./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6b4ec56b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-6b4ec56 [2022-11-20 10:30:00,030 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-20 10:30:00,032 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-20 10:30:00,074 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-20 10:30:00,075 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-20 10:30:00,079 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-20 10:30:00,081 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-20 10:30:00,084 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-20 10:30:00,086 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-20 10:30:00,088 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-20 10:30:00,089 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-20 10:30:00,091 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-20 10:30:00,092 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-20 10:30:00,097 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-20 10:30:00,098 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-20 10:30:00,099 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-20 10:30:00,100 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-20 10:30:00,101 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-20 10:30:00,102 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-20 10:30:00,104 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-20 10:30:00,105 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-20 10:30:00,107 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-20 10:30:00,108 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-20 10:30:00,109 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-20 10:30:00,112 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-20 10:30:00,113 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-20 10:30:00,113 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-20 10:30:00,114 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-20 10:30:00,115 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-20 10:30:00,116 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-20 10:30:00,116 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-20 10:30:00,117 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-20 10:30:00,118 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-20 10:30:00,119 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-20 10:30:00,120 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-20 10:30:00,120 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-20 10:30:00,121 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-20 10:30:00,122 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-20 10:30:00,122 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-20 10:30:00,123 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-20 10:30:00,124 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-20 10:30:00,125 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-20 10:30:00,161 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-20 10:30:00,161 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-20 10:30:00,162 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-20 10:30:00,162 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-20 10:30:00,163 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-20 10:30:00,172 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-20 10:30:00,173 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-20 10:30:00,173 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-20 10:30:00,173 INFO L138 SettingsManager]: * Use SBE=true [2022-11-20 10:30:00,174 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-20 10:30:00,174 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-20 10:30:00,174 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-20 10:30:00,174 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-20 10:30:00,175 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-20 10:30:00,175 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-20 10:30:00,175 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-20 10:30:00,175 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-20 10:30:00,176 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-20 10:30:00,176 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-20 10:30:00,176 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-20 10:30:00,176 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-20 10:30:00,177 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-20 10:30:00,177 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-20 10:30:00,177 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-20 10:30:00,177 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:30:00,178 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-20 10:30:00,178 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-20 10:30:00,178 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-20 10:30:00,178 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-20 10:30:00,179 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-20 10:30:00,179 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-11-20 10:30:00,179 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-20 10:30:00,180 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-20 10:30:00,180 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> e7a194b3d6e079d2329a0d70eaa59b34ff3d58300de8b046ef1cd7cff7f67b94 [2022-11-20 10:30:00,475 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-20 10:30:00,509 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-20 10:30:00,512 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-20 10:30:00,513 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-20 10:30:00,514 INFO L275 PluginConnector]: CDTParser initialized [2022-11-20 10:30:00,515 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/../../sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2022-11-20 10:30:03,400 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-20 10:30:03,782 INFO L351 CDTParser]: Found 1 translation units. [2022-11-20 10:30:03,782 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c [2022-11-20 10:30:03,795 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/data/f485c9390/924ebb177e8149bdbbd3eae1794936ce/FLAGc521f29b4 [2022-11-20 10:30:03,810 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/data/f485c9390/924ebb177e8149bdbbd3eae1794936ce [2022-11-20 10:30:03,813 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-20 10:30:03,815 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-20 10:30:03,816 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-20 10:30:03,816 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-20 10:30:03,820 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-20 10:30:03,821 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:30:03" (1/1) ... [2022-11-20 10:30:03,822 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3deef482 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:03, skipping insertion in model container [2022-11-20 10:30:03,822 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 10:30:03" (1/1) ... [2022-11-20 10:30:03,830 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-20 10:30:03,877 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-20 10:30:04,140 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2022-11-20 10:30:04,149 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:30:04,160 INFO L203 MainTranslator]: Completed pre-run [2022-11-20 10:30:04,231 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/sv-benchmarks/c/product-lines/minepump_spec5_product53.cil.c[17915,17928] [2022-11-20 10:30:04,236 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-20 10:30:04,253 INFO L208 MainTranslator]: Completed translation [2022-11-20 10:30:04,254 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04 WrapperNode [2022-11-20 10:30:04,254 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-20 10:30:04,255 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-20 10:30:04,255 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-20 10:30:04,256 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-20 10:30:04,263 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,277 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,323 INFO L138 Inliner]: procedures = 58, calls = 105, calls flagged for inlining = 25, calls inlined = 22, statements flattened = 230 [2022-11-20 10:30:04,324 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-20 10:30:04,324 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-20 10:30:04,324 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-20 10:30:04,325 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-20 10:30:04,335 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,335 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,347 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,353 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,357 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,374 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,376 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,377 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,379 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-20 10:30:04,384 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-20 10:30:04,384 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-20 10:30:04,384 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-20 10:30:04,385 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (1/1) ... [2022-11-20 10:30:04,392 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-20 10:30:04,410 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:30:04,432 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-20 10:30:04,467 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-20 10:30:04,492 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-20 10:30:04,492 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-20 10:30:04,492 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-20 10:30:04,493 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-20 10:30:04,493 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-20 10:30:04,494 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-20 10:30:04,494 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-20 10:30:04,494 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:30:04,494 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:30:04,494 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-20 10:30:04,494 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-20 10:30:04,495 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 10:30:04,495 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 10:30:04,495 INFO L130 BoogieDeclarations]: Found specification of procedure isPumpRunning [2022-11-20 10:30:04,495 INFO L138 BoogieDeclarations]: Found implementation of procedure isPumpRunning [2022-11-20 10:30:04,495 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-20 10:30:04,495 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-20 10:30:04,495 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-20 10:30:04,495 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-20 10:30:04,495 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-20 10:30:04,496 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-20 10:30:04,496 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-20 10:30:04,578 INFO L235 CfgBuilder]: Building ICFG [2022-11-20 10:30:04,580 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-20 10:30:04,979 INFO L276 CfgBuilder]: Performing block encoding [2022-11-20 10:30:04,986 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-20 10:30:04,987 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-20 10:30:04,989 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:30:04 BoogieIcfgContainer [2022-11-20 10:30:04,989 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-20 10:30:04,992 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-20 10:30:04,992 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-20 10:30:04,996 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-20 10:30:04,996 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 10:30:03" (1/3) ... [2022-11-20 10:30:04,997 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@31a2852b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:30:04, skipping insertion in model container [2022-11-20 10:30:04,997 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 10:30:04" (2/3) ... [2022-11-20 10:30:04,998 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@31a2852b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 10:30:04, skipping insertion in model container [2022-11-20 10:30:04,998 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:30:04" (3/3) ... [2022-11-20 10:30:04,999 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product53.cil.c [2022-11-20 10:30:05,025 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-20 10:30:05,025 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-20 10:30:05,083 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-20 10:30:05,090 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@214810a1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-20 10:30:05,091 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-20 10:30:05,096 INFO L276 IsEmpty]: Start isEmpty. Operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-20 10:30:05,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-11-20 10:30:05,114 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:05,115 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:05,116 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:05,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:05,122 INFO L85 PathProgramCache]: Analyzing trace with hash 836117038, now seen corresponding path program 1 times [2022-11-20 10:30:05,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:05,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1697281609] [2022-11-20 10:30:05,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:05,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:05,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-11-20 10:30:05,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,390 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-20 10:30:05,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,396 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:05,397 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:05,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1697281609] [2022-11-20 10:30:05,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1697281609] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:05,398 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:05,399 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-20 10:30:05,400 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [863580820] [2022-11-20 10:30:05,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:05,406 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-20 10:30:05,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:05,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-20 10:30:05,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:30:05,440 INFO L87 Difference]: Start difference. First operand has 105 states, 78 states have (on average 1.3717948717948718) internal successors, (107), 88 states have internal predecessors, (107), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 10:30:05,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:05,482 INFO L93 Difference]: Finished difference Result 201 states and 272 transitions. [2022-11-20 10:30:05,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-20 10:30:05,484 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 32 [2022-11-20 10:30:05,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:05,494 INFO L225 Difference]: With dead ends: 201 [2022-11-20 10:30:05,494 INFO L226 Difference]: Without dead ends: 96 [2022-11-20 10:30:05,499 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-20 10:30:05,502 INFO L413 NwaCegarLoop]: 133 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 133 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:05,503 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 133 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:30:05,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-20 10:30:05,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2022-11-20 10:30:05,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.3098591549295775) internal successors, (93), 80 states have internal predecessors, (93), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 10:30:05,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 124 transitions. [2022-11-20 10:30:05,555 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 124 transitions. Word has length 32 [2022-11-20 10:30:05,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:05,555 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 124 transitions. [2022-11-20 10:30:05,556 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 12.0) internal successors, (24), 2 states have internal predecessors, (24), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-11-20 10:30:05,556 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 124 transitions. [2022-11-20 10:30:05,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-11-20 10:30:05,559 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:05,559 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:05,559 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-20 10:30:05,560 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:05,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:05,561 INFO L85 PathProgramCache]: Analyzing trace with hash 485124754, now seen corresponding path program 1 times [2022-11-20 10:30:05,561 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:05,561 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42120028] [2022-11-20 10:30:05,562 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:05,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:05,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:05,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2022-11-20 10:30:05,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:05,806 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:05,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:05,815 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42120028] [2022-11-20 10:30:05,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42120028] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:05,816 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:05,816 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-20 10:30:05,816 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2057763792] [2022-11-20 10:30:05,816 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:05,817 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-20 10:30:05,818 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:05,818 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-20 10:30:05,819 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:30:05,819 INFO L87 Difference]: Start difference. First operand 96 states and 124 transitions. Second operand has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:30:05,853 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:05,854 INFO L93 Difference]: Finished difference Result 184 states and 243 transitions. [2022-11-20 10:30:05,854 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-20 10:30:05,854 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 37 [2022-11-20 10:30:05,855 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:05,856 INFO L225 Difference]: With dead ends: 184 [2022-11-20 10:30:05,857 INFO L226 Difference]: Without dead ends: 96 [2022-11-20 10:30:05,858 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-20 10:30:05,860 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 101 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 122 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:05,860 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 122 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-20 10:30:05,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-11-20 10:30:05,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 96. [2022-11-20 10:30:05,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 96 states, 71 states have (on average 1.295774647887324) internal successors, (92), 80 states have internal predecessors, (92), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-20 10:30:05,879 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 123 transitions. [2022-11-20 10:30:05,880 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 123 transitions. Word has length 37 [2022-11-20 10:30:05,881 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:05,883 INFO L495 AbstractCegarLoop]: Abstraction has 96 states and 123 transitions. [2022-11-20 10:30:05,883 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.0) internal successors, (30), 3 states have internal predecessors, (30), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-11-20 10:30:05,883 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 123 transitions. [2022-11-20 10:30:05,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-11-20 10:30:05,885 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:05,885 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:05,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-20 10:30:05,886 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:05,886 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:05,887 INFO L85 PathProgramCache]: Analyzing trace with hash 88830114, now seen corresponding path program 1 times [2022-11-20 10:30:05,887 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:05,887 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171618917] [2022-11-20 10:30:05,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:05,888 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:05,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:06,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-20 10:30:06,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-11-20 10:30:06,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,052 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:06,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:06,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171618917] [2022-11-20 10:30:06,053 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171618917] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:06,053 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:06,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 10:30:06,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140418661] [2022-11-20 10:30:06,054 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:06,054 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 10:30:06,055 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:06,055 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 10:30:06,055 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 10:30:06,056 INFO L87 Difference]: Start difference. First operand 96 states and 123 transitions. Second operand has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:30:06,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:06,416 INFO L93 Difference]: Finished difference Result 288 states and 392 transitions. [2022-11-20 10:30:06,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 10:30:06,417 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 46 [2022-11-20 10:30:06,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:06,420 INFO L225 Difference]: With dead ends: 288 [2022-11-20 10:30:06,420 INFO L226 Difference]: Without dead ends: 200 [2022-11-20 10:30:06,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:30:06,424 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 186 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 101 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 285 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 101 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:06,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 285 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 101 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 10:30:06,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 200 states. [2022-11-20 10:30:06,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 200 to 182. [2022-11-20 10:30:06,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 135 states have (on average 1.2740740740740741) internal successors, (172), 143 states have internal predecessors, (172), 26 states have call successors, (26), 17 states have call predecessors, (26), 20 states have return successors, (43), 26 states have call predecessors, (43), 24 states have call successors, (43) [2022-11-20 10:30:06,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 241 transitions. [2022-11-20 10:30:06,468 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 241 transitions. Word has length 46 [2022-11-20 10:30:06,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:06,470 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 241 transitions. [2022-11-20 10:30:06,470 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.25) internal successors, (37), 3 states have internal predecessors, (37), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-20 10:30:06,470 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 241 transitions. [2022-11-20 10:30:06,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-11-20 10:30:06,479 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:06,479 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:06,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-20 10:30:06,479 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:06,480 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:06,480 INFO L85 PathProgramCache]: Analyzing trace with hash 385655368, now seen corresponding path program 1 times [2022-11-20 10:30:06,480 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:06,481 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [651820403] [2022-11-20 10:30:06,481 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:06,481 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:06,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-20 10:30:06,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:30:06,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:06,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-11-20 10:30:06,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,604 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:06,604 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:06,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [651820403] [2022-11-20 10:30:06,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [651820403] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:06,605 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:06,605 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-20 10:30:06,605 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [762853590] [2022-11-20 10:30:06,606 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:06,606 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-20 10:30:06,606 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:06,607 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-20 10:30:06,607 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 10:30:06,607 INFO L87 Difference]: Start difference. First operand 182 states and 241 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:06,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:06,740 INFO L93 Difference]: Finished difference Result 304 states and 389 transitions. [2022-11-20 10:30:06,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-20 10:30:06,741 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-11-20 10:30:06,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:06,749 INFO L225 Difference]: With dead ends: 304 [2022-11-20 10:30:06,750 INFO L226 Difference]: Without dead ends: 166 [2022-11-20 10:30:06,751 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-20 10:30:06,759 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 72 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 66 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 229 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 66 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:06,762 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 229 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 66 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:30:06,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2022-11-20 10:30:06,792 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 164. [2022-11-20 10:30:06,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 123 states have (on average 1.2845528455284554) internal successors, (158), 131 states have internal predecessors, (158), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2022-11-20 10:30:06,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 209 transitions. [2022-11-20 10:30:06,801 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 209 transitions. Word has length 52 [2022-11-20 10:30:06,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:06,801 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 209 transitions. [2022-11-20 10:30:06,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 3 states have internal predecessors, (40), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:06,802 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 209 transitions. [2022-11-20 10:30:06,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-20 10:30:06,804 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:06,805 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:06,808 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-20 10:30:06,809 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:06,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:06,810 INFO L85 PathProgramCache]: Analyzing trace with hash -2065653903, now seen corresponding path program 1 times [2022-11-20 10:30:06,810 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:06,810 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749594701] [2022-11-20 10:30:06,811 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:06,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:06,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:06,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:06,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 10:30:06,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:07,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-20 10:30:07,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,087 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:07,087 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:07,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749594701] [2022-11-20 10:30:07,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749594701] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:07,088 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:07,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-20 10:30:07,090 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730657125] [2022-11-20 10:30:07,090 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:07,091 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-20 10:30:07,091 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:07,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-20 10:30:07,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-20 10:30:07,093 INFO L87 Difference]: Start difference. First operand 164 states and 209 transitions. Second operand has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:07,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:07,340 INFO L93 Difference]: Finished difference Result 328 states and 426 transitions. [2022-11-20 10:30:07,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:30:07,341 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-20 10:30:07,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:07,347 INFO L225 Difference]: With dead ends: 328 [2022-11-20 10:30:07,347 INFO L226 Difference]: Without dead ends: 172 [2022-11-20 10:30:07,348 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-20 10:30:07,355 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 73 mSDsluCounter, 337 mSDsCounter, 0 mSdLazyCounter, 141 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 76 SdHoareTripleChecker+Valid, 441 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 141 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:07,356 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [76 Valid, 441 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 141 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:30:07,357 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2022-11-20 10:30:07,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 167. [2022-11-20 10:30:07,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 167 states, 126 states have (on average 1.2777777777777777) internal successors, (161), 134 states have internal predecessors, (161), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2022-11-20 10:30:07,398 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 167 states to 167 states and 212 transitions. [2022-11-20 10:30:07,398 INFO L78 Accepts]: Start accepts. Automaton has 167 states and 212 transitions. Word has length 56 [2022-11-20 10:30:07,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:07,399 INFO L495 AbstractCegarLoop]: Abstraction has 167 states and 212 transitions. [2022-11-20 10:30:07,399 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.5) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:07,399 INFO L276 IsEmpty]: Start isEmpty. Operand 167 states and 212 transitions. [2022-11-20 10:30:07,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-20 10:30:07,400 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:07,400 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:07,400 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-20 10:30:07,401 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:07,401 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:07,401 INFO L85 PathProgramCache]: Analyzing trace with hash -1642952077, now seen corresponding path program 1 times [2022-11-20 10:30:07,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:07,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [353288223] [2022-11-20 10:30:07,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:07,404 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:07,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:07,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 10:30:07,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:07,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-20 10:30:07,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,561 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:07,561 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:07,562 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [353288223] [2022-11-20 10:30:07,562 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [353288223] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:07,562 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:07,562 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 10:30:07,562 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [81441376] [2022-11-20 10:30:07,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:07,563 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 10:30:07,563 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:07,563 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 10:30:07,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:30:07,564 INFO L87 Difference]: Start difference. First operand 167 states and 212 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:07,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:07,708 INFO L93 Difference]: Finished difference Result 336 states and 440 transitions. [2022-11-20 10:30:07,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-20 10:30:07,709 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-20 10:30:07,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:07,710 INFO L225 Difference]: With dead ends: 336 [2022-11-20 10:30:07,710 INFO L226 Difference]: Without dead ends: 177 [2022-11-20 10:30:07,711 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:30:07,712 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 77 mSDsluCounter, 238 mSDsCounter, 0 mSdLazyCounter, 105 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 342 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 105 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:07,712 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [81 Valid, 342 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 105 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-20 10:30:07,713 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 177 states. [2022-11-20 10:30:07,726 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 177 to 169. [2022-11-20 10:30:07,727 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 128 states have (on average 1.2734375) internal successors, (163), 136 states have internal predecessors, (163), 20 states have call successors, (20), 15 states have call predecessors, (20), 20 states have return successors, (31), 22 states have call predecessors, (31), 20 states have call successors, (31) [2022-11-20 10:30:07,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 214 transitions. [2022-11-20 10:30:07,728 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 214 transitions. Word has length 56 [2022-11-20 10:30:07,729 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:07,729 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 214 transitions. [2022-11-20 10:30:07,729 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-20 10:30:07,729 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 214 transitions. [2022-11-20 10:30:07,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-20 10:30:07,730 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:07,730 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:07,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-20 10:30:07,730 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:07,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:07,731 INFO L85 PathProgramCache]: Analyzing trace with hash 846576885, now seen corresponding path program 1 times [2022-11-20 10:30:07,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:07,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229696722] [2022-11-20 10:30:07,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:07,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:07,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:07,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 10:30:07,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:07,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,834 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-11-20 10:30:07,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:07,836 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:07,836 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:07,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229696722] [2022-11-20 10:30:07,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229696722] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:07,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:07,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-20 10:30:07,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [789469641] [2022-11-20 10:30:07,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:07,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-20 10:30:07,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:07,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-20 10:30:07,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-20 10:30:07,839 INFO L87 Difference]: Start difference. First operand 169 states and 214 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 10:30:08,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:08,169 INFO L93 Difference]: Finished difference Result 477 states and 626 transitions. [2022-11-20 10:30:08,171 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-20 10:30:08,171 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 56 [2022-11-20 10:30:08,171 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:08,173 INFO L225 Difference]: With dead ends: 477 [2022-11-20 10:30:08,173 INFO L226 Difference]: Without dead ends: 316 [2022-11-20 10:30:08,174 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 12 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:30:08,175 INFO L413 NwaCegarLoop]: 154 mSDtfsCounter, 234 mSDsluCounter, 196 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 241 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:08,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [241 Valid, 350 Invalid, 262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-20 10:30:08,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 316 states. [2022-11-20 10:30:08,207 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 316 to 308. [2022-11-20 10:30:08,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 308 states, 231 states have (on average 1.2467532467532467) internal successors, (288), 243 states have internal predecessors, (288), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2022-11-20 10:30:08,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 394 transitions. [2022-11-20 10:30:08,212 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 394 transitions. Word has length 56 [2022-11-20 10:30:08,213 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:08,213 INFO L495 AbstractCegarLoop]: Abstraction has 308 states and 394 transitions. [2022-11-20 10:30:08,213 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 4 states have internal predecessors, (45), 3 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2022-11-20 10:30:08,213 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 394 transitions. [2022-11-20 10:30:08,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-11-20 10:30:08,216 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:08,217 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:08,217 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-20 10:30:08,217 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:08,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:08,218 INFO L85 PathProgramCache]: Analyzing trace with hash 1874240715, now seen corresponding path program 1 times [2022-11-20 10:30:08,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:08,219 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [808319986] [2022-11-20 10:30:08,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:08,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:08,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-20 10:30:08,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-20 10:30:08,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,359 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:08,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-20 10:30:08,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2022-11-20 10:30:08,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,390 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-20 10:30:08,390 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:08,391 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [808319986] [2022-11-20 10:30:08,391 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [808319986] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:08,391 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:08,395 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-20 10:30:08,395 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1964884904] [2022-11-20 10:30:08,395 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:08,396 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-20 10:30:08,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:08,397 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-20 10:30:08,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-20 10:30:08,398 INFO L87 Difference]: Start difference. First operand 308 states and 394 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 10:30:08,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:08,680 INFO L93 Difference]: Finished difference Result 624 states and 811 transitions. [2022-11-20 10:30:08,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-20 10:30:08,681 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 58 [2022-11-20 10:30:08,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:08,684 INFO L225 Difference]: With dead ends: 624 [2022-11-20 10:30:08,684 INFO L226 Difference]: Without dead ends: 324 [2022-11-20 10:30:08,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=157, Unknown=0, NotChecked=0, Total=210 [2022-11-20 10:30:08,688 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 128 mSDsluCounter, 383 mSDsCounter, 0 mSdLazyCounter, 232 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 134 SdHoareTripleChecker+Valid, 483 SdHoareTripleChecker+Invalid, 270 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 232 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:08,688 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [134 Valid, 483 Invalid, 270 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 232 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-20 10:30:08,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2022-11-20 10:30:08,721 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 304. [2022-11-20 10:30:08,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 304 states, 227 states have (on average 1.2158590308370043) internal successors, (276), 239 states have internal predecessors, (276), 40 states have call successors, (40), 33 states have call predecessors, (40), 36 states have return successors, (66), 41 states have call predecessors, (66), 40 states have call successors, (66) [2022-11-20 10:30:08,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 304 states to 304 states and 382 transitions. [2022-11-20 10:30:08,725 INFO L78 Accepts]: Start accepts. Automaton has 304 states and 382 transitions. Word has length 58 [2022-11-20 10:30:08,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:08,727 INFO L495 AbstractCegarLoop]: Abstraction has 304 states and 382 transitions. [2022-11-20 10:30:08,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (6), 3 states have call predecessors, (6), 3 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-20 10:30:08,727 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 382 transitions. [2022-11-20 10:30:08,728 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-20 10:30:08,728 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:08,729 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:08,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-20 10:30:08,729 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:08,729 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:08,730 INFO L85 PathProgramCache]: Analyzing trace with hash -1421347697, now seen corresponding path program 1 times [2022-11-20 10:30:08,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:08,730 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [880109997] [2022-11-20 10:30:08,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:08,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:08,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:08,950 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 10:30:08,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:09,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-20 10:30:09,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:09,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-11-20 10:30:09,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:09,036 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:09,038 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:09,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2022-11-20 10:30:09,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:09,047 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-20 10:30:09,047 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:09,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [880109997] [2022-11-20 10:30:09,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [880109997] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-20 10:30:09,048 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-20 10:30:09,048 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-11-20 10:30:09,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [146797836] [2022-11-20 10:30:09,048 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-20 10:30:09,049 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-11-20 10:30:09,049 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:09,049 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-11-20 10:30:09,049 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-11-20 10:30:09,050 INFO L87 Difference]: Start difference. First operand 304 states and 382 transitions. Second operand has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 10:30:10,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:10,305 INFO L93 Difference]: Finished difference Result 950 states and 1254 transitions. [2022-11-20 10:30:10,305 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-20 10:30:10,306 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 60 [2022-11-20 10:30:10,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:10,312 INFO L225 Difference]: With dead ends: 950 [2022-11-20 10:30:10,312 INFO L226 Difference]: Without dead ends: 709 [2022-11-20 10:30:10,314 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 286 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=221, Invalid=969, Unknown=0, NotChecked=0, Total=1190 [2022-11-20 10:30:10,316 INFO L413 NwaCegarLoop]: 135 mSDtfsCounter, 558 mSDsluCounter, 698 mSDsCounter, 0 mSdLazyCounter, 1022 mSolverCounterSat, 215 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 565 SdHoareTripleChecker+Valid, 833 SdHoareTripleChecker+Invalid, 1237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 215 IncrementalHoareTripleChecker+Valid, 1022 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:10,316 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [565 Valid, 833 Invalid, 1237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [215 Valid, 1022 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-11-20 10:30:10,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 709 states. [2022-11-20 10:30:10,409 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 709 to 585. [2022-11-20 10:30:10,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 585 states, 437 states have (on average 1.2151029748283753) internal successors, (531), 463 states have internal predecessors, (531), 77 states have call successors, (77), 58 states have call predecessors, (77), 70 states have return successors, (127), 79 states have call predecessors, (127), 77 states have call successors, (127) [2022-11-20 10:30:10,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 585 states to 585 states and 735 transitions. [2022-11-20 10:30:10,414 INFO L78 Accepts]: Start accepts. Automaton has 585 states and 735 transitions. Word has length 60 [2022-11-20 10:30:10,414 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:10,414 INFO L495 AbstractCegarLoop]: Abstraction has 585 states and 735 transitions. [2022-11-20 10:30:10,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 4.7) internal successors, (47), 8 states have internal predecessors, (47), 4 states have call successors, (6), 4 states have call predecessors, (6), 3 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2022-11-20 10:30:10,415 INFO L276 IsEmpty]: Start isEmpty. Operand 585 states and 735 transitions. [2022-11-20 10:30:10,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-11-20 10:30:10,416 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:10,417 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:10,417 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-20 10:30:10,417 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:10,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:10,418 INFO L85 PathProgramCache]: Analyzing trace with hash 118762499, now seen corresponding path program 1 times [2022-11-20 10:30:10,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:10,418 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1074114096] [2022-11-20 10:30:10,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:10,418 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:10,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 10:30:10,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 10:30:10,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:10,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 10:30:10,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:10,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-11-20 10:30:10,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2022-11-20 10:30:10,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 10:30:10,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:10,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,586 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2022-11-20 10:30:10,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,588 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 6 proven. 1 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-11-20 10:30:10,588 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:10,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1074114096] [2022-11-20 10:30:10,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1074114096] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:30:10,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1230614831] [2022-11-20 10:30:10,589 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:10,589 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:30:10,590 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:30:10,593 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:30:10,618 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-20 10:30:10,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:10,719 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-20 10:30:10,727 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:30:10,982 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 26 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-20 10:30:10,982 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:30:11,266 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 10 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-20 10:30:11,266 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1230614831] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:30:11,266 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:30:11,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 13 [2022-11-20 10:30:11,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1650291185] [2022-11-20 10:30:11,267 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:30:11,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-11-20 10:30:11,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:11,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-11-20 10:30:11,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2022-11-20 10:30:11,269 INFO L87 Difference]: Start difference. First operand 585 states and 735 transitions. Second operand has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2022-11-20 10:30:12,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:12,514 INFO L93 Difference]: Finished difference Result 1239 states and 1603 transitions. [2022-11-20 10:30:12,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-11-20 10:30:12,514 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) Word has length 109 [2022-11-20 10:30:12,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:12,519 INFO L225 Difference]: With dead ends: 1239 [2022-11-20 10:30:12,519 INFO L226 Difference]: Without dead ends: 715 [2022-11-20 10:30:12,522 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 277 GetRequests, 240 SyntacticMatches, 4 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 242 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=269, Invalid=921, Unknown=0, NotChecked=0, Total=1190 [2022-11-20 10:30:12,522 INFO L413 NwaCegarLoop]: 175 mSDtfsCounter, 348 mSDsluCounter, 1142 mSDsCounter, 0 mSdLazyCounter, 1007 mSolverCounterSat, 153 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 355 SdHoareTripleChecker+Valid, 1317 SdHoareTripleChecker+Invalid, 1160 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 153 IncrementalHoareTripleChecker+Valid, 1007 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:12,523 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [355 Valid, 1317 Invalid, 1160 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [153 Valid, 1007 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-11-20 10:30:12,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2022-11-20 10:30:12,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 641. [2022-11-20 10:30:12,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 475 states have (on average 1.2) internal successors, (570), 507 states have internal predecessors, (570), 86 states have call successors, (86), 71 states have call predecessors, (86), 79 states have return successors, (114), 83 states have call predecessors, (114), 86 states have call successors, (114) [2022-11-20 10:30:12,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 770 transitions. [2022-11-20 10:30:12,591 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 770 transitions. Word has length 109 [2022-11-20 10:30:12,592 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:12,593 INFO L495 AbstractCegarLoop]: Abstraction has 641 states and 770 transitions. [2022-11-20 10:30:12,593 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 10.153846153846153) internal successors, (132), 9 states have internal predecessors, (132), 4 states have call successors, (23), 6 states have call predecessors, (23), 6 states have return successors, (21), 5 states have call predecessors, (21), 4 states have call successors, (21) [2022-11-20 10:30:12,593 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 770 transitions. [2022-11-20 10:30:12,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2022-11-20 10:30:12,600 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:12,600 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:12,611 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-20 10:30:12,806 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:30:12,807 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:12,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:12,808 INFO L85 PathProgramCache]: Analyzing trace with hash -1755329041, now seen corresponding path program 1 times [2022-11-20 10:30:12,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:12,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1183859326] [2022-11-20 10:30:12,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:12,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:12,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 10:30:13,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 10:30:13,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:13,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 10:30:13,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:13,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-20 10:30:13,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:13,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,206 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:13,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 10:30:13,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:13,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2022-11-20 10:30:13,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:13,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:13,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2022-11-20 10:30:13,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 153 [2022-11-20 10:30:13,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 162 [2022-11-20 10:30:13,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:13,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2022-11-20 10:30:13,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,283 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 96 proven. 7 refuted. 0 times theorem prover too weak. 98 trivial. 0 not checked. [2022-11-20 10:30:13,283 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:13,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1183859326] [2022-11-20 10:30:13,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1183859326] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:30:13,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1239545914] [2022-11-20 10:30:13,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:13,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:30:13,284 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:30:13,285 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:30:13,310 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-20 10:30:13,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:13,434 INFO L263 TraceCheckSpWp]: Trace formula consists of 580 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-20 10:30:13,444 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:30:13,732 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 147 proven. 4 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2022-11-20 10:30:13,733 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:30:14,302 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 78 proven. 42 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2022-11-20 10:30:14,303 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1239545914] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:30:14,303 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:30:14,303 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 11] total 27 [2022-11-20 10:30:14,303 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032029414] [2022-11-20 10:30:14,304 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:30:14,305 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-11-20 10:30:14,305 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:14,306 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-11-20 10:30:14,306 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=122, Invalid=580, Unknown=0, NotChecked=0, Total=702 [2022-11-20 10:30:14,307 INFO L87 Difference]: Start difference. First operand 641 states and 770 transitions. Second operand has 27 states, 27 states have (on average 8.296296296296296) internal successors, (224), 23 states have internal predecessors, (224), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2022-11-20 10:30:17,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:17,334 INFO L93 Difference]: Finished difference Result 1850 states and 2310 transitions. [2022-11-20 10:30:17,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-11-20 10:30:17,335 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 8.296296296296296) internal successors, (224), 23 states have internal predecessors, (224), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) Word has length 191 [2022-11-20 10:30:17,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:17,341 INFO L225 Difference]: With dead ends: 1850 [2022-11-20 10:30:17,342 INFO L226 Difference]: Without dead ends: 1217 [2022-11-20 10:30:17,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 506 GetRequests, 424 SyntacticMatches, 5 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1601 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=1190, Invalid=4972, Unknown=0, NotChecked=0, Total=6162 [2022-11-20 10:30:17,347 INFO L413 NwaCegarLoop]: 146 mSDtfsCounter, 1478 mSDsluCounter, 1181 mSDsCounter, 0 mSdLazyCounter, 2306 mSolverCounterSat, 548 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1478 SdHoareTripleChecker+Valid, 1327 SdHoareTripleChecker+Invalid, 2854 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 548 IncrementalHoareTripleChecker+Valid, 2306 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:17,347 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1478 Valid, 1327 Invalid, 2854 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [548 Valid, 2306 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-11-20 10:30:17,349 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1217 states. [2022-11-20 10:30:17,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1217 to 1148. [2022-11-20 10:30:17,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1148 states, 862 states have (on average 1.1392111368909512) internal successors, (982), 903 states have internal predecessors, (982), 151 states have call successors, (151), 130 states have call predecessors, (151), 134 states have return successors, (188), 143 states have call predecessors, (188), 151 states have call successors, (188) [2022-11-20 10:30:17,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1148 states to 1148 states and 1321 transitions. [2022-11-20 10:30:17,502 INFO L78 Accepts]: Start accepts. Automaton has 1148 states and 1321 transitions. Word has length 191 [2022-11-20 10:30:17,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:17,502 INFO L495 AbstractCegarLoop]: Abstraction has 1148 states and 1321 transitions. [2022-11-20 10:30:17,503 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 8.296296296296296) internal successors, (224), 23 states have internal predecessors, (224), 10 states have call successors, (37), 8 states have call predecessors, (37), 10 states have return successors, (36), 9 states have call predecessors, (36), 10 states have call successors, (36) [2022-11-20 10:30:17,503 INFO L276 IsEmpty]: Start isEmpty. Operand 1148 states and 1321 transitions. [2022-11-20 10:30:17,507 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 208 [2022-11-20 10:30:17,507 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:17,507 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:17,520 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-20 10:30:17,714 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-20 10:30:17,715 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:17,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:17,715 INFO L85 PathProgramCache]: Analyzing trace with hash 1314092273, now seen corresponding path program 1 times [2022-11-20 10:30:17,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:17,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1400932179] [2022-11-20 10:30:17,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:17,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:17,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:17,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 10:30:17,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:17,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 10:30:17,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:17,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:17,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:17,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 10:30:17,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:17,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:17,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-20 10:30:18,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:18,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:18,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 10:30:18,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:18,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-20 10:30:18,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2022-11-20 10:30:18,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 122 [2022-11-20 10:30:18,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:18,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:18,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:30:18,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2022-11-20 10:30:18,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 169 [2022-11-20 10:30:18,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2022-11-20 10:30:18,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:18,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2022-11-20 10:30:18,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,144 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 86 proven. 58 refuted. 0 times theorem prover too weak. 99 trivial. 0 not checked. [2022-11-20 10:30:18,144 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:18,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1400932179] [2022-11-20 10:30:18,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1400932179] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:30:18,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [95719683] [2022-11-20 10:30:18,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:18,145 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:30:18,146 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:30:18,147 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:30:18,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-20 10:30:18,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:18,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 622 conjuncts, 12 conjunts are in the unsatisfiable core [2022-11-20 10:30:18,300 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:30:18,500 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 186 proven. 11 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2022-11-20 10:30:18,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:30:19,158 INFO L134 CoverageAnalysis]: Checked inductivity of 243 backedges. 101 proven. 61 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2022-11-20 10:30:19,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [95719683] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:30:19,159 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:30:19,159 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 22 [2022-11-20 10:30:19,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1902537337] [2022-11-20 10:30:19,159 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:30:19,161 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-11-20 10:30:19,161 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:19,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-11-20 10:30:19,162 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=394, Unknown=0, NotChecked=0, Total=462 [2022-11-20 10:30:19,163 INFO L87 Difference]: Start difference. First operand 1148 states and 1321 transitions. Second operand has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2022-11-20 10:30:20,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:20,968 INFO L93 Difference]: Finished difference Result 2250 states and 2629 transitions. [2022-11-20 10:30:20,969 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-11-20 10:30:20,969 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) Word has length 207 [2022-11-20 10:30:20,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:20,976 INFO L225 Difference]: With dead ends: 2250 [2022-11-20 10:30:20,976 INFO L226 Difference]: Without dead ends: 1216 [2022-11-20 10:30:20,979 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 510 GetRequests, 462 SyntacticMatches, 1 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 442 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=483, Invalid=1869, Unknown=0, NotChecked=0, Total=2352 [2022-11-20 10:30:20,980 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 683 mSDsluCounter, 386 mSDsCounter, 0 mSdLazyCounter, 1578 mSolverCounterSat, 262 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 686 SdHoareTripleChecker+Valid, 432 SdHoareTripleChecker+Invalid, 1840 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 262 IncrementalHoareTripleChecker+Valid, 1578 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:20,980 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [686 Valid, 432 Invalid, 1840 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [262 Valid, 1578 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-11-20 10:30:20,982 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1216 states. [2022-11-20 10:30:21,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1216 to 1172. [2022-11-20 10:30:21,084 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1172 states, 878 states have (on average 1.1309794988610478) internal successors, (993), 919 states have internal predecessors, (993), 151 states have call successors, (151), 138 states have call predecessors, (151), 142 states have return successors, (188), 143 states have call predecessors, (188), 151 states have call successors, (188) [2022-11-20 10:30:21,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1172 states to 1172 states and 1332 transitions. [2022-11-20 10:30:21,089 INFO L78 Accepts]: Start accepts. Automaton has 1172 states and 1332 transitions. Word has length 207 [2022-11-20 10:30:21,090 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:21,090 INFO L495 AbstractCegarLoop]: Abstraction has 1172 states and 1332 transitions. [2022-11-20 10:30:21,090 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 11.409090909090908) internal successors, (251), 15 states have internal predecessors, (251), 7 states have call successors, (47), 8 states have call predecessors, (47), 11 states have return successors, (41), 10 states have call predecessors, (41), 7 states have call successors, (41) [2022-11-20 10:30:21,091 INFO L276 IsEmpty]: Start isEmpty. Operand 1172 states and 1332 transitions. [2022-11-20 10:30:21,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2022-11-20 10:30:21,095 INFO L187 NwaCegarLoop]: Found error trace [2022-11-20 10:30:21,096 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:21,107 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2022-11-20 10:30:21,302 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-20 10:30:21,302 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-20 10:30:21,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-20 10:30:21,303 INFO L85 PathProgramCache]: Analyzing trace with hash -916420892, now seen corresponding path program 1 times [2022-11-20 10:30:21,303 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-20 10:30:21,303 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [432227147] [2022-11-20 10:30:21,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:21,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-20 10:30:21,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-20 10:30:21,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-20 10:30:21,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:21,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-11-20 10:30:21,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:21,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2022-11-20 10:30:21,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:21,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:21,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-20 10:30:21,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:21,792 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-11-20 10:30:21,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 117 [2022-11-20 10:30:21,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2022-11-20 10:30:21,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-11-20 10:30:21,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,855 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-20 10:30:21,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-11-20 10:30:21,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2022-11-20 10:30:21,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2022-11-20 10:30:21,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 179 [2022-11-20 10:30:21,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-20 10:30:21,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 200 [2022-11-20 10:30:21,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:21,915 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 90 proven. 43 refuted. 0 times theorem prover too weak. 111 trivial. 0 not checked. [2022-11-20 10:30:21,915 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-20 10:30:21,915 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [432227147] [2022-11-20 10:30:21,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [432227147] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-20 10:30:21,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2105980154] [2022-11-20 10:30:21,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-20 10:30:21,916 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-20 10:30:21,916 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 [2022-11-20 10:30:21,917 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-20 10:30:21,934 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-11-20 10:30:22,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-20 10:30:22,055 INFO L263 TraceCheckSpWp]: Trace formula consists of 622 conjuncts, 18 conjunts are in the unsatisfiable core [2022-11-20 10:30:22,060 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-20 10:30:22,308 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 131 proven. 26 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2022-11-20 10:30:22,308 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-20 10:30:23,039 INFO L134 CoverageAnalysis]: Checked inductivity of 244 backedges. 99 proven. 45 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2022-11-20 10:30:23,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2105980154] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-20 10:30:23,040 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-20 10:30:23,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 13] total 23 [2022-11-20 10:30:23,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1457253095] [2022-11-20 10:30:23,043 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-20 10:30:23,044 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-11-20 10:30:23,044 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-20 10:30:23,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-11-20 10:30:23,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=397, Unknown=0, NotChecked=0, Total=506 [2022-11-20 10:30:23,046 INFO L87 Difference]: Start difference. First operand 1172 states and 1332 transitions. Second operand has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-11-20 10:30:25,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-20 10:30:25,308 INFO L93 Difference]: Finished difference Result 2198 states and 2562 transitions. [2022-11-20 10:30:25,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-11-20 10:30:25,309 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) Word has length 208 [2022-11-20 10:30:25,310 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-20 10:30:25,312 INFO L225 Difference]: With dead ends: 2198 [2022-11-20 10:30:25,312 INFO L226 Difference]: Without dead ends: 0 [2022-11-20 10:30:25,319 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 527 GetRequests, 459 SyntacticMatches, 8 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 849 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=895, Invalid=2887, Unknown=0, NotChecked=0, Total=3782 [2022-11-20 10:30:25,320 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 894 mSDsluCounter, 424 mSDsCounter, 0 mSdLazyCounter, 2190 mSolverCounterSat, 416 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 897 SdHoareTripleChecker+Valid, 480 SdHoareTripleChecker+Invalid, 2606 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 416 IncrementalHoareTripleChecker+Valid, 2190 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-11-20 10:30:25,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [897 Valid, 480 Invalid, 2606 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [416 Valid, 2190 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2022-11-20 10:30:25,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-20 10:30:25,321 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-20 10:30:25,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-20 10:30:25,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-20 10:30:25,322 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 208 [2022-11-20 10:30:25,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-20 10:30:25,323 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-20 10:30:25,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 10.08695652173913) internal successors, (232), 19 states have internal predecessors, (232), 13 states have call successors, (47), 11 states have call predecessors, (47), 13 states have return successors, (41), 14 states have call predecessors, (41), 13 states have call successors, (41) [2022-11-20 10:30:25,323 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-20 10:30:25,323 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-20 10:30:25,326 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-20 10:30:25,337 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2022-11-20 10:30:25,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-11-20 10:30:25,538 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-20 10:30:42,191 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 551 558) the Hoare annotation is: (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (= 1 ~systemActive~0)) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) [2022-11-20 10:30:42,192 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 551 558) no Hoare annotation was computed. [2022-11-20 10:30:42,192 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 551 558) no Hoare annotation was computed. [2022-11-20 10:30:42,192 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 458 464) no Hoare annotation was computed. [2022-11-20 10:30:42,192 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 458 464) the Hoare annotation is: true [2022-11-20 10:30:42,192 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 943 954) the Hoare annotation is: (let ((.cse1 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= ~waterLevel~0 2)))) (and (or .cse0 .cse1 (not (<= 2 ~waterLevel~0)) .cse2 .cse3) (or (not (= ~pumpRunning~0 0)) .cse0 .cse1 .cse3) (or (not (= |old(~methaneLevelCritical~0)| 0)) (= ~methaneLevelCritical~0 0) .cse0 .cse2 .cse3 (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,193 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 943 954) no Hoare annotation was computed. [2022-11-20 10:30:42,193 INFO L899 garLoopResultBuilder]: For program point L947-1(lines 943 954) no Hoare annotation was computed. [2022-11-20 10:30:42,193 INFO L899 garLoopResultBuilder]: For program point L833(line 833) no Hoare annotation was computed. [2022-11-20 10:30:42,193 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 812 841) no Hoare annotation was computed. [2022-11-20 10:30:42,193 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 812 841) the Hoare annotation is: true [2022-11-20 10:30:42,194 INFO L899 garLoopResultBuilder]: For program point L826(lines 826 830) no Hoare annotation was computed. [2022-11-20 10:30:42,194 INFO L902 garLoopResultBuilder]: At program point L826-1(lines 826 830) the Hoare annotation is: true [2022-11-20 10:30:42,194 INFO L899 garLoopResultBuilder]: For program point L823(line 823) no Hoare annotation was computed. [2022-11-20 10:30:42,194 INFO L902 garLoopResultBuilder]: At program point L822-2(lines 822 836) the Hoare annotation is: true [2022-11-20 10:30:42,194 INFO L902 garLoopResultBuilder]: At program point L818(line 818) the Hoare annotation is: true [2022-11-20 10:30:42,195 INFO L899 garLoopResultBuilder]: For program point L818-1(line 818) no Hoare annotation was computed. [2022-11-20 10:30:42,195 INFO L902 garLoopResultBuilder]: At program point L837(lines 812 841) the Hoare annotation is: true [2022-11-20 10:30:42,195 INFO L895 garLoopResultBuilder]: At program point L960(lines 955 963) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse4 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (and .cse2 .cse3 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse4)) (.cse5 (not (<= |old(~waterLevel~0)| 2))) (.cse7 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 .cse3 (= ~waterLevel~0 1) .cse4) .cse5) (or .cse0 .cse1 .cse6 (not (<= |old(~waterLevel~0)| 0)) .cse7) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5) (or .cse0 .cse1 .cse6 .cse5 .cse7 (and .cse2 .cse3 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse4))))) [2022-11-20 10:30:42,195 INFO L899 garLoopResultBuilder]: For program point L923(lines 923 927) no Hoare annotation was computed. [2022-11-20 10:30:42,196 INFO L895 garLoopResultBuilder]: At program point L923-2(lines 919 930) the Hoare annotation is: (let ((.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (<= 1 ~switchedOnBeforeTS~0)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse2 (<= ~waterLevel~0 0) .cse3) .cse4) (or (and .cse2 (= |old(~waterLevel~0)| ~waterLevel~0) .cse3) .cse0 .cse1 (not (<= |old(~waterLevel~0)| 0)) .cse4) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) (and .cse2 (= ~waterLevel~0 1) .cse3) .cse5) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse5))) [2022-11-20 10:30:42,196 INFO L895 garLoopResultBuilder]: At program point L791(line 791) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse12 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse18 (= ~waterLevel~0 1)) (.cse13 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse5 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (not (= |old(~pumpRunning~0)| 0))) (.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse16 (and .cse7 .cse0 .cse8 .cse9 .cse10 .cse12 .cse18 .cse13)) (.cse1 (= ~methaneLevelCritical~0 0)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse17 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse2 .cse3 .cse6 (not (<= |old(~waterLevel~0)| 0)) .cse5) (let ((.cse11 (<= ~waterLevel~0 0))) (or (not (<= |old(~waterLevel~0)| 1)) (and .cse7 .cse0 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse2 .cse3 (and .cse14 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) .cse5)) (or .cse15 .cse2 .cse4 (not (<= 2 |old(~waterLevel~0)|))) (or .cse16 .cse2 .cse3 .cse17 (and .cse14 .cse7 .cse8 .cse9 .cse10 .cse12 .cse18 .cse13) .cse4) (or .cse15 .cse2 (and .cse0 .cse8 .cse12 .cse6) .cse4) (or .cse16 .cse1 .cse2 .cse3 .cse17 .cse4)))) [2022-11-20 10:30:42,196 INFO L899 garLoopResultBuilder]: For program point L791-1(line 791) no Hoare annotation was computed. [2022-11-20 10:30:42,196 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 431 457) no Hoare annotation was computed. [2022-11-20 10:30:42,197 INFO L899 garLoopResultBuilder]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2022-11-20 10:30:42,197 INFO L895 garLoopResultBuilder]: At program point L532(line 532) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (and .cse1 .cse2 .cse4 .cse11 .cse5 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse6)) (.cse3 (= ~methaneLevelCritical~0 0)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse10 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not .cse11)) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) .cse7 (not (< 1 |old(~waterLevel~0)|)) .cse8) (or .cse9 .cse0 .cse7 (not (<= |old(~waterLevel~0)| 0)) .cse10) (or .cse9 .cse0 .cse7 (and .cse1 .cse2 .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5 .cse6) .cse8 .cse10) (or .cse3 .cse0 .cse7 .cse8 .cse10) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse8)))) [2022-11-20 10:30:42,197 INFO L895 garLoopResultBuilder]: At program point L528(line 528) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse4 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse5 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse9 (and .cse2 .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) .cse6)) (.cse10 (not (< 1 |old(~waterLevel~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (= ~methaneLevelCritical~0 0))) (.cse7 (not (<= |old(~waterLevel~0)| 2))) (.cse8 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 (and .cse2 .cse3 .cse4 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|) .cse5 .cse6) .cse7 .cse8 .cse9) (or .cse0 .cse1 .cse7 (not (<= |old(~waterLevel~0)| 0)) .cse8 .cse9) (or .cse0 .cse1 .cse10 .cse11 .cse7) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse7) (or .cse0 .cse1 .cse10 (and .cse2 .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) .cse7) (or .cse0 .cse1 .cse11 .cse7 .cse8)))) [2022-11-20 10:30:42,197 INFO L899 garLoopResultBuilder]: For program point L912(line 912) no Hoare annotation was computed. [2022-11-20 10:30:42,198 INFO L895 garLoopResultBuilder]: At program point L776(line 776) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse0 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse0 .cse1) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-20 10:30:42,198 INFO L899 garLoopResultBuilder]: For program point L776-1(line 776) no Hoare annotation was computed. [2022-11-20 10:30:42,198 INFO L895 garLoopResultBuilder]: At program point L537(line 537) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0)) .cse0 .cse1) (or .cse0 .cse2 .cse1 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse2 (not (< 1 |old(~waterLevel~0)|)) .cse1))) [2022-11-20 10:30:42,198 INFO L899 garLoopResultBuilder]: For program point L793(lines 793 803) no Hoare annotation was computed. [2022-11-20 10:30:42,199 INFO L895 garLoopResultBuilder]: At program point L537-1(lines 518 542) the Hoare annotation is: (let ((.cse10 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= ~pumpRunning~0 0)) (.cse11 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse13 (= ~waterLevel~0 1)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse7 (and .cse10 .cse5 .cse11 .cse12 .cse13 .cse14)) (.cse8 (not (< 1 |old(~waterLevel~0)|))) (.cse15 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse3 (not (<= |old(~waterLevel~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse1 .cse4) (or .cse7 .cse0 .cse1 .cse8 (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15) (or .cse7 .cse6 .cse0 .cse1 .cse8 .cse15) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse5 .cse2) .cse0 .cse15 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0) .cse2)) (or .cse5 .cse6 .cse0 .cse1 .cse3 .cse4) (let ((.cse16 (<= ~waterLevel~0 0))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse9 .cse10 .cse11 .cse12 .cse16 .cse14) (and .cse10 .cse5 .cse11 .cse12 .cse16 .cse14) .cse4))))) [2022-11-20 10:30:42,199 INFO L899 garLoopResultBuilder]: For program point L438(lines 438 444) no Hoare annotation was computed. [2022-11-20 10:30:42,199 INFO L895 garLoopResultBuilder]: At program point L566(lines 559 569) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0)) (.cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 (= |old(~waterLevel~0)| ~waterLevel~0) (not (<= |old(~waterLevel~0)| 0)) .cse2) (or .cse0 (and .cse3 .cse4 .cse5 (= ~waterLevel~0 1) .cse6) .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 (and .cse3 .cse4 .cse5 (<= ~waterLevel~0 0) .cse6) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse7))) [2022-11-20 10:30:42,199 INFO L899 garLoopResultBuilder]: For program point L789(lines 789 806) no Hoare annotation was computed. [2022-11-20 10:30:42,200 INFO L899 garLoopResultBuilder]: For program point L438-2(lines 434 456) no Hoare annotation was computed. [2022-11-20 10:30:42,200 INFO L895 garLoopResultBuilder]: At program point L789-1(lines 781 809) the Hoare annotation is: (let ((.cse23 (= ~waterLevel~0 1)) (.cse7 (= ~pumpRunning~0 0)) (.cse10 (= 1 ~systemActive~0)) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse6 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse18 (<= ~pumpRunning~0 |timeShift___utac_acc__Specification5_spec__3_~tmp___0~3#1|)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse12 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse24 (<= ~waterLevel~0 0)) (.cse13 (= |timeShift___utac_acc__Specification5_spec__3_~tmp~9#1| ~waterLevel~0)) (.cse21 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse15 (and .cse17 .cse6 .cse8 .cse18 .cse9 .cse12 .cse24 .cse13 .cse21 .cse14)) (.cse0 (= ~methaneLevelCritical~0 0)) (.cse16 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse12 .cse24 .cse13 .cse21 .cse14)) (.cse20 (not (<= |old(~waterLevel~0)| 0))) (.cse19 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse1 (not .cse10)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (< 1 |old(~waterLevel~0)|))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse5 (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse12 .cse13 .cse23 .cse14))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (let ((.cse11 (<= (+ ~waterLevel~0 1) |old(~waterLevel~0)|))) (or (and .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse1 .cse2 .cse16 (and .cse17 .cse6 .cse8 .cse0 .cse18 .cse9 .cse11 .cse12 .cse13 .cse14) .cse4 .cse19)) (or .cse15 .cse1 .cse2 .cse16 .cse20 .cse19) (let ((.cse22 (<= 2 ~waterLevel~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse1 (and .cse7 .cse8 .cse18 .cse13 .cse21) (and (<= 1 ~pumpRunning~0) .cse8 .cse22 .cse13 .cse21) (and .cse7 .cse8 .cse22 .cse13 .cse21) .cse4)) (or .cse0 .cse1 .cse2 .cse16 .cse20 .cse19) (or (and .cse17 .cse6 .cse8 .cse18 .cse9 .cse12 .cse13 .cse23 .cse14) .cse1 .cse2 .cse3 .cse4 .cse5)))) [2022-11-20 10:30:42,200 INFO L895 garLoopResultBuilder]: At program point L913(lines 908 915) the Hoare annotation is: (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (or .cse0 .cse1 (not (< 1 |old(~waterLevel~0)|)) .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse2))) [2022-11-20 10:30:42,201 INFO L895 garLoopResultBuilder]: At program point L992(lines 987 995) the Hoare annotation is: (let ((.cse7 (= ~methaneLevelCritical~0 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (= ~pumpRunning~0 0)) (.cse8 (= ~waterLevel~0 |timeShift_getWaterLevel_#res#1|)) (.cse9 (= |timeShift_isMethaneLevelCritical_#res#1| ~methaneLevelCritical~0)) (.cse10 (= |timeShift_processEnvironment_~tmp~5#1| ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 0)) (.cse11 (<= 1 ~switchedOnBeforeTS~0))) (let ((.cse6 (not (<= 2 |old(~waterLevel~0)|))) (.cse14 (= ~methaneLevelCritical~0 0)) (.cse15 (not (<= |old(~waterLevel~0)| 1))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse16 (and .cse7 .cse0 .cse8 .cse9 .cse10 .cse18 .cse11)) (.cse17 (not (<= 1 |old(~switchedOnBeforeTS~0)|))) (.cse4 (not (= 1 ~systemActive~0))) (.cse12 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= |old(~waterLevel~0)| 2)))) (and (let ((.cse1 (= 2 |timeShift_getWaterLevel_#res#1|))) (or (and .cse0 .cse1 .cse2) .cse3 .cse4 (and (<= 1 ~pumpRunning~0) .cse1 .cse2) .cse5 .cse6)) (or (and .cse7 .cse0 .cse8 .cse9 .cse10 .cse11) .cse4 .cse12 .cse5 (and .cse13 .cse7 .cse8 .cse14 .cse9 .cse10 .cse11) .cse6) (or .cse15 .cse14 .cse4 .cse12 .cse16 .cse17) (or (and .cse7 .cse0 .cse8 .cse9 .cse10 .cse2 .cse11) .cse4 .cse12 (and .cse13 .cse7 .cse8 .cse9 .cse10 .cse2 .cse11) (not (<= |old(~waterLevel~0)| 0)) .cse17) (or .cse15 .cse3 .cse4 (and .cse0 .cse8 .cse2)) (or (and .cse13 .cse7 .cse8 .cse9 .cse10 .cse18 .cse11) (not (= |old(~waterLevel~0)| 1)) .cse4 .cse12 .cse16 .cse17) (or .cse4 .cse12 (not (< 1 |old(~waterLevel~0)|)) (= ~waterLevel~0 1) .cse5)))) [2022-11-20 10:30:42,201 INFO L899 garLoopResultBuilder]: For program point L794(lines 794 800) no Hoare annotation was computed. [2022-11-20 10:30:42,201 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 431 457) the Hoare annotation is: (let ((.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse2 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse0 (= ~switchedOnBeforeTS~0 |old(~switchedOnBeforeTS~0)|)) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) .cse0 .cse1) (not (= |old(~pumpRunning~0)| 0)) .cse2 .cse3) (or .cse2 .cse4 (not (< 1 |old(~waterLevel~0)|)) (and .cse5 .cse0 (< 1 ~waterLevel~0) (<= ~waterLevel~0 2)) .cse3) (or (not (<= |old(~waterLevel~0)| 1)) .cse2 .cse4 (and .cse5 .cse0 .cse1) (not (<= 1 |old(~switchedOnBeforeTS~0)|))))) [2022-11-20 10:30:42,201 INFO L899 garLoopResultBuilder]: For program point L526(lines 526 534) no Hoare annotation was computed. [2022-11-20 10:30:42,201 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 431 457) no Hoare annotation was computed. [2022-11-20 10:30:42,202 INFO L895 garLoopResultBuilder]: At program point L778(lines 771 780) the Hoare annotation is: (let ((.cse0 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse3 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (<= 1 ~switchedOnBeforeTS~0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) .cse0) .cse1 .cse2) (or .cse3 .cse1 .cse4 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse1 .cse4 .cse2 (not (<= 1 |old(~switchedOnBeforeTS~0)|)))))) [2022-11-20 10:30:42,202 INFO L899 garLoopResultBuilder]: For program point L522(lines 522 539) no Hoare annotation was computed. [2022-11-20 10:30:42,202 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 912) no Hoare annotation was computed. [2022-11-20 10:30:42,202 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 901) no Hoare annotation was computed. [2022-11-20 10:30:42,202 INFO L899 garLoopResultBuilder]: For program point L894-2(lines 894 901) no Hoare annotation was computed. [2022-11-20 10:30:42,203 INFO L899 garLoopResultBuilder]: For program point L725(lines 725 731) no Hoare annotation was computed. [2022-11-20 10:30:42,203 INFO L899 garLoopResultBuilder]: For program point L725-1(lines 725 731) no Hoare annotation was computed. [2022-11-20 10:30:42,203 INFO L902 garLoopResultBuilder]: At program point L754(lines 695 758) the Hoare annotation is: true [2022-11-20 10:30:42,203 INFO L895 garLoopResultBuilder]: At program point L717(line 717) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse6))) [2022-11-20 10:30:42,203 INFO L902 garLoopResultBuilder]: At program point L903(lines 884 906) the Hoare annotation is: true [2022-11-20 10:30:42,204 INFO L895 garLoopResultBuilder]: At program point L870(lines 866 872) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:30:42,204 INFO L895 garLoopResultBuilder]: At program point L672(lines 668 674) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:30:42,204 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-20 10:30:42,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-20 10:30:42,204 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-20 10:30:42,204 INFO L895 garLoopResultBuilder]: At program point L751(lines 704 752) the Hoare annotation is: false [2022-11-20 10:30:42,205 INFO L899 garLoopResultBuilder]: For program point L706(lines 705 750) no Hoare annotation was computed. [2022-11-20 10:30:42,205 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-20 10:30:42,205 INFO L895 garLoopResultBuilder]: At program point L768(lines 763 770) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:30:42,205 INFO L899 garLoopResultBuilder]: For program point L735(lines 735 746) no Hoare annotation was computed. [2022-11-20 10:30:42,205 INFO L895 garLoopResultBuilder]: At program point L727(line 727) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)) (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3))) [2022-11-20 10:30:42,206 INFO L895 garLoopResultBuilder]: At program point L748(lines 705 750) the Hoare annotation is: (let ((.cse1 (= 2 ~waterLevel~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse4 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 1 ~switchedOnBeforeTS~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse1 .cse2 .cse3) (and .cse0 (<= ~waterLevel~0 1) .cse2 .cse3) (and .cse4 .cse5 .cse2 .cse3 (<= ~waterLevel~0 0) .cse6) (and .cse4 .cse5 .cse2 .cse3 (= ~waterLevel~0 1) .cse6))) [2022-11-20 10:30:42,206 INFO L899 garLoopResultBuilder]: For program point L715(lines 715 721) no Hoare annotation was computed. [2022-11-20 10:30:42,206 INFO L899 garLoopResultBuilder]: For program point L715-1(lines 715 721) no Hoare annotation was computed. [2022-11-20 10:30:42,206 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 711) no Hoare annotation was computed. [2022-11-20 10:30:42,206 INFO L902 garLoopResultBuilder]: At program point L881(lines 873 883) the Hoare annotation is: true [2022-11-20 10:30:42,207 INFO L895 garLoopResultBuilder]: At program point L687(lines 682 690) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:30:42,207 INFO L895 garLoopResultBuilder]: At program point L679(lines 675 681) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2022-11-20 10:30:42,207 INFO L899 garLoopResultBuilder]: For program point L741(lines 741 745) no Hoare annotation was computed. [2022-11-20 10:30:42,207 INFO L895 garLoopResultBuilder]: At program point L741-2(lines 735 746) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2))) (or (and .cse0 (< 1 ~waterLevel~0) .cse1 .cse2 .cse3) (and (= ~pumpRunning~0 0) .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse2 .cse3 (<= 1 ~switchedOnBeforeTS~0)))) [2022-11-20 10:30:42,207 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 466 490) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,208 INFO L895 garLoopResultBuilder]: At program point L630(lines 615 633) the Hoare annotation is: (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or (and (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0)) .cse0 .cse1 .cse2) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:30:42,208 INFO L899 garLoopResultBuilder]: For program point L624(lines 624 628) no Hoare annotation was computed. [2022-11-20 10:30:42,208 INFO L899 garLoopResultBuilder]: For program point L624-2(lines 624 628) no Hoare annotation was computed. [2022-11-20 10:30:42,208 INFO L899 garLoopResultBuilder]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2022-11-20 10:30:42,208 INFO L895 garLoopResultBuilder]: At program point L548(lines 543 550) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= 2 ~waterLevel~0)) (not (<= ~waterLevel~0 2))))) [2022-11-20 10:30:42,209 INFO L895 garLoopResultBuilder]: At program point L480(line 480) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~3#1| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,209 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 466 490) no Hoare annotation was computed. [2022-11-20 10:30:42,209 INFO L899 garLoopResultBuilder]: For program point L474(lines 474 482) no Hoare annotation was computed. [2022-11-20 10:30:42,209 INFO L899 garLoopResultBuilder]: For program point L470(lines 470 487) no Hoare annotation was computed. [2022-11-20 10:30:42,209 INFO L895 garLoopResultBuilder]: At program point L1005(lines 996 1009) the Hoare annotation is: (let ((.cse2 (not (<= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (or .cse1 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or .cse0 (= ~pumpRunning~0 0) .cse1 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:30:42,209 INFO L895 garLoopResultBuilder]: At program point L485(line 485) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,210 INFO L899 garLoopResultBuilder]: For program point L485-1(lines 466 490) no Hoare annotation was computed. [2022-11-20 10:30:42,210 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 931 942) no Hoare annotation was computed. [2022-11-20 10:30:42,210 INFO L899 garLoopResultBuilder]: For program point L935-1(lines 931 942) no Hoare annotation was computed. [2022-11-20 10:30:42,210 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 931 942) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 (not (= ~methaneLevelCritical~0 0)) .cse1 .cse2 (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= ~pumpRunning~0 0)) .cse0 .cse2 .cse3))) [2022-11-20 10:30:42,210 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 492 516) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,211 INFO L895 garLoopResultBuilder]: At program point L506(line 506) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,211 INFO L895 garLoopResultBuilder]: At program point L502(line 502) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,211 INFO L899 garLoopResultBuilder]: For program point L500(lines 500 508) no Hoare annotation was computed. [2022-11-20 10:30:42,211 INFO L899 garLoopResultBuilder]: For program point L496(lines 496 513) no Hoare annotation was computed. [2022-11-20 10:30:42,211 INFO L895 garLoopResultBuilder]: At program point L649(lines 634 652) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,212 INFO L899 garLoopResultBuilder]: For program point L643(lines 643 647) no Hoare annotation was computed. [2022-11-20 10:30:42,212 INFO L899 garLoopResultBuilder]: For program point L643-2(lines 643 647) no Hoare annotation was computed. [2022-11-20 10:30:42,212 INFO L895 garLoopResultBuilder]: At program point L511(line 511) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (not (<= ~waterLevel~0 2))))) [2022-11-20 10:30:42,212 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 492 516) no Hoare annotation was computed. [2022-11-20 10:30:42,212 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 492 516) no Hoare annotation was computed. [2022-11-20 10:30:42,213 INFO L895 garLoopResultBuilder]: At program point L1015(lines 1010 1018) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (not (<= ~waterLevel~0 2))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (= ~methaneLevelCritical~0 0)) (not (<= ~waterLevel~0 1)) (not (<= 1 ~switchedOnBeforeTS~0))))) [2022-11-20 10:30:42,213 INFO L899 garLoopResultBuilder]: For program point isPumpRunningEXIT(lines 570 578) no Hoare annotation was computed. [2022-11-20 10:30:42,213 INFO L902 garLoopResultBuilder]: At program point isPumpRunningENTRY(lines 570 578) the Hoare annotation is: true [2022-11-20 10:30:42,213 INFO L899 garLoopResultBuilder]: For program point isPumpRunningFINAL(lines 570 578) no Hoare annotation was computed. [2022-11-20 10:30:42,217 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-20 10:30:42,219 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-20 10:30:42,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 10:30:42 BoogieIcfgContainer [2022-11-20 10:30:42,258 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-20 10:30:42,258 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-20 10:30:42,258 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-20 10:30:42,259 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-20 10:30:42,259 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 10:30:04" (3/4) ... [2022-11-20 10:30:42,262 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-20 10:30:42,269 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-20 10:30:42,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-20 10:30:42,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-20 10:30:42,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-20 10:30:42,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-20 10:30:42,270 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-20 10:30:42,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-20 10:30:42,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-20 10:30:42,271 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isPumpRunning [2022-11-20 10:30:42,277 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-20 10:30:42,278 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-20 10:30:42,279 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-20 10:30:42,279 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:30:42,280 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-20 10:30:42,305 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 10:30:42,306 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:30:42,306 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && (((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && waterLevel == \result) && 2 <= waterLevel) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((pumpRunning == 0 && waterLevel == \result) && 2 <= waterLevel) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) [2022-11-20 10:30:42,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((pumpRunning == 0 || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((pumpRunning == 0 || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) [2022-11-20 10:30:42,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:30:42,307 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) [2022-11-20 10:30:42,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) [2022-11-20 10:30:42,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) [2022-11-20 10:30:42,308 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-20 10:30:42,309 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || \result == 1) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-20 10:30:42,309 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) [2022-11-20 10:30:42,309 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) [2022-11-20 10:30:42,309 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) [2022-11-20 10:30:42,333 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/witness.graphml [2022-11-20 10:30:42,333 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-20 10:30:42,334 INFO L158 Benchmark]: Toolchain (without parser) took 38519.08ms. Allocated memory was 172.0MB in the beginning and 360.7MB in the end (delta: 188.7MB). Free memory was 139.9MB in the beginning and 290.2MB in the end (delta: -150.3MB). Peak memory consumption was 42.6MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,334 INFO L158 Benchmark]: CDTParser took 0.31ms. Allocated memory is still 172.0MB. Free memory is still 143.1MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 10:30:42,334 INFO L158 Benchmark]: CACSL2BoogieTranslator took 438.20ms. Allocated memory is still 172.0MB. Free memory was 139.9MB in the beginning and 121.0MB in the end (delta: 18.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,335 INFO L158 Benchmark]: Boogie Procedure Inliner took 68.48ms. Allocated memory is still 172.0MB. Free memory was 121.0MB in the beginning and 118.5MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,335 INFO L158 Benchmark]: Boogie Preprocessor took 58.70ms. Allocated memory is still 172.0MB. Free memory was 118.5MB in the beginning and 116.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-20 10:30:42,335 INFO L158 Benchmark]: RCFGBuilder took 605.69ms. Allocated memory is still 172.0MB. Free memory was 116.9MB in the beginning and 98.8MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,336 INFO L158 Benchmark]: TraceAbstraction took 37265.58ms. Allocated memory was 172.0MB in the beginning and 360.7MB in the end (delta: 188.7MB). Free memory was 98.4MB in the beginning and 296.5MB in the end (delta: -198.1MB). Peak memory consumption was 181.1MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,336 INFO L158 Benchmark]: Witness Printer took 74.86ms. Allocated memory is still 360.7MB. Free memory was 296.5MB in the beginning and 290.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-20 10:30:42,337 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31ms. Allocated memory is still 172.0MB. Free memory is still 143.1MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 438.20ms. Allocated memory is still 172.0MB. Free memory was 139.9MB in the beginning and 121.0MB in the end (delta: 18.9MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 68.48ms. Allocated memory is still 172.0MB. Free memory was 121.0MB in the beginning and 118.5MB in the end (delta: 2.5MB). Peak memory consumption was 4.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 58.70ms. Allocated memory is still 172.0MB. Free memory was 118.5MB in the beginning and 116.9MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 605.69ms. Allocated memory is still 172.0MB. Free memory was 116.9MB in the beginning and 98.8MB in the end (delta: 18.1MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * TraceAbstraction took 37265.58ms. Allocated memory was 172.0MB in the beginning and 360.7MB in the end (delta: 188.7MB). Free memory was 98.4MB in the beginning and 296.5MB in the end (delta: -198.1MB). Peak memory consumption was 181.1MB. Max. memory is 16.1GB. * Witness Printer took 74.86ms. Allocated memory is still 360.7MB. Free memory was 296.5MB in the beginning and 290.2MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 912]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 105 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 37.2s, OverallIterations: 13, TraceHistogramMax: 7, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 11.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 16.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 4885 SdHoareTripleChecker+Valid, 6.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 4832 mSDsluCounter, 6774 SdHoareTripleChecker+Invalid, 5.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5264 mSDsCounter, 1824 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 8941 IncrementalHoareTripleChecker+Invalid, 10765 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1824 mSolverCounterUnsat, 1510 mSDtfsCounter, 8941 mSolverCounterSat, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1981 GetRequests, 1674 SyntacticMatches, 20 SemanticMatches, 287 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3449 ImplicationChecksByTransitivity, 4.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1172occurred in iteration=12, InterpolantAutomatonStates: 237, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.7s AutomataMinimizationTime, 13 MinimizatonAttempts, 372 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 49 LocationsWithAnnotation, 3205 PreInvPairs, 3751 NumberOfFragments, 3278 HoareAnnotationTreeSize, 3205 FomulaSimplifications, 6417 FormulaSimplificationTreeSizeReduction, 1.5s HoareSimplificationTime, 49 FomulaSimplificationsInter, 68760 FormulaSimplificationTreeSizeReductionInter, 15.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 6.3s InterpolantComputationTime, 1883 NumberOfCodeBlocks, 1883 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 2577 ConstructedInterpolants, 0 QuantifiedInterpolants, 5706 SizeOfPredicates, 9 NumberOfNonLiveVariables, 2193 ConjunctsInSsa, 51 ConjunctsInUnsatCore, 21 InterpolantComputations, 9 PerfectInterpolantSequences, 1883/2202 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 884]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 996]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 1)) || \result == 1) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 615]: Loop Invariant Derived loop invariant: (((((\result == 0 && tmp___0 == 0) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(waterLevel <= 1)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS))) && (((!(\old(pumpRunning) == 0) || pumpRunning == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) - InvariantResult [Line: 695]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 771]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel)))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 705]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0) || (((1 <= pumpRunning && 2 == waterLevel) && 1 == systemActive) && splverifierCounter == 0)) || (((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && splverifierCounter == 0)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((1 <= pumpRunning && methaneLevelCritical == 0) && 1 == systemActive) && splverifierCounter == 0) && waterLevel == 1) && 1 <= switchedOnBeforeTS) - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && ((((!(1 == systemActive) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 668]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((((!(\old(waterLevel) == 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((pumpRunning == \old(pumpRunning) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) && ((((((pumpRunning == \old(pumpRunning) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || ((pumpRunning == \old(pumpRunning) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 987]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0 && 2 == \result) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((1 <= pumpRunning && 2 == \result) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2)) || !(2 <= \old(waterLevel))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && 1 <= switchedOnBeforeTS)) || !(2 <= \old(waterLevel)))) && (((((!(\old(waterLevel) <= 1) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || ((pumpRunning == 0 && waterLevel == \result) && \old(waterLevel) == waterLevel))) && (((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || ((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || waterLevel == 1) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 866]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || ((((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel <= 0) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) || (((pumpRunning == \old(pumpRunning) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: (((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || \old(waterLevel) == waterLevel) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS))) && (((((pumpRunning == 0 || !(\old(waterLevel) == 1)) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2))) && ((((((((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) || ((1 <= pumpRunning && 2 == waterLevel) && \old(waterLevel) == waterLevel))) && (((((pumpRunning == 0 || methaneLevelCritical == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || (((((methaneLevelCritical == \result && pumpRunning == 0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && 1 <= switchedOnBeforeTS)) || !(1 <= \old(switchedOnBeforeTS))) - InvariantResult [Line: 812]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 634]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 682]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2))) && ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 704]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 543]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (1 <= pumpRunning && 2 == waterLevel)) || !(waterLevel <= 2)) - InvariantResult [Line: 781]: Loop Invariant Derived loop invariant: (((((((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) && (((((((((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp == waterLevel) && 1 <= switchedOnBeforeTS) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || (((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && methaneLevelCritical == 0) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && waterLevel + 1 <= \old(waterLevel)) && tmp == methaneLevelCritical) && tmp == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 2)) || !(1 <= \old(switchedOnBeforeTS)))) && ((((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && waterLevel == \result) && pumpRunning <= tmp___0) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((1 <= pumpRunning && waterLevel == \result) && 2 <= waterLevel) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || ((((pumpRunning == 0 && waterLevel == \result) && 2 <= waterLevel) && tmp == waterLevel) && \old(waterLevel) == waterLevel)) || !(\old(waterLevel) <= 2))) && (((((methaneLevelCritical == 0 || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && waterLevel <= 0) && tmp == waterLevel) && \old(waterLevel) == waterLevel) && 1 <= switchedOnBeforeTS)) || !(\old(waterLevel) <= 0)) || !(1 <= \old(switchedOnBeforeTS)))) && (((((((((((((pumpRunning == \old(pumpRunning) && methaneLevelCritical == \result) && waterLevel == \result) && pumpRunning <= tmp___0) && \result == methaneLevelCritical) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 < \old(waterLevel))) || !(\old(waterLevel) <= 2)) || ((((((((methaneLevelCritical == \result && pumpRunning == 0) && waterLevel == \result) && \result == methaneLevelCritical) && 1 == systemActive) && tmp == methaneLevelCritical) && tmp == waterLevel) && waterLevel == 1) && 1 <= switchedOnBeforeTS)) - InvariantResult [Line: 1010]: Loop Invariant Derived loop invariant: ((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(waterLevel <= 2)) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical == 0)) || !(waterLevel <= 1)) || !(1 <= switchedOnBeforeTS)) - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 675]: Loop Invariant Derived loop invariant: ((pumpRunning == 0 && methaneLevelCritical == 0) && 1 == systemActive) && waterLevel == 1 RESULT: Ultimate proved your program to be correct! [2022-11-20 10:30:42,378 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_9fee175a-0284-4848-88e9-231382a4cd25/bin/uautomizer-ug76WZFUDN/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE