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-11-20 12:40:41,844 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-20 12:40:41,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [706567366] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 12:40:41,844 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-20 12:40:41,844 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-11-20 12:40:41,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1464668869] [2022-11-20 12:40:41,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 12:40:41,845 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 12:40:41,846 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 12:40:41,846 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 12:40:41,846 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-11-20 12:40:41,846 INFO L87 Difference]: Start difference. First operand 1402 states and 1707 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-20 12:40:42,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 12:40:42,069 INFO L93 Difference]: Finished difference Result 2311 states and 2812 transitions. [2022-11-20 12:40:42,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 12:40:42,070 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2022-11-20 12:40:42,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 12:40:42,071 INFO L225 Difference]: With dead ends: 2311 [2022-11-20 12:40:42,071 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 12:40:42,076 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-11-20 12:40:42,077 INFO L413 NwaCegarLoop]: 185 mSDtfsCounter, 47 mSDsluCounter, 784 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 969 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 12:40:42,077 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 969 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 12:40:42,078 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 12:40:42,078 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 12:40:42,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 12:40:42,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 12:40:42,079 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2022-11-20 12:40:42,079 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 12:40:42,079 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 12:40:42,079 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-20 12:40:42,079 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 12:40:42,079 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 12:40:42,082 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 12:40:42,088 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 12:40:42,288 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 12:40:42,290 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 12:40:52,674 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 758 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse3 .cse2) (or .cse0 .cse1 .cse3 .cse2 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,675 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2022-11-20 12:40:52,675 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 758 765) no Hoare annotation was computed. [2022-11-20 12:40:52,675 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2022-11-20 12:40:52,675 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2022-11-20 12:40:52,675 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 896 907) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse1 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse2 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 (< ~waterLevel~0 2) .cse4) (or .cse6 .cse0 .cse8 .cse4 .cse5) (or .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-20 12:40:52,676 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2022-11-20 12:40:52,676 INFO L899 garLoopResultBuilder]: For program point L900-1(lines 896 907) no Hoare annotation was computed. [2022-11-20 12:40:52,676 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 908 916) the Hoare annotation is: true [2022-11-20 12:40:52,676 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 908 916) no Hoare annotation was computed. [2022-11-20 12:40:52,676 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2022-11-20 12:40:52,676 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2022-11-20 12:40:52,677 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2022-11-20 12:40:52,677 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2022-11-20 12:40:52,677 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2022-11-20 12:40:52,677 INFO L895 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse14 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse17 (not .cse3))) (let ((.cse4 (and .cse14 .cse6 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse17)) (.cse15 (not (= |old(~waterLevel~0)| 0))) (.cse16 (= ~waterLevel~0 0)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 .cse0 .cse11 .cse12 .cse3 (and .cse13 .cse14 .cse6 .cse8 .cse9)) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse15 .cse3 .cse16) (or .cse1 .cse11 .cse12 .cse15 .cse3 .cse16) (or .cse10 .cse0 (and .cse5 .cse7 .cse8) .cse2 (and .cse13 .cse14 .cse6 .cse8) .cse3) (or .cse1 (and .cse14 .cse6 .cse17 .cse9) .cse11 (and .cse13 .cse6 .cse9) .cse12 .cse3) (or .cse1 (<= 1 ~waterLevel~0) .cse12 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-11-20 12:40:52,678 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 641 664) no Hoare annotation was computed. [2022-11-20 12:40:52,678 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse0 .cse4 (and .cse3 (= ~methAndRunningLastTime~0 0)) .cse6 .cse2) (or .cse4 .cse5 .cse1 .cse7 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse0 .cse4 .cse6 .cse7 .cse2 .cse8) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (< |old(~waterLevel~0)| 2) .cse6 .cse2))) [2022-11-20 12:40:52,678 INFO L899 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2022-11-20 12:40:52,678 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-11-20 12:40:52,678 INFO L899 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2022-11-20 12:40:52,679 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4 .cse1 .cse2) (or .cse3 .cse4 .cse1 (not (= |old(~waterLevel~0)| 0)) .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (= ~waterLevel~0 0))) (or .cse3 (< |old(~waterLevel~0)| 2) .cse5 .cse2) (or .cse0 .cse3 .cse5 .cse2) (or .cse3 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 12:40:52,679 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse8 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse10 (= ~waterLevel~0 0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse0 .cse6 .cse7 .cse2) (or .cse3 .cse6 .cse8 .cse1 .cse2) (or .cse6 .cse8 .cse1 .cse9 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse10)) (or (and .cse3 .cse4 .cse5) .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse2) (or .cse0 .cse6 .cse7 .cse9 .cse2 .cse10) (or .cse6 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 12:40:52,679 INFO L899 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2022-11-20 12:40:52,680 INFO L895 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse12 (not .cse3))) (let ((.cse8 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse12)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse1 .cse12)) (.cse11 (not (= |old(~waterLevel~0)| 0))) (.cse9 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse1) .cse2 .cse3 (and .cse4 .cse1 .cse5)) (or .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse8 .cse3) (or .cse6 .cse9 .cse10 .cse2 .cse11 .cse3 (and .cse5 (= ~waterLevel~0 0))) (or .cse0 .cse6 .cse7 .cse10 .cse11 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9 (and .cse4 .cse12) .cse2 .cse3) (or .cse6 (<= 1 ~waterLevel~0) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-11-20 12:40:52,680 INFO L899 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2022-11-20 12:40:52,680 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2022-11-20 12:40:52,680 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 872 883) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse0 .cse4 (and .cse3 (= ~methAndRunningLastTime~0 0)) .cse6 .cse2) (or .cse4 .cse5 .cse1 .cse7 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse0 .cse4 .cse6 .cse7 .cse2 .cse8) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (< |old(~waterLevel~0)| 2) .cse6 .cse2))) [2022-11-20 12:40:52,680 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse0 (< |old(~waterLevel~0)| 2) .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse4 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))))) [2022-11-20 12:40:52,681 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse12 (not .cse3))) (let ((.cse8 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse12)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse1 .cse12)) (.cse11 (not (= |old(~waterLevel~0)| 0))) (.cse9 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse1) .cse2 .cse3 (and .cse4 .cse1 .cse5)) (or .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse8 .cse3) (or .cse6 .cse9 .cse10 .cse2 .cse11 .cse3 (and .cse5 (= ~waterLevel~0 0))) (or .cse0 .cse6 .cse7 .cse10 .cse11 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9 (and .cse4 .cse12) .cse2 .cse3) (or .cse6 (<= 1 ~waterLevel~0) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-11-20 12:40:52,681 INFO L895 garLoopResultBuilder]: At program point L773(lines 766 776) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~waterLevel~0)| 0))) (.cse9 (= ~waterLevel~0 0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse4 (< |old(~waterLevel~0)| 2) .cse6 (and .cse3 .cse7) .cse2) (or .cse4 .cse5 .cse1 .cse8 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse9)) (or .cse0 .cse4 .cse6 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse7) .cse2) (or .cse0 .cse4 .cse6 .cse8 .cse2 .cse9) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-11-20 12:40:52,681 INFO L899 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2022-11-20 12:40:52,682 INFO L895 garLoopResultBuilder]: At program point L1013(lines 1008 1015) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse3 (< |old(~waterLevel~0)| 2) .cse4 .cse2) (or .cse0 .cse3 .cse4 .cse2))) [2022-11-20 12:40:52,682 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 641 664) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2 .cse3) (or .cse0 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4 .cse3) (or .cse5 .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse5 .cse4 .cse3 (and (= ~pumpRunning~0 0) .cse6 .cse7))))) [2022-11-20 12:40:52,682 INFO L895 garLoopResultBuilder]: At program point L782(lines 777 785) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse9 (not .cse6)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse5 .cse2 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse6)) (or .cse1 (and .cse4 .cse7 .cse8 .cse5 .cse9) .cse10 .cse3 .cse6) (or .cse0 .cse1 .cse11 .cse12 .cse6) (or .cse10 .cse11 .cse12 .cse6) (or (and .cse4 .cse7 .cse8 .cse5 (<= 1 ~waterLevel~0) .cse9) .cse10 (< |old(~waterLevel~0)| 2) .cse3 .cse6) (or .cse1 .cse10 .cse3 (not (= |old(~waterLevel~0)| 0)) .cse6 (= ~waterLevel~0 0))))) [2022-11-20 12:40:52,682 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2022-11-20 12:40:52,683 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2022-11-20 12:40:52,683 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-20 12:40:52,683 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-20 12:40:52,683 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-20 12:40:52,683 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-20 12:40:52,683 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-20 12:40:52,683 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-20 12:40:52,684 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-20 12:40:52,684 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-20 12:40:52,684 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-20 12:40:52,684 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-20 12:40:52,684 INFO L895 garLoopResultBuilder]: At program point L865(lines 860 867) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (not (< ~waterLevel~0 2)) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6 .cse5) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse6 .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-20 12:40:52,684 INFO L899 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2022-11-20 12:40:52,685 INFO L902 garLoopResultBuilder]: At program point L126(lines 118 128) the Hoare annotation is: true [2022-11-20 12:40:52,685 INFO L899 garLoopResultBuilder]: For program point L605(lines 605 618) no Hoare annotation was computed. [2022-11-20 12:40:52,685 INFO L902 garLoopResultBuilder]: At program point L151(lines 132 154) the Hoare annotation is: true [2022-11-20 12:40:52,685 INFO L895 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 (not (< ~waterLevel~0 2)) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-11-20 12:40:52,685 INFO L902 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point L577(lines 577 581) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 12:40:52,686 INFO L895 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2022-11-20 12:40:52,687 INFO L895 garLoopResultBuilder]: At program point L1003(lines 998 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-20 12:40:52,687 INFO L895 garLoopResultBuilder]: At program point L165(lines 160 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-20 12:40:52,687 INFO L895 garLoopResultBuilder]: At program point L995(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-20 12:40:52,687 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 12:40:52,687 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2022-11-20 12:40:52,687 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2022-11-20 12:40:52,688 INFO L895 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-11-20 12:40:52,688 INFO L895 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-11-20 12:40:52,688 INFO L895 garLoopResultBuilder]: At program point L988(lines 984 990) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-20 12:40:52,688 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-11-20 12:40:52,688 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-11-20 12:40:52,689 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-11-20 12:40:52,689 INFO L899 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2022-11-20 12:40:52,689 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (not (< ~waterLevel~0 2)) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6 .cse5) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse6 .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-20 12:40:52,689 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,689 INFO L895 garLoopResultBuilder]: At program point L958(lines 949 962) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1 (not (= ~methAndRunningLastTime~0 0)))))) [2022-11-20 12:40:52,690 INFO L895 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,690 INFO L899 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2022-11-20 12:40:52,690 INFO L895 garLoopResultBuilder]: At program point L837(lines 822 840) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 2 ~waterLevel~0)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2 (not (= ~methAndRunningLastTime~0 0)))) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse2))) [2022-11-20 12:40:52,690 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2022-11-20 12:40:52,690 INFO L899 garLoopResultBuilder]: For program point L831-2(lines 831 835) no Hoare annotation was computed. [2022-11-20 12:40:52,691 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2022-11-20 12:40:52,691 INFO L899 garLoopResultBuilder]: For program point L953(lines 953 959) no Hoare annotation was computed. [2022-11-20 12:40:52,691 INFO L895 garLoopResultBuilder]: At program point L755(lines 750 757) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2022-11-20 12:40:52,691 INFO L895 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,691 INFO L899 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2022-11-20 12:40:52,692 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2022-11-20 12:40:52,692 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2022-11-20 12:40:52,692 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 884 895) no Hoare annotation was computed. [2022-11-20 12:40:52,692 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 884 895) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse3 .cse1 .cse2 .cse4) (or (not (= ~pumpRunning~0 0)) .cse3 .cse1 .cse2 .cse4))) [2022-11-20 12:40:52,692 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,693 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,693 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,693 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2022-11-20 12:40:52,693 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2022-11-20 12:40:52,693 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2022-11-20 12:40:52,694 INFO L895 garLoopResultBuilder]: At program point L856(lines 841 859) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,694 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 854) no Hoare annotation was computed. [2022-11-20 12:40:52,694 INFO L899 garLoopResultBuilder]: For program point L850-2(lines 850 854) no Hoare annotation was computed. [2022-11-20 12:40:52,694 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,694 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2022-11-20 12:40:52,694 INFO L895 garLoopResultBuilder]: At program point L968(lines 963 971) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-20 12:40:52,698 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 12:40:52,700 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 12:40:52,754 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 12:40:52 BoogieIcfgContainer [2022-11-20 12:40:52,763 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 12:40:52,763 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 12:40:52,764 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 12:40:52,764 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 12:40:52,764 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 12:40:29" (3/4) ... [2022-11-20 12:40:52,767 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 12:40:52,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 12:40:52,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 12:40:52,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 12:40:52,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-20 12:40:52,774 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 12:40:52,775 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 12:40:52,775 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 12:40:52,775 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 12:40:52,775 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 12:40:52,788 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-20 12:40:52,788 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 12:40:52,789 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 12:40:52,789 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:40:52,790 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 12:40:52,818 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-20 12:40:52,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-20 12:40:52,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-11-20 12:40:52,819 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) [2022-11-20 12:40:52,820 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-20 12:40:52,822 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || (pumpRunning == 0 && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-20 12:40:52,823 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && !(waterLevel < 2)) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-11-20 12:40:52,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) && ((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0))) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-20 12:40:52,824 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-11-20 12:40:52,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && 1 <= waterLevel) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0) [2022-11-20 12:40:52,825 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 12:40:52,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 12:40:52,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-20 12:40:52,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && (tmp == 0 || waterLevel == 0)) && (\result == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-11-20 12:40:52,826 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-20 12:40:52,830 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-11-20 12:40:52,876 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 12:40:52,876 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 12:40:52,877 INFO L158 Benchmark]: Toolchain (without parser) took 24743.67ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 112.5MB in the beginning and 139.0MB in the end (delta: -26.6MB). Peak memory consumption was 55.8MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,877 INFO L158 Benchmark]: CDTParser took 0.22ms. Allocated memory is still 155.2MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 12:40:52,878 INFO L158 Benchmark]: CACSL2BoogieTranslator took 572.28ms. Allocated memory is still 155.2MB. Free memory was 112.5MB in the beginning and 93.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,878 INFO L158 Benchmark]: Boogie Procedure Inliner took 76.49ms. Allocated memory is still 155.2MB. Free memory was 93.6MB in the beginning and 90.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,879 INFO L158 Benchmark]: Boogie Preprocessor took 30.98ms. Allocated memory is still 155.2MB. Free memory was 90.9MB in the beginning and 89.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,879 INFO L158 Benchmark]: RCFGBuilder took 580.25ms. Allocated memory is still 155.2MB. Free memory was 89.4MB in the beginning and 72.0MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,880 INFO L158 Benchmark]: TraceAbstraction took 23362.99ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 71.5MB in the beginning and 145.3MB in the end (delta: -73.9MB). Peak memory consumption was 94.1MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,880 INFO L158 Benchmark]: Witness Printer took 112.89ms. Allocated memory is still 237.0MB. Free memory was 145.3MB in the beginning and 139.0MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 12:40:52,882 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22ms. Allocated memory is still 155.2MB. Free memory is still 96.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 572.28ms. Allocated memory is still 155.2MB. Free memory was 112.5MB in the beginning and 93.6MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 76.49ms. Allocated memory is still 155.2MB. Free memory was 93.6MB in the beginning and 90.9MB in the end (delta: 2.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.98ms. Allocated memory is still 155.2MB. Free memory was 90.9MB in the beginning and 89.4MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 580.25ms. Allocated memory is still 155.2MB. Free memory was 89.4MB in the beginning and 72.0MB in the end (delta: 17.3MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 23362.99ms. Allocated memory was 155.2MB in the beginning and 237.0MB in the end (delta: 81.8MB). Free memory was 71.5MB in the beginning and 145.3MB in the end (delta: -73.9MB). Peak memory consumption was 94.1MB. Max. memory is 16.1GB. * Witness Printer took 112.89ms. Allocated memory is still 237.0MB. Free memory was 145.3MB in the beginning and 139.0MB in the end (delta: 6.3MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 23.2s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 7.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.4s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3151 SdHoareTripleChecker+Valid, 4.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 3110 mSDsluCounter, 5776 SdHoareTripleChecker+Invalid, 3.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4197 mSDsCounter, 1330 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4632 IncrementalHoareTripleChecker+Invalid, 5962 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1330 mSolverCounterUnsat, 1579 mSDtfsCounter, 4632 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 741 GetRequests, 569 SyntacticMatches, 4 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3701 ImplicationChecksByTransitivity, 2.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1402occurred in iteration=11, InterpolantAutomatonStates: 152, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 390 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 2016 PreInvPairs, 2366 NumberOfFragments, 3089 HoareAnnotationTreeSize, 2016 FomulaSimplifications, 1387 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 48 FomulaSimplificationsInter, 30935 FormulaSimplificationTreeSizeReductionInter, 9.6s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.7s InterpolantComputationTime, 1018 NumberOfCodeBlocks, 1018 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1110 ConstructedInterpolants, 0 QuantifiedInterpolants, 2139 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1089 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 255/275 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && !(waterLevel < 2)) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) && ((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0))) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || (pumpRunning == 0 && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && (tmp == 0 || waterLevel == 0)) && (\result == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && 1 <= waterLevel) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) RESULT: Ultimate proved your program to be correct! [2022-11-20 12:40:52,935 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_b0c28e4d-28b5-4fd6-a19b-1f8351df45c0/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE