./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 4e7fbc69 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-4e7fbc6 [2022-11-23 02:36:36,036 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-23 02:36:36,038 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-23 02:36:36,063 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-23 02:36:36,066 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-23 02:36:36,070 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-23 02:36:36,075 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-23 02:36:36,079 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-23 02:36:36,081 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-23 02:36:36,087 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-23 02:36:36,089 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-23 02:36:36,092 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-23 02:36:36,092 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-23 02:36:36,095 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-23 02:36:36,097 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-23 02:36:36,100 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-23 02:36:36,102 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-23 02:36:36,103 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-23 02:36:36,106 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-23 02:36:36,113 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-23 02:36:36,114 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-23 02:36:36,117 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-23 02:36:36,118 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-23 02:36:36,119 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-23 02:36:36,130 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-23 02:36:36,130 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-23 02:36:36,130 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-23 02:36:36,132 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-23 02:36:36,133 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-23 02:36:36,134 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-23 02:36:36,135 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-23 02:36:36,136 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-23 02:36:36,138 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-23 02:36:36,141 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-23 02:36:36,142 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-23 02:36:36,142 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-23 02:36:36,143 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-23 02:36:36,143 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-23 02:36:36,144 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-23 02:36:36,145 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-23 02:36:36,146 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-23 02:36:36,147 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-23 02:36:36,186 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-23 02:36:36,190 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-23 02:36:36,191 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-23 02:36:36,191 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-23 02:36:36,192 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-23 02:36:36,192 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-23 02:36:36,193 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-23 02:36:36,193 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-23 02:36:36,194 INFO L138 SettingsManager]: * Use SBE=true [2022-11-23 02:36:36,194 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-23 02:36:36,195 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-23 02:36:36,196 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-23 02:36:36,196 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-23 02:36:36,196 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-23 02:36:36,196 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-23 02:36:36,197 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-23 02:36:36,197 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-23 02:36:36,197 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-23 02:36:36,198 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-23 02:36:36,198 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-23 02:36:36,198 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-23 02:36:36,198 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-23 02:36:36,199 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-23 02:36:36,199 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-23 02:36:36,199 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 02:36:36,200 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-23 02:36:36,200 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-23 02:36:36,200 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-23 02:36:36,201 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-23 02:36:36,201 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-23 02:36:36,202 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-23 02:36:36,202 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-23 02:36:36,203 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-23 02:36:36,203 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-23 02:36:36,203 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae631a30e0cfb00652c35b082fd4038988aa5f3b2e1b026ceeb94d0624c45642 [2022-11-23 02:36:36,493 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-23 02:36:36,514 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-23 02:36:36,517 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-23 02:36:36,518 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-23 02:36:36,519 INFO L275 PluginConnector]: CDTParser initialized [2022-11-23 02:36:36,520 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/../../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2022-11-23 02:36:39,576 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-23 02:36:39,836 INFO L351 CDTParser]: Found 1 translation units. [2022-11-23 02:36:39,837 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2022-11-23 02:36:39,848 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/data/f2592e1e1/2324883fe938419fbfdb2926900d610c/FLAGc0dde98ae [2022-11-23 02:36:39,863 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/data/f2592e1e1/2324883fe938419fbfdb2926900d610c [2022-11-23 02:36:39,866 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-23 02:36:39,868 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-23 02:36:39,869 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-23 02:36:39,870 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-23 02:36:39,873 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-23 02:36:39,874 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:36:39" (1/1) ... [2022-11-23 02:36:39,876 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16ac0da7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:39, skipping insertion in model container [2022-11-23 02:36:39,876 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 02:36:39" (1/1) ... [2022-11-23 02:36:39,884 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-23 02:36:39,937 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-23 02:36:40,166 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2022-11-23 02:36:40,198 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 02:36:40,221 INFO L203 MainTranslator]: Completed pre-run [2022-11-23 02:36:40,306 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c[13037,13050] [2022-11-23 02:36:40,321 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-23 02:36:40,339 INFO L208 MainTranslator]: Completed translation [2022-11-23 02:36:40,339 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40 WrapperNode [2022-11-23 02:36:40,340 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-23 02:36:40,341 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-23 02:36:40,341 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-23 02:36:40,341 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-23 02:36:40,349 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,363 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,389 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 26, calls inlined = 23, statements flattened = 227 [2022-11-23 02:36:40,389 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-23 02:36:40,390 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-23 02:36:40,390 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-23 02:36:40,391 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-23 02:36:40,401 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,401 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,403 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,404 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,409 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,415 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,416 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,418 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,420 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-23 02:36:40,421 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-23 02:36:40,422 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-23 02:36:40,422 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-23 02:36:40,423 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (1/1) ... [2022-11-23 02:36:40,429 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-23 02:36:40,442 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:36:40,468 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-23 02:36:40,479 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-23 02:36:40,512 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-23 02:36:40,512 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-23 02:36:40,512 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-23 02:36:40,512 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-23 02:36:40,512 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-23 02:36:40,513 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-23 02:36:40,513 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-23 02:36:40,513 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-23 02:36:40,513 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-23 02:36:40,513 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:36:40,514 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:36:40,514 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-23 02:36:40,514 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-23 02:36:40,514 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-23 02:36:40,514 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-23 02:36:40,514 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-23 02:36:40,515 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-23 02:36:40,515 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-23 02:36:40,602 INFO L235 CfgBuilder]: Building ICFG [2022-11-23 02:36:40,605 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-23 02:36:40,981 INFO L276 CfgBuilder]: Performing block encoding [2022-11-23 02:36:40,989 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-23 02:36:41,022 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-23 02:36:41,025 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:36:41 BoogieIcfgContainer [2022-11-23 02:36:41,025 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-23 02:36:41,028 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-23 02:36:41,028 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-23 02:36:41,031 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-23 02:36:41,034 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 02:36:39" (1/3) ... [2022-11-23 02:36:41,035 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b9c1e96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:36:41, skipping insertion in model container [2022-11-23 02:36:41,036 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 02:36:40" (2/3) ... [2022-11-23 02:36:41,036 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b9c1e96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 02:36:41, skipping insertion in model container [2022-11-23 02:36:41,038 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:36:41" (3/3) ... [2022-11-23 02:36:41,039 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product58.cil.c [2022-11-23 02:36:41,066 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-23 02:36:41,067 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-23 02:36:41,152 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-23 02:36:41,160 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@baddda, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-23 02:36:41,161 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-23 02:36:41,165 INFO L276 IsEmpty]: Start isEmpty. Operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) [2022-11-23 02:36:41,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-23 02:36:41,181 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:41,182 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:41,183 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:41,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:41,190 INFO L85 PathProgramCache]: Analyzing trace with hash -1031602919, now seen corresponding path program 1 times [2022-11-23 02:36:41,200 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:41,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1525895433] [2022-11-23 02:36:41,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:41,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:41,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-11-23 02:36:41,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:41,385 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:41,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1525895433] [2022-11-23 02:36:41,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1525895433] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:41,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:41,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-23 02:36:41,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2033118513] [2022-11-23 02:36:41,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:41,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-23 02:36:41,394 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:41,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-23 02:36:41,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 02:36:41,439 INFO L87 Difference]: Start difference. First operand has 94 states, 73 states have (on average 1.3835616438356164) internal successors, (101), 81 states have internal predecessors, (101), 12 states have call successors, (12), 7 states have call predecessors, (12), 7 states have return successors, (12), 10 states have call predecessors, (12), 12 states have call successors, (12) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,511 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:41,512 INFO L93 Difference]: Finished difference Result 180 states and 245 transitions. [2022-11-23 02:36:41,513 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-23 02:36:41,514 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-23 02:36:41,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:41,529 INFO L225 Difference]: With dead ends: 180 [2022-11-23 02:36:41,530 INFO L226 Difference]: Without dead ends: 85 [2022-11-23 02:36:41,534 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-23 02:36:41,539 INFO L413 NwaCegarLoop]: 119 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:41,540 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 119 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:36:41,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-11-23 02:36:41,583 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-11-23 02:36:41,585 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 66 states have (on average 1.3181818181818181) internal successors, (87), 73 states have internal predecessors, (87), 12 states have call successors, (12), 7 states have call predecessors, (12), 6 states have return successors, (11), 9 states have call predecessors, (11), 11 states have call successors, (11) [2022-11-23 02:36:41,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-11-23 02:36:41,593 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 25 [2022-11-23 02:36:41,594 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:41,594 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-11-23 02:36:41,596 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,596 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-11-23 02:36:41,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-23 02:36:41,601 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:41,601 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:41,601 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-23 02:36:41,602 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:41,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:41,604 INFO L85 PathProgramCache]: Analyzing trace with hash -1999893422, now seen corresponding path program 1 times [2022-11-23 02:36:41,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:41,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [739946765] [2022-11-23 02:36:41,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:41,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:41,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-23 02:36:41,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,761 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:41,762 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:41,762 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [739946765] [2022-11-23 02:36:41,762 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [739946765] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:41,763 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:41,763 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 02:36:41,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [499013648] [2022-11-23 02:36:41,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:41,765 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 02:36:41,765 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:41,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 02:36:41,766 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:36:41,766 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,784 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:41,784 INFO L93 Difference]: Finished difference Result 135 states and 175 transitions. [2022-11-23 02:36:41,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 02:36:41,785 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-23 02:36:41,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:41,786 INFO L225 Difference]: With dead ends: 135 [2022-11-23 02:36:41,787 INFO L226 Difference]: Without dead ends: 76 [2022-11-23 02:36:41,788 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:36:41,789 INFO L413 NwaCegarLoop]: 97 mSDtfsCounter, 13 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:41,790 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 177 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:36:41,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-23 02:36:41,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-23 02:36:41,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3333333333333333) internal successors, (80), 67 states have internal predecessors, (80), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-23 02:36:41,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 98 transitions. [2022-11-23 02:36:41,799 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 98 transitions. Word has length 26 [2022-11-23 02:36:41,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:41,800 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 98 transitions. [2022-11-23 02:36:41,800 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,800 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 98 transitions. [2022-11-23 02:36:41,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-11-23 02:36:41,802 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:41,802 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:41,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-23 02:36:41,802 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:41,803 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:41,803 INFO L85 PathProgramCache]: Analyzing trace with hash -2069285612, now seen corresponding path program 1 times [2022-11-23 02:36:41,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:41,804 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263200320] [2022-11-23 02:36:41,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:41,804 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:41,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:36:41,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:41,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:41,885 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:41,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263200320] [2022-11-23 02:36:41,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263200320] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:41,886 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:41,886 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-23 02:36:41,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405584512] [2022-11-23 02:36:41,887 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:41,887 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-23 02:36:41,887 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:41,888 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-23 02:36:41,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:36:41,890 INFO L87 Difference]: Start difference. First operand 76 states and 98 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:41,927 INFO L93 Difference]: Finished difference Result 145 states and 190 transitions. [2022-11-23 02:36:41,935 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-23 02:36:41,935 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-11-23 02:36:41,935 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:41,937 INFO L225 Difference]: With dead ends: 145 [2022-11-23 02:36:41,937 INFO L226 Difference]: Without dead ends: 76 [2022-11-23 02:36:41,937 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-23 02:36:41,939 INFO L413 NwaCegarLoop]: 96 mSDtfsCounter, 92 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 92 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:41,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [92 Valid, 96 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-23 02:36:41,943 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-11-23 02:36:41,959 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 76. [2022-11-23 02:36:41,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 60 states have (on average 1.3166666666666667) internal successors, (79), 67 states have internal predecessors, (79), 9 states have call successors, (9), 6 states have call predecessors, (9), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2022-11-23 02:36:41,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 97 transitions. [2022-11-23 02:36:41,961 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 97 transitions. Word has length 31 [2022-11-23 02:36:41,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:41,961 INFO L495 AbstractCegarLoop]: Abstraction has 76 states and 97 transitions. [2022-11-23 02:36:41,962 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-23 02:36:41,962 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 97 transitions. [2022-11-23 02:36:41,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-11-23 02:36:41,963 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:41,963 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:41,964 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-23 02:36:41,964 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:41,964 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:41,965 INFO L85 PathProgramCache]: Analyzing trace with hash -513760969, now seen corresponding path program 1 times [2022-11-23 02:36:41,965 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:41,965 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [661886033] [2022-11-23 02:36:41,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:41,965 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:42,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:36:42,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-23 02:36:42,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2022-11-23 02:36:42,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:42,137 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:42,138 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [661886033] [2022-11-23 02:36:42,138 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [661886033] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:42,138 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:42,138 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-23 02:36:42,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054545010] [2022-11-23 02:36:42,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:42,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-23 02:36:42,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:42,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-23 02:36:42,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-23 02:36:42,141 INFO L87 Difference]: Start difference. First operand 76 states and 97 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 02:36:42,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:42,452 INFO L93 Difference]: Finished difference Result 224 states and 286 transitions. [2022-11-23 02:36:42,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 02:36:42,453 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 41 [2022-11-23 02:36:42,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:42,455 INFO L225 Difference]: With dead ends: 224 [2022-11-23 02:36:42,455 INFO L226 Difference]: Without dead ends: 155 [2022-11-23 02:36:42,457 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-11-23 02:36:42,458 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 185 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 187 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:42,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [187 Valid, 302 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 02:36:42,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2022-11-23 02:36:42,482 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 149. [2022-11-23 02:36:42,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 117 states have (on average 1.2735042735042734) internal successors, (149), 125 states have internal predecessors, (149), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-11-23 02:36:42,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 184 transitions. [2022-11-23 02:36:42,485 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 184 transitions. Word has length 41 [2022-11-23 02:36:42,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:42,485 INFO L495 AbstractCegarLoop]: Abstraction has 149 states and 184 transitions. [2022-11-23 02:36:42,486 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 5 states have internal predecessors, (34), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-23 02:36:42,486 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 184 transitions. [2022-11-23 02:36:42,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-23 02:36:42,487 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:42,487 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:42,488 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-23 02:36:42,488 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:42,488 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:42,489 INFO L85 PathProgramCache]: Analyzing trace with hash 1561264077, now seen corresponding path program 1 times [2022-11-23 02:36:42,489 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:42,489 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740920685] [2022-11-23 02:36:42,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:42,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:42,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,577 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:36:42,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:42,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-23 02:36:42,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:42,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:42,699 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:42,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740920685] [2022-11-23 02:36:42,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1740920685] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:42,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:42,700 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 02:36:42,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280827047] [2022-11-23 02:36:42,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:42,701 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 02:36:42,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:42,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 02:36:42,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 02:36:42,702 INFO L87 Difference]: Start difference. First operand 149 states and 184 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 02:36:42,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:42,942 INFO L93 Difference]: Finished difference Result 309 states and 384 transitions. [2022-11-23 02:36:42,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 02:36:42,942 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-23 02:36:42,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:42,949 INFO L225 Difference]: With dead ends: 309 [2022-11-23 02:36:42,949 INFO L226 Difference]: Without dead ends: 167 [2022-11-23 02:36:42,954 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2022-11-23 02:36:42,959 INFO L413 NwaCegarLoop]: 87 mSDtfsCounter, 103 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 369 SdHoareTripleChecker+Invalid, 140 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:42,960 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 369 Invalid, 140 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 02:36:42,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-11-23 02:36:43,002 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 152. [2022-11-23 02:36:43,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 120 states have (on average 1.2666666666666666) internal successors, (152), 128 states have internal predecessors, (152), 15 states have call successors, (15), 13 states have call predecessors, (15), 16 states have return successors, (20), 16 states have call predecessors, (20), 15 states have call successors, (20) [2022-11-23 02:36:43,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 187 transitions. [2022-11-23 02:36:43,006 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 187 transitions. Word has length 47 [2022-11-23 02:36:43,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:43,008 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 187 transitions. [2022-11-23 02:36:43,009 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 02:36:43,009 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 187 transitions. [2022-11-23 02:36:43,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-11-23 02:36:43,011 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:43,012 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:43,012 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-23 02:36:43,012 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:43,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:43,013 INFO L85 PathProgramCache]: Analyzing trace with hash 1342409359, now seen corresponding path program 1 times [2022-11-23 02:36:43,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:43,013 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408854861] [2022-11-23 02:36:43,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:43,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:43,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:36:43,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:43,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-11-23 02:36:43,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,222 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:43,223 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:43,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408854861] [2022-11-23 02:36:43,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408854861] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:43,224 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:43,224 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 02:36:43,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1218070017] [2022-11-23 02:36:43,224 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:43,225 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 02:36:43,225 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:43,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 02:36:43,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 02:36:43,227 INFO L87 Difference]: Start difference. First operand 152 states and 187 transitions. Second operand has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 02:36:43,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:43,466 INFO L93 Difference]: Finished difference Result 396 states and 506 transitions. [2022-11-23 02:36:43,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-23 02:36:43,466 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 47 [2022-11-23 02:36:43,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:43,468 INFO L225 Difference]: With dead ends: 396 [2022-11-23 02:36:43,469 INFO L226 Difference]: Without dead ends: 251 [2022-11-23 02:36:43,469 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2022-11-23 02:36:43,470 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 131 mSDsluCounter, 288 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 136 SdHoareTripleChecker+Valid, 388 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:43,471 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [136 Valid, 388 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 02:36:43,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 251 states. [2022-11-23 02:36:43,499 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 251 to 243. [2022-11-23 02:36:43,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 243 states, 191 states have (on average 1.2513089005235603) internal successors, (239), 202 states have internal predecessors, (239), 26 states have call successors, (26), 23 states have call predecessors, (26), 25 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-11-23 02:36:43,501 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 243 states to 243 states and 301 transitions. [2022-11-23 02:36:43,501 INFO L78 Accepts]: Start accepts. Automaton has 243 states and 301 transitions. Word has length 47 [2022-11-23 02:36:43,502 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:43,502 INFO L495 AbstractCegarLoop]: Abstraction has 243 states and 301 transitions. [2022-11-23 02:36:43,502 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.666666666666667) internal successors, (40), 5 states have internal predecessors, (40), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-23 02:36:43,502 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 301 transitions. [2022-11-23 02:36:43,504 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-23 02:36:43,504 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:43,504 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:43,504 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-23 02:36:43,504 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:43,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:43,505 INFO L85 PathProgramCache]: Analyzing trace with hash 2094412649, now seen corresponding path program 1 times [2022-11-23 02:36:43,505 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:43,505 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [706058400] [2022-11-23 02:36:43,505 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:43,506 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:43,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:43,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:36:43,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:43,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-23 02:36:43,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:43,654 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:43,654 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:43,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [706058400] [2022-11-23 02:36:43,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [706058400] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:43,655 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:43,655 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 02:36:43,655 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1593886770] [2022-11-23 02:36:43,655 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:43,656 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 02:36:43,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:43,656 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 02:36:43,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-23 02:36:43,657 INFO L87 Difference]: Start difference. First operand 243 states and 301 transitions. Second operand has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:44,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:44,322 INFO L93 Difference]: Finished difference Result 583 states and 754 transitions. [2022-11-23 02:36:44,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-23 02:36:44,323 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-23 02:36:44,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:44,331 INFO L225 Difference]: With dead ends: 583 [2022-11-23 02:36:44,331 INFO L226 Difference]: Without dead ends: 438 [2022-11-23 02:36:44,332 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 55 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=106, Invalid=236, Unknown=0, NotChecked=0, Total=342 [2022-11-23 02:36:44,334 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 306 mSDsluCounter, 306 mSDsCounter, 0 mSdLazyCounter, 342 mSolverCounterSat, 90 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 309 SdHoareTripleChecker+Valid, 397 SdHoareTripleChecker+Invalid, 432 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 90 IncrementalHoareTripleChecker+Valid, 342 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:44,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [309 Valid, 397 Invalid, 432 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [90 Valid, 342 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 02:36:44,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 438 states. [2022-11-23 02:36:44,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 438 to 404. [2022-11-23 02:36:44,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 404 states, 318 states have (on average 1.229559748427673) internal successors, (391), 338 states have internal predecessors, (391), 42 states have call successors, (42), 34 states have call predecessors, (42), 43 states have return successors, (69), 43 states have call predecessors, (69), 42 states have call successors, (69) [2022-11-23 02:36:44,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 404 states to 404 states and 502 transitions. [2022-11-23 02:36:44,411 INFO L78 Accepts]: Start accepts. Automaton has 404 states and 502 transitions. Word has length 51 [2022-11-23 02:36:44,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:44,413 INFO L495 AbstractCegarLoop]: Abstraction has 404 states and 502 transitions. [2022-11-23 02:36:44,415 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:44,415 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 502 transitions. [2022-11-23 02:36:44,423 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-23 02:36:44,429 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:44,429 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:44,430 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-23 02:36:44,430 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:44,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:44,430 INFO L85 PathProgramCache]: Analyzing trace with hash 1960399143, now seen corresponding path program 1 times [2022-11-23 02:36:44,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:44,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2014041802] [2022-11-23 02:36:44,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:44,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:44,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:44,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:44,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:44,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:36:44,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:44,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:44,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:44,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-11-23 02:36:44,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:44,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:44,573 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:44,573 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2014041802] [2022-11-23 02:36:44,574 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2014041802] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:44,574 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:44,574 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-23 02:36:44,574 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068280547] [2022-11-23 02:36:44,574 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:44,575 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-23 02:36:44,579 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:44,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-23 02:36:44,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-23 02:36:44,580 INFO L87 Difference]: Start difference. First operand 404 states and 502 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:44,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:44,921 INFO L93 Difference]: Finished difference Result 736 states and 919 transitions. [2022-11-23 02:36:44,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-11-23 02:36:44,922 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-23 02:36:44,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:44,925 INFO L225 Difference]: With dead ends: 736 [2022-11-23 02:36:44,925 INFO L226 Difference]: Without dead ends: 426 [2022-11-23 02:36:44,926 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2022-11-23 02:36:44,928 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 149 mSDsluCounter, 248 mSDsCounter, 0 mSdLazyCounter, 242 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 151 SdHoareTripleChecker+Valid, 336 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 242 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:44,931 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [151 Valid, 336 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 242 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 02:36:44,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2022-11-23 02:36:44,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 398. [2022-11-23 02:36:44,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 398 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 333 states have internal predecessors, (385), 41 states have call successors, (41), 33 states have call predecessors, (41), 42 states have return successors, (68), 42 states have call predecessors, (68), 41 states have call successors, (68) [2022-11-23 02:36:45,000 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 494 transitions. [2022-11-23 02:36:45,000 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 494 transitions. Word has length 51 [2022-11-23 02:36:45,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:45,001 INFO L495 AbstractCegarLoop]: Abstraction has 398 states and 494 transitions. [2022-11-23 02:36:45,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:45,001 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 494 transitions. [2022-11-23 02:36:45,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-11-23 02:36:45,003 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:45,003 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:45,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-23 02:36:45,004 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:45,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:45,004 INFO L85 PathProgramCache]: Analyzing trace with hash -1800767755, now seen corresponding path program 1 times [2022-11-23 02:36:45,004 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:45,004 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624194657] [2022-11-23 02:36:45,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:45,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:45,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:45,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:36:45,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:45,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-11-23 02:36:45,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,292 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 02:36:45,292 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:45,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624194657] [2022-11-23 02:36:45,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624194657] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 02:36:45,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1624229310] [2022-11-23 02:36:45,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:45,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:36:45,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:36:45,299 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 02:36:45,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-23 02:36:45,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:45,399 INFO L263 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 15 conjunts are in the unsatisfiable core [2022-11-23 02:36:45,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 02:36:45,778 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-23 02:36:45,778 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-23 02:36:45,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1624229310] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:45,779 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-23 02:36:45,779 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 14 [2022-11-23 02:36:45,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [330664383] [2022-11-23 02:36:45,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:45,780 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 02:36:45,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:45,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 02:36:45,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=149, Unknown=0, NotChecked=0, Total=182 [2022-11-23 02:36:45,781 INFO L87 Difference]: Start difference. First operand 398 states and 494 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:45,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:45,958 INFO L93 Difference]: Finished difference Result 1163 states and 1470 transitions. [2022-11-23 02:36:45,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-23 02:36:45,958 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 56 [2022-11-23 02:36:45,960 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:45,965 INFO L225 Difference]: With dead ends: 1163 [2022-11-23 02:36:45,965 INFO L226 Difference]: Without dead ends: 772 [2022-11-23 02:36:45,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=40, Invalid=170, Unknown=0, NotChecked=0, Total=210 [2022-11-23 02:36:45,969 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 64 mSDsluCounter, 378 mSDsCounter, 0 mSdLazyCounter, 107 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 482 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 107 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:45,969 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 482 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 107 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-23 02:36:45,971 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 772 states. [2022-11-23 02:36:46,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 772 to 770. [2022-11-23 02:36:46,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 606 states have (on average 1.2145214521452146) internal successors, (736), 640 states have internal predecessors, (736), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (138), 82 states have call predecessors, (138), 81 states have call successors, (138) [2022-11-23 02:36:46,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 955 transitions. [2022-11-23 02:36:46,093 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 955 transitions. Word has length 56 [2022-11-23 02:36:46,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:46,094 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 955 transitions. [2022-11-23 02:36:46,094 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (5), 2 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:46,094 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 955 transitions. [2022-11-23 02:36:46,096 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-11-23 02:36:46,097 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:46,097 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:46,111 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-11-23 02:36:46,311 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:36:46,311 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:46,312 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:46,312 INFO L85 PathProgramCache]: Analyzing trace with hash 804933449, now seen corresponding path program 1 times [2022-11-23 02:36:46,312 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:46,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542355588] [2022-11-23 02:36:46,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:46,312 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:46,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:46,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:46,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:46,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-23 02:36:46,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:46,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:46,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:46,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2022-11-23 02:36:46,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:46,416 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-23 02:36:46,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:46,417 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542355588] [2022-11-23 02:36:46,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542355588] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:46,417 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:46,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-23 02:36:46,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [14183095] [2022-11-23 02:36:46,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:46,418 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-23 02:36:46,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:46,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-23 02:36:46,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-23 02:36:46,418 INFO L87 Difference]: Start difference. First operand 770 states and 955 transitions. Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:46,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:46,825 INFO L93 Difference]: Finished difference Result 1547 states and 1916 transitions. [2022-11-23 02:36:46,826 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-23 02:36:46,826 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2022-11-23 02:36:46,826 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:46,831 INFO L225 Difference]: With dead ends: 1547 [2022-11-23 02:36:46,831 INFO L226 Difference]: Without dead ends: 784 [2022-11-23 02:36:46,833 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2022-11-23 02:36:46,835 INFO L413 NwaCegarLoop]: 120 mSDtfsCounter, 219 mSDsluCounter, 367 mSDsCounter, 0 mSdLazyCounter, 347 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 347 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:46,836 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [222 Valid, 487 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 347 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-23 02:36:46,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 784 states. [2022-11-23 02:36:46,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 784 to 770. [2022-11-23 02:36:46,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 770 states, 606 states have (on average 1.198019801980198) internal successors, (726), 640 states have internal predecessors, (726), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (123), 82 states have call predecessors, (123), 81 states have call successors, (123) [2022-11-23 02:36:46,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 770 states to 770 states and 930 transitions. [2022-11-23 02:36:46,917 INFO L78 Accepts]: Start accepts. Automaton has 770 states and 930 transitions. Word has length 57 [2022-11-23 02:36:46,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:46,918 INFO L495 AbstractCegarLoop]: Abstraction has 770 states and 930 transitions. [2022-11-23 02:36:46,918 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (5), 3 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-23 02:36:46,919 INFO L276 IsEmpty]: Start isEmpty. Operand 770 states and 930 transitions. [2022-11-23 02:36:46,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-11-23 02:36:46,921 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:46,922 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:46,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-11-23 02:36:46,922 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:46,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:46,923 INFO L85 PathProgramCache]: Analyzing trace with hash 1321374617, now seen corresponding path program 1 times [2022-11-23 02:36:46,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:46,923 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1524586427] [2022-11-23 02:36:46,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:46,924 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:46,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:47,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-11-23 02:36:47,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-11-23 02:36:47,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:47,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-11-23 02:36:47,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:47,134 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-11-23 02:36:47,134 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:47,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1524586427] [2022-11-23 02:36:47,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1524586427] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-23 02:36:47,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-23 02:36:47,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2022-11-23 02:36:47,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035486661] [2022-11-23 02:36:47,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-23 02:36:47,136 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-11-23 02:36:47,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:47,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-11-23 02:36:47,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=90, Unknown=0, NotChecked=0, Total=110 [2022-11-23 02:36:47,137 INFO L87 Difference]: Start difference. First operand 770 states and 930 transitions. Second operand has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 02:36:48,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:48,741 INFO L93 Difference]: Finished difference Result 1873 states and 2319 transitions. [2022-11-23 02:36:48,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2022-11-23 02:36:48,742 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) Word has length 60 [2022-11-23 02:36:48,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:48,747 INFO L225 Difference]: With dead ends: 1873 [2022-11-23 02:36:48,747 INFO L226 Difference]: Without dead ends: 1110 [2022-11-23 02:36:48,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 621 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=491, Invalid=1765, Unknown=0, NotChecked=0, Total=2256 [2022-11-23 02:36:48,750 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 441 mSDsluCounter, 331 mSDsCounter, 0 mSdLazyCounter, 1408 mSolverCounterSat, 187 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 446 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 1595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 187 IncrementalHoareTripleChecker+Valid, 1408 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:48,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [446 Valid, 385 Invalid, 1595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [187 Valid, 1408 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-11-23 02:36:48,752 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1110 states. [2022-11-23 02:36:48,834 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1110 to 738. [2022-11-23 02:36:48,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 738 states, 574 states have (on average 1.1672473867595818) internal successors, (670), 608 states have internal predecessors, (670), 81 states have call successors, (81), 66 states have call predecessors, (81), 82 states have return successors, (117), 82 states have call predecessors, (117), 81 states have call successors, (117) [2022-11-23 02:36:48,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 868 transitions. [2022-11-23 02:36:48,839 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 868 transitions. Word has length 60 [2022-11-23 02:36:48,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:48,840 INFO L495 AbstractCegarLoop]: Abstraction has 738 states and 868 transitions. [2022-11-23 02:36:48,840 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 4.454545454545454) internal successors, (49), 7 states have internal predecessors, (49), 3 states have call successors, (6), 5 states have call predecessors, (6), 3 states have return successors, (5), 4 states have call predecessors, (5), 2 states have call successors, (5) [2022-11-23 02:36:48,840 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 868 transitions. [2022-11-23 02:36:48,843 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 90 [2022-11-23 02:36:48,843 INFO L187 NwaCegarLoop]: Found error trace [2022-11-23 02:36:48,844 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:36:48,844 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-11-23 02:36:48,844 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-23 02:36:48,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-23 02:36:48,844 INFO L85 PathProgramCache]: Analyzing trace with hash 981971162, now seen corresponding path program 1 times [2022-11-23 02:36:48,845 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-23 02:36:48,845 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [150452732] [2022-11-23 02:36:48,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:48,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-23 02:36:48,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-11-23 02:36:48,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-23 02:36:48,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-23 02:36:48,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-23 02:36:48,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-11-23 02:36:48,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-11-23 02:36:48,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:48,966 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-11-23 02:36:48,967 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-23 02:36:48,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [150452732] [2022-11-23 02:36:48,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [150452732] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-23 02:36:48,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1818945897] [2022-11-23 02:36:48,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-23 02:36:48,967 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:36:48,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 [2022-11-23 02:36:48,969 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-23 02:36:48,988 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-23 02:36:49,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-23 02:36:49,073 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 13 conjunts are in the unsatisfiable core [2022-11-23 02:36:49,076 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-23 02:36:49,255 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-11-23 02:36:49,256 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-23 02:36:49,575 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-23 02:36:49,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1818945897] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-23 02:36:49,575 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-23 02:36:49,575 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 9] total 17 [2022-11-23 02:36:49,575 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [733402956] [2022-11-23 02:36:49,576 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-23 02:36:49,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-11-23 02:36:49,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-23 02:36:49,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-11-23 02:36:49,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=56, Invalid=216, Unknown=0, NotChecked=0, Total=272 [2022-11-23 02:36:49,577 INFO L87 Difference]: Start difference. First operand 738 states and 868 transitions. Second operand has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-23 02:36:50,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-23 02:36:50,709 INFO L93 Difference]: Finished difference Result 1495 states and 1837 transitions. [2022-11-23 02:36:50,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-11-23 02:36:50,710 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) Word has length 89 [2022-11-23 02:36:50,710 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-23 02:36:50,711 INFO L225 Difference]: With dead ends: 1495 [2022-11-23 02:36:50,711 INFO L226 Difference]: Without dead ends: 0 [2022-11-23 02:36:50,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 239 GetRequests, 188 SyntacticMatches, 7 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 385 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=628, Invalid=1442, Unknown=0, NotChecked=0, Total=2070 [2022-11-23 02:36:50,716 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 539 mSDsluCounter, 498 mSDsCounter, 0 mSdLazyCounter, 725 mSolverCounterSat, 191 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 541 SdHoareTripleChecker+Valid, 574 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 191 IncrementalHoareTripleChecker+Valid, 725 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-11-23 02:36:50,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [541 Valid, 574 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [191 Valid, 725 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-11-23 02:36:50,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-23 02:36:50,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-23 02:36:50,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-23 02:36:50,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-23 02:36:50,718 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 89 [2022-11-23 02:36:50,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-23 02:36:50,718 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-23 02:36:50,718 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 7.352941176470588) internal successors, (125), 13 states have internal predecessors, (125), 6 states have call successors, (18), 9 states have call predecessors, (18), 6 states have return successors, (16), 6 states have call predecessors, (16), 6 states have call successors, (16) [2022-11-23 02:36:50,719 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-23 02:36:50,719 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-23 02:36:50,721 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-23 02:36:50,732 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-23 02:36:50,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-23 02:36:50,929 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-23 02:37:00,957 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 805 811) no Hoare annotation was computed. [2022-11-23 02:37:00,957 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 805 811) the Hoare annotation is: true [2022-11-23 02:37:00,958 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 596 607) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse4 (not (= |old(~methaneLevelCritical~0)| 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~pumpRunning~0 1))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse7 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse8 (not (<= 0 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse1 .cse3 .cse4) (or .cse5 .cse0 .cse3 .cse6 .cse7 .cse8) (or .cse0 .cse2 .cse3 .cse6 .cse7 .cse8))) [2022-11-23 02:37:00,958 INFO L899 garLoopResultBuilder]: For program point L600-1(lines 596 607) no Hoare annotation was computed. [2022-11-23 02:37:00,958 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 596 607) no Hoare annotation was computed. [2022-11-23 02:37:00,958 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 608 616) the Hoare annotation is: true [2022-11-23 02:37:00,958 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 608 616) no Hoare annotation was computed. [2022-11-23 02:37:00,959 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 608 616) no Hoare annotation was computed. [2022-11-23 02:37:00,959 INFO L899 garLoopResultBuilder]: For program point L576(lines 576 580) no Hoare annotation was computed. [2022-11-23 02:37:00,959 INFO L895 garLoopResultBuilder]: At program point L576-2(lines 572 583) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7 .cse4) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse7 .cse4) (or .cse5 .cse1 .cse6 .cse2 .cse3 .cse4))) [2022-11-23 02:37:00,959 INFO L895 garLoopResultBuilder]: At program point L853(line 853) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse9 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse11 (= ~pumpRunning~0 1)) (.cse5 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse4 .cse1 .cse2 .cse8) (or .cse5 .cse0 .cse6 .cse7 .cse8 (and .cse9 .cse10 .cse3 .cse11)) (or (and .cse9 .cse10 .cse11) .cse5 .cse0 .cse2 .cse8))) [2022-11-23 02:37:00,960 INFO L895 garLoopResultBuilder]: At program point L560(lines 555 562) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse0 .cse4 .cse5 .cse3) (or .cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3))) [2022-11-23 02:37:00,960 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 781 804) no Hoare annotation was computed. [2022-11-23 02:37:00,960 INFO L895 garLoopResultBuilder]: At program point L895(lines 890 897) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse9 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5) .cse6 .cse7) (or (not (<= |old(~waterLevel~0)| 1)) .cse1 .cse8 .cse9 .cse5) (or .cse0 .cse1 .cse9 .cse7 (and .cse3 .cse4)) (or .cse10 .cse0 .cse2 .cse6 .cse7) (or .cse10 .cse8 .cse9 .cse7))) [2022-11-23 02:37:00,961 INFO L895 garLoopResultBuilder]: At program point L668(lines 663 671) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (not (= ~methaneLevelCritical~0 1))) (.cse5 (and (<= ~waterLevel~0 1) (<= ~waterLevel~0 |old(~waterLevel~0)|) (= ~pumpRunning~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse1 .cse6 .cse7 .cse4) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse7 .cse4) (or .cse5 .cse1 .cse6 .cse2 .cse3 .cse4))) [2022-11-23 02:37:00,961 INFO L895 garLoopResultBuilder]: At program point L858(line 858) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse7 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 .cse7 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3) (or .cse6 .cse7 .cse0 .cse4 .cse5 .cse3))) [2022-11-23 02:37:00,961 INFO L895 garLoopResultBuilder]: At program point L858-1(lines 839 863) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 1))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse2 .cse14)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (and .cse1 .cse10 .cse13)) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse10 .cse13 .cse14))) (and (or .cse0 (and .cse1 .cse2) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (or (and .cse1 .cse10 .cse2) .cse0 .cse6 .cse11 .cse12 .cse4 .cse5) (or .cse6 .cse7 .cse11 .cse8 .cse12 .cse4 .cse9)))) [2022-11-23 02:37:00,961 INFO L899 garLoopResultBuilder]: For program point L792-1(lines 792 798) no Hoare annotation was computed. [2022-11-23 02:37:00,961 INFO L899 garLoopResultBuilder]: For program point L982(lines 982 986) no Hoare annotation was computed. [2022-11-23 02:37:00,962 INFO L899 garLoopResultBuilder]: For program point L693(lines 693 699) no Hoare annotation was computed. [2022-11-23 02:37:00,962 INFO L899 garLoopResultBuilder]: For program point L982-2(lines 982 986) no Hoare annotation was computed. [2022-11-23 02:37:00,962 INFO L899 garLoopResultBuilder]: For program point L689(lines 689 702) no Hoare annotation was computed. [2022-11-23 02:37:00,962 INFO L895 garLoopResultBuilder]: At program point L689-1(lines 674 706) the Hoare annotation is: (let ((.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |timeShift___utac_acc__Specification3_spec__1_~tmp~4#1| 0))) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (= |timeShift_processEnvironment_~tmp~7#1| 0)) (.cse2 (= ~pumpRunning~0 1)) (.cse6 (not (<= |old(~waterLevel~0)| 2))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (<= ~waterLevel~0 1)) (.cse9 (not (= 1 ~systemActive~0))) (.cse10 (not (= |old(~pumpRunning~0)| 1))) (.cse12 (not (<= ~methaneLevelCritical~0 0))) (.cse13 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (and (or (and .cse0 .cse1 .cse2) .cse3 (and .cse4 .cse0 .cse1) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse5 .cse6) (or (and .cse4 .cse0 .cse7 .cse8) .cse9 .cse10 .cse5 .cse6 (and .cse11 .cse0 .cse7 .cse8 .cse2)) (or (and .cse4 .cse7 .cse1) .cse3 .cse9 .cse12 .cse13 .cse6 (and .cse1 .cse2)) (or (and .cse11 .cse7 .cse2) .cse9 .cse10 .cse12 .cse13 .cse6 (and .cse4 .cse7)) (or (not (<= |old(~waterLevel~0)| 1)) .cse9 .cse10 .cse12 .cse13 .cse8))) [2022-11-23 02:37:00,963 INFO L895 garLoopResultBuilder]: At program point L681(line 681) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse10 (<= ~waterLevel~0 1)) (.cse13 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse14 (= ~pumpRunning~0 1))) (let ((.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (and .cse2 .cse14)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (= |old(~pumpRunning~0)| 1))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (and .cse1 .cse10 .cse13)) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2))) (.cse9 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse10 .cse13 .cse14))) (and (or .cse0 (and .cse1 .cse2) (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 .cse3 .cse4 .cse9) (or (and .cse1 .cse10 .cse2) .cse0 .cse6 .cse11 .cse12 .cse4 .cse5) (or .cse6 .cse7 .cse11 .cse8 .cse12 .cse4 .cse9)))) [2022-11-23 02:37:00,963 INFO L899 garLoopResultBuilder]: For program point L681-1(line 681) no Hoare annotation was computed. [2022-11-23 02:37:00,963 INFO L899 garLoopResultBuilder]: For program point L785-1(lines 784 803) no Hoare annotation was computed. [2022-11-23 02:37:00,963 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 855) no Hoare annotation was computed. [2022-11-23 02:37:00,963 INFO L899 garLoopResultBuilder]: For program point L843(lines 843 860) no Hoare annotation was computed. [2022-11-23 02:37:00,964 INFO L895 garLoopResultBuilder]: At program point L645(lines 640 648) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse1 (not (= 1 ~systemActive~0))) (.cse11 (= ~pumpRunning~0 1)) (.cse4 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (<= ~waterLevel~0 1)) (.cse7 (<= |timeShift_getWaterLevel_#res#1| 1)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse6 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 .cse2 .cse3 (= |timeShift_getWaterLevel_#res#1| 1)) (or .cse1 .cse4 .cse5 .cse6) (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3 .cse7) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or (and .cse8 .cse9 .cse10) .cse0 .cse1 .cse2 .cse3 .cse6 (and .cse10 .cse11))) (or .cse0 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse5 .cse6) (let ((.cse12 (<= ~waterLevel~0 |old(~waterLevel~0)|))) (or .cse1 (and (= |timeShift_processEnvironment_~tmp~7#1| 0) .cse9 .cse12 .cse7 .cse11) .cse4 .cse2 (and .cse8 .cse9 .cse12 .cse7) .cse3 .cse6)))) [2022-11-23 02:37:00,964 INFO L895 garLoopResultBuilder]: At program point L988(lines 973 991) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse9 (<= ~waterLevel~0 1)) (.cse3 (<= ~waterLevel~0 |old(~waterLevel~0)|)) (.cse10 (= ~pumpRunning~0 1)) (.cse5 (not (= 1 ~systemActive~0))) (.cse0 (not (= |old(~pumpRunning~0)| 1))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse8 (not (<= |old(~waterLevel~0)| 2)))) (and (or (not (<= |old(~waterLevel~0)| 1)) .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6 .cse7 .cse8) (or .cse5 .cse0 (and .cse9 .cse10) .cse2 .cse8) (or .cse4 .cse1 .cse2 .cse8) (or (and .cse9 .cse3 .cse10) .cse5 .cse0 .cse6 .cse7 .cse8))) [2022-11-23 02:37:00,964 INFO L895 garLoopResultBuilder]: At program point L914(lines 909 917) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse3 (not (<= |old(~waterLevel~0)| 2))) (.cse6 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse5 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse5 .cse3) (or .cse6 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse2 .cse3) (or .cse6 .cse0 .cse4 .cse5 .cse3 (and (= |timeShift_isPumpRunning_#res#1| 1) (= |old(~waterLevel~0)| ~waterLevel~0) (= ~pumpRunning~0 1))) (or (not (<= |old(~waterLevel~0)| 1)) .cse6 .cse0 .cse4 .cse5))) [2022-11-23 02:37:00,965 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 781 804) the Hoare annotation is: (let ((.cse9 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse5 (and .cse9 (= ~pumpRunning~0 1))) (.cse6 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (and (= ~pumpRunning~0 0) .cse9)) (.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse4 .cse5) (or .cse7 .cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse6 .cse4) (or .cse7 .cse8 .cse0 .cse2 .cse3 .cse4)))) [2022-11-23 02:37:00,965 INFO L899 garLoopResultBuilder]: For program point L559(line 559) no Hoare annotation was computed. [2022-11-23 02:37:00,965 INFO L899 garLoopResultBuilder]: For program point L683(lines 683 703) no Hoare annotation was computed. [2022-11-23 02:37:00,965 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 781 804) no Hoare annotation was computed. [2022-11-23 02:37:00,965 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 559) no Hoare annotation was computed. [2022-11-23 02:37:00,965 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-11-23 02:37:00,966 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-11-23 02:37:00,966 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-11-23 02:37:00,966 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 52 81) the Hoare annotation is: true [2022-11-23 02:37:00,966 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-11-23 02:37:00,966 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-11-23 02:37:00,966 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-11-23 02:37:00,967 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-11-23 02:37:00,967 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-11-23 02:37:00,967 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-11-23 02:37:00,967 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 735) no Hoare annotation was computed. [2022-11-23 02:37:00,967 INFO L895 garLoopResultBuilder]: At program point L184(lines 179 187) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-23 02:37:00,967 INFO L899 garLoopResultBuilder]: For program point L729-1(lines 729 735) no Hoare annotation was computed. [2022-11-23 02:37:00,968 INFO L899 garLoopResultBuilder]: For program point L721(lines 721 725) no Hoare annotation was computed. [2022-11-23 02:37:00,968 INFO L895 garLoopResultBuilder]: At program point L176(lines 172 178) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-23 02:37:00,971 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-23 02:37:00,971 INFO L895 garLoopResultBuilder]: At program point L767(lines 718 768) the Hoare annotation is: false [2022-11-23 02:37:00,972 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-23 02:37:00,972 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-23 02:37:00,972 INFO L899 garLoopResultBuilder]: For program point L140(lines 140 147) no Hoare annotation was computed. [2022-11-23 02:37:00,972 INFO L899 garLoopResultBuilder]: For program point L140-2(lines 140 147) no Hoare annotation was computed. [2022-11-23 02:37:00,972 INFO L895 garLoopResultBuilder]: At program point L169(lines 165 171) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-23 02:37:00,972 INFO L899 garLoopResultBuilder]: For program point L739(lines 739 745) no Hoare annotation was computed. [2022-11-23 02:37:00,973 INFO L899 garLoopResultBuilder]: For program point L739-1(lines 739 745) no Hoare annotation was computed. [2022-11-23 02:37:00,973 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-23 02:37:00,973 INFO L895 garLoopResultBuilder]: At program point L764(lines 719 766) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (<= ~waterLevel~0 1) .cse0 .cse6 .cse2 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-23 02:37:00,973 INFO L902 garLoopResultBuilder]: At program point L124(lines 117 126) the Hoare annotation is: true [2022-11-23 02:37:00,973 INFO L895 garLoopResultBuilder]: At program point L731(line 731) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse1 (= ~methaneLevelCritical~0 1)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 (<= ~waterLevel~0 1) .cse0 .cse6 .cse2 .cse7) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-23 02:37:00,978 INFO L902 garLoopResultBuilder]: At program point L149(lines 130 152) the Hoare annotation is: true [2022-11-23 02:37:00,979 INFO L899 garLoopResultBuilder]: For program point L757(lines 757 761) no Hoare annotation was computed. [2022-11-23 02:37:00,980 INFO L895 garLoopResultBuilder]: At program point L757-2(lines 749 762) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-23 02:37:00,981 INFO L895 garLoopResultBuilder]: At program point L113(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-23 02:37:00,981 INFO L899 garLoopResultBuilder]: For program point L720(lines 719 766) no Hoare annotation was computed. [2022-11-23 02:37:00,981 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 762) no Hoare annotation was computed. [2022-11-23 02:37:00,982 INFO L895 garLoopResultBuilder]: At program point L741(line 741) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-23 02:37:00,982 INFO L895 garLoopResultBuilder]: At program point L997(lines 992 999) the Hoare annotation is: (let ((.cse1 (= ~methaneLevelCritical~0 1)) (.cse5 (= ~pumpRunning~0 0)) (.cse0 (= 1 ~systemActive~0)) (.cse6 (<= ~methaneLevelCritical~0 0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (<= 0 ~methaneLevelCritical~0)) (.cse4 (= ~pumpRunning~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse0 .cse6 .cse2 .cse3 .cse7) (and .cse0 .cse6 .cse2 .cse3 .cse7 .cse4))) [2022-11-23 02:37:00,982 INFO L902 garLoopResultBuilder]: At program point L770(lines 709 774) the Hoare annotation is: true [2022-11-23 02:37:00,982 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 813 837) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (= ~pumpRunning~0 0)) (.cse9 (not (<= ~waterLevel~0 2))) (.cse2 (not (= ~methaneLevelCritical~0 1)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse3 .cse4) (or .cse7 .cse8 .cse0 .cse5 .cse9 .cse6) (or .cse7 .cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse9 .cse2))) [2022-11-23 02:37:00,983 INFO L895 garLoopResultBuilder]: At program point L832(line 832) the Hoare annotation is: (let ((.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (<= ~waterLevel~0 1))) (.cse4 (= ~pumpRunning~0 1)) (.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse7 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse3 .cse4) (or .cse7 (not (= ~methaneLevelCritical~0 ~systemActive~0)) .cse8 .cse2) (or .cse7 .cse0 .cse5 .cse8 .cse6))) [2022-11-23 02:37:00,983 INFO L899 garLoopResultBuilder]: For program point L832-1(lines 813 837) no Hoare annotation was computed. [2022-11-23 02:37:00,983 INFO L899 garLoopResultBuilder]: For program point L880(lines 880 886) no Hoare annotation was computed. [2022-11-23 02:37:00,983 INFO L895 garLoopResultBuilder]: At program point L880-2(lines 873 889) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse10 (= ~pumpRunning~0 1)) (.cse1 (not .cse7)) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse17 (not (= |old(~pumpRunning~0)| 1))) (.cse15 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse16 (not (= ~methaneLevelCritical~0 1))) (.cse18 (not .cse6))) (and (let ((.cse8 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse5 .cse7 .cse8 .cse9 .cse11 .cse12 .cse10))) (let ((.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse14 (= ~pumpRunning~0 0))) (or .cse0 (and .cse5 .cse13 .cse14 .cse7 .cse11 .cse12) (and .cse5 .cse13 .cse14 .cse6 .cse7) .cse15 (and .cse5 .cse6 .cse7 .cse10) .cse3 .cse16 (and .cse5 .cse7 .cse11 .cse12 .cse10))) (or .cse1 .cse17 .cse2 .cse4 .cse18) (or .cse17 .cse15 .cse16 .cse18)))) [2022-11-23 02:37:00,983 INFO L899 garLoopResultBuilder]: For program point L653(lines 653 659) no Hoare annotation was computed. [2022-11-23 02:37:00,983 INFO L895 garLoopResultBuilder]: At program point L969(lines 954 972) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse12 (= ~pumpRunning~0 0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse12 (not (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) (<= 1 |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1|) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse5 (and .cse12 .cse11)) (.cse6 (not (= 1 ~systemActive~0))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse2 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse6 .cse1 .cse7 .cse3 .cse8 .cse5) (or .cse6 .cse9 .cse7 .cse8 .cse10) (or .cse9 .cse2 .cse4 .cse10)))) [2022-11-23 02:37:00,984 INFO L895 garLoopResultBuilder]: At program point L905(lines 898 908) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse7 (<= ~waterLevel~0 1))) (let ((.cse12 (not (= |old(~pumpRunning~0)| 1))) (.cse8 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse10 (not (= ~methaneLevelCritical~0 1))) (.cse15 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not .cse4)) (.cse13 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (<= ~waterLevel~0 2))) (.cse14 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse2 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (= ~pumpRunning~0 0)) (.cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse6 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (and (or .cse0 (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse3 .cse7 .cse4) .cse8 .cse9 .cse10) (or .cse11 .cse12 .cse13 .cse14 .cse15) (or .cse12 .cse8 .cse10 .cse15) (let ((.cse16 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0))) (or .cse0 .cse11 (and .cse1 .cse2 .cse3 .cse7 .cse4 .cse16) .cse13 .cse9 .cse14 (and .cse1 .cse2 .cse3 .cse4 .cse16 .cse5 .cse6)))))) [2022-11-23 02:37:00,984 INFO L895 garLoopResultBuilder]: At program point L903(line 903) the Hoare annotation is: (let ((.cse11 (<= ~waterLevel~0 1)) (.cse13 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse14 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse15 (= ~pumpRunning~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse13 .cse14 .cse15 .cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0))) (.cse2 (and .cse13 .cse14 .cse15 .cse11 .cse12)) (.cse4 (not (<= ~waterLevel~0 2))) (.cse6 (not .cse12)) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~pumpRunning~0)| 1))) (.cse3 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 1))) (.cse10 (not .cse11))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse0 .cse1 .cse6 .cse2 .cse7 .cse4 .cse8) (or .cse6 .cse9 .cse7 .cse8 .cse10) (or .cse9 .cse3 .cse5 .cse10)))) [2022-11-23 02:37:00,984 INFO L899 garLoopResultBuilder]: For program point L903-1(line 903) no Hoare annotation was computed. [2022-11-23 02:37:00,984 INFO L899 garLoopResultBuilder]: For program point L963(lines 963 967) no Hoare annotation was computed. [2022-11-23 02:37:00,984 INFO L899 garLoopResultBuilder]: For program point L963-2(lines 963 967) no Hoare annotation was computed. [2022-11-23 02:37:00,984 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 813 837) no Hoare annotation was computed. [2022-11-23 02:37:00,984 INFO L895 garLoopResultBuilder]: At program point L827(line 827) the Hoare annotation is: (let ((.cse10 (<= ~waterLevel~0 1))) (let ((.cse6 (not (= |old(~pumpRunning~0)| 1))) (.cse1 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse3 (not (= ~methaneLevelCritical~0 1))) (.cse9 (not .cse10)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (not (= 1 ~systemActive~0))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse2 (not (<= ~waterLevel~0 2))) (.cse8 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (and (= ~pumpRunning~0 0) .cse10))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse6 .cse7 .cse8 .cse9) (or .cse6 .cse1 .cse3 .cse9) (or .cse0 .cse5 .cse7 .cse2 .cse8 .cse4)))) [2022-11-23 02:37:00,984 INFO L899 garLoopResultBuilder]: For program point L821(lines 821 829) no Hoare annotation was computed. [2022-11-23 02:37:00,985 INFO L895 garLoopResultBuilder]: At program point L658(lines 649 662) the Hoare annotation is: (let ((.cse6 (= ~pumpRunning~0 0)) (.cse12 (<= ~waterLevel~0 1))) (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse8 (not (<= ~waterLevel~0 2))) (.cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse9 (and .cse6 .cse12)) (.cse1 (not (= |old(~pumpRunning~0)| 1))) (.cse10 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse11 (not (= ~methaneLevelCritical~0 1))) (.cse4 (not .cse12))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 (and .cse6 .cse7) .cse2 .cse8 .cse3 .cse9) (or .cse5 .cse10 .cse8 .cse11 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7) .cse9) (or .cse1 .cse10 .cse11 .cse4)))) [2022-11-23 02:37:00,985 INFO L899 garLoopResultBuilder]: For program point L817(lines 817 834) no Hoare annotation was computed. [2022-11-23 02:37:00,985 INFO L895 garLoopResultBuilder]: At program point L869(lines 864 871) the Hoare annotation is: (let ((.cse6 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse7)) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (= |old(~pumpRunning~0)| 1))) (.cse14 (not .cse6)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse15 (not (= ~methaneLevelCritical~0 ~systemActive~0))) (.cse3 (not (<= ~waterLevel~0 2))) (.cse16 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0))) (.cse11 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 0)) (.cse12 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp~9#1| 0)) (.cse10 (= ~pumpRunning~0 1))) (and (let ((.cse8 (= |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1| ~methaneLevelCritical~0)) (.cse9 (= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~8#1|))) (or .cse0 .cse1 .cse2 .cse3 .cse4 (and .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse5 .cse7 .cse8 .cse9 .cse11 .cse12 .cse10))) (or .cse1 .cse13 .cse2 .cse4 .cse14) (or .cse13 .cse15 .cse16 .cse14) (or .cse0 .cse15 (and .cse5 .cse6 .cse7 .cse10) .cse3 .cse16 (and .cse5 .cse7 .cse11 .cse12 .cse10))))) [2022-11-23 02:37:00,985 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 584 595) no Hoare annotation was computed. [2022-11-23 02:37:00,985 INFO L899 garLoopResultBuilder]: For program point L588-1(lines 584 595) no Hoare annotation was computed. [2022-11-23 02:37:00,985 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 584 595) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 1))) (.cse5 (not (= ~pumpRunning~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse6 (not (<= ~methaneLevelCritical~0 0))) (.cse1 (not (= ~pumpRunning~0 1))) (.cse7 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= |old(~waterLevel~0)| 2)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse5 .cse0 .cse2 .cse3 .cse4) (or (not (<= |old(~waterLevel~0)| 1)) .cse5 .cse0 .cse6 .cse7 .cse3) (or .cse0 .cse6 .cse1 .cse7 .cse3 .cse4))) [2022-11-23 02:37:00,989 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-23 02:37:00,991 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-23 02:37:01,036 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 23.11 02:37:01 BoogieIcfgContainer [2022-11-23 02:37:01,036 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-23 02:37:01,037 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-23 02:37:01,037 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-23 02:37:01,037 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-23 02:37:01,038 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 02:36:41" (3/4) ... [2022-11-23 02:37:01,041 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-23 02:37:01,047 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-23 02:37:01,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-23 02:37:01,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-23 02:37:01,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-23 02:37:01,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-23 02:37:01,048 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-23 02:37:01,049 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-23 02:37:01,055 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-11-23 02:37:01,056 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-23 02:37:01,056 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-23 02:37:01,057 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 02:37:01,057 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-23 02:37:01,083 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,084 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) [2022-11-23 02:37:01,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((((tmp == 0 && waterLevel <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) [2022-11-23 02:37:01,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) [2022-11-23 02:37:01,085 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result <= 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || ((((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == \old(pumpRunning) && \result == 0)) || (pumpRunning == 0 && waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-23 02:37:01,086 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-23 02:37:01,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1)) [2022-11-23 02:37:01,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-23 02:37:01,087 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) [2022-11-23 02:37:01,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,088 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) [2022-11-23 02:37:01,110 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/witness.graphml [2022-11-23 02:37:01,110 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-23 02:37:01,111 INFO L158 Benchmark]: Toolchain (without parser) took 21242.95ms. Allocated memory was 199.2MB in the beginning and 356.5MB in the end (delta: 157.3MB). Free memory was 155.2MB in the beginning and 184.3MB in the end (delta: -29.1MB). Peak memory consumption was 131.3MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,111 INFO L158 Benchmark]: CDTParser took 0.28ms. Allocated memory is still 134.2MB. Free memory is still 76.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 02:37:01,111 INFO L158 Benchmark]: CACSL2BoogieTranslator took 470.81ms. Allocated memory is still 199.2MB. Free memory was 154.6MB in the beginning and 135.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,111 INFO L158 Benchmark]: Boogie Procedure Inliner took 48.77ms. Allocated memory is still 199.2MB. Free memory was 135.8MB in the beginning and 133.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,112 INFO L158 Benchmark]: Boogie Preprocessor took 30.35ms. Allocated memory is still 199.2MB. Free memory was 133.7MB in the beginning and 132.1MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-23 02:37:01,112 INFO L158 Benchmark]: RCFGBuilder took 604.20ms. Allocated memory is still 199.2MB. Free memory was 131.6MB in the beginning and 168.7MB in the end (delta: -37.2MB). Peak memory consumption was 22.8MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,113 INFO L158 Benchmark]: TraceAbstraction took 20008.49ms. Allocated memory was 199.2MB in the beginning and 356.5MB in the end (delta: 157.3MB). Free memory was 168.7MB in the beginning and 190.6MB in the end (delta: -21.9MB). Peak memory consumption was 205.6MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,113 INFO L158 Benchmark]: Witness Printer took 73.47ms. Allocated memory is still 356.5MB. Free memory was 190.6MB in the beginning and 184.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-23 02:37:01,114 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28ms. Allocated memory is still 134.2MB. Free memory is still 76.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 470.81ms. Allocated memory is still 199.2MB. Free memory was 154.6MB in the beginning and 135.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 48.77ms. Allocated memory is still 199.2MB. Free memory was 135.8MB in the beginning and 133.7MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 30.35ms. Allocated memory is still 199.2MB. Free memory was 133.7MB in the beginning and 132.1MB in the end (delta: 1.6MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 604.20ms. Allocated memory is still 199.2MB. Free memory was 131.6MB in the beginning and 168.7MB in the end (delta: -37.2MB). Peak memory consumption was 22.8MB. Max. memory is 16.1GB. * TraceAbstraction took 20008.49ms. Allocated memory was 199.2MB in the beginning and 356.5MB in the end (delta: 157.3MB). Free memory was 168.7MB in the beginning and 190.6MB in the end (delta: -21.9MB). Peak memory consumption was 205.6MB. Max. memory is 16.1GB. * Witness Printer took 73.47ms. Allocated memory is still 356.5MB. Free memory was 190.6MB in the beginning and 184.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 559]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 8 procedures, 94 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 19.9s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2272 SdHoareTripleChecker+Valid, 3.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2242 mSDsluCounter, 4112 SdHoareTripleChecker+Invalid, 2.4s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2958 mSDsCounter, 660 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3565 IncrementalHoareTripleChecker+Invalid, 4225 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 660 mSolverCounterUnsat, 1154 mSDtfsCounter, 3565 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 510 GetRequests, 333 SyntacticMatches, 8 SemanticMatches, 169 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=770occurred in iteration=9, InterpolantAutomatonStates: 154, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.6s AutomataMinimizationTime, 12 MinimizatonAttempts, 479 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 44 LocationsWithAnnotation, 1994 PreInvPairs, 2484 NumberOfFragments, 3346 HoareAnnotationTreeSize, 1994 FomulaSimplifications, 372 FormulaSimplificationTreeSizeReduction, 0.9s HoareSimplificationTime, 44 FomulaSimplificationsInter, 37936 FormulaSimplificationTreeSizeReductionInter, 9.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.5s InterpolantComputationTime, 726 NumberOfCodeBlocks, 726 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 800 ConstructedInterpolants, 0 QuantifiedInterpolants, 1789 SizeOfPredicates, 8 NumberOfNonLiveVariables, 561 ConjunctsInSsa, 28 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 74/93 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 555]: Loop Invariant Derived loop invariant: (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 649]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == \old(pumpRunning) && \result == 0)) || (pumpRunning == 0 && waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 864]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && (((((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1)) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: (((((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel)) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || (waterLevel <= 1 && pumpRunning == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 674]: Loop Invariant Derived loop invariant: ((((((((((!(tmp == 0) && \old(waterLevel) == waterLevel) && pumpRunning == 1) || !(\old(pumpRunning) == 0)) || ((pumpRunning == 0 && !(tmp == 0)) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((((((pumpRunning == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || ((((tmp == 0 && !(tmp == 0)) && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((((tmp == 0 && waterLevel <= 1) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && (((((!(\old(waterLevel) <= 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || waterLevel <= \old(waterLevel)) - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 992]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2)) || (((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical)) || (((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && pumpRunning == 1) - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 873]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (((((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && pumpRunning == 1)) || ((((((!(tmp == 0) && 1 == systemActive) && \result == methaneLevelCritical) && methaneLevelCritical == tmp) && \result == 0) && tmp == 0) && pumpRunning == 1)) && (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || (((!(tmp == 0) && waterLevel <= 1) && 1 == systemActive) && pumpRunning == 1)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || ((((!(tmp == 0) && 1 == systemActive) && \result == 0) && tmp == 0) && pumpRunning == 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 179]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 898]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == 0) && tmp == 0)) || ((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1))) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && waterLevel <= 1) && 1 == systemActive) && \result == methaneLevelCritical)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || ((((((!(tmp == 0) && pumpRunning == \old(pumpRunning)) && pumpRunning == 0) && 1 == systemActive) && \result == methaneLevelCritical) && \result == 0) && tmp == 0)) - InvariantResult [Line: 709]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || waterLevel <= \old(waterLevel))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 839]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1)) && (((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1))) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && pumpRunning == 1)) - InvariantResult [Line: 909]: Loop Invariant Derived loop invariant: ((((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2)) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || ((\result == 1 && \old(waterLevel) == waterLevel) && pumpRunning == 1))) && ((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 663]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: (((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 572]: Loop Invariant Derived loop invariant: ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) && ((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((((waterLevel <= 1 && waterLevel <= \old(waterLevel)) && pumpRunning == 1) || !(1 == systemActive)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: ((((((1 == systemActive && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2) && pumpRunning == 1) || (((((pumpRunning == 0 && waterLevel <= 1) && 1 == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || ((((pumpRunning == 0 && 1 == systemActive) && methaneLevelCritical == 1) && splverifierCounter == 0) && waterLevel <= 2)) || (((((1 == systemActive && methaneLevelCritical <= 0) && splverifierCounter == 0) && waterLevel <= 2) && 0 <= methaneLevelCritical) && pumpRunning == 1) - InvariantResult [Line: 954]: Loop Invariant Derived loop invariant: (((((((!(\old(pumpRunning) == 0) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical == systemActive)) || !(waterLevel <= 2)) || !(methaneLevelCritical == 1)) || (pumpRunning == 0 && waterLevel <= 1)) && ((((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((((pumpRunning == 0 && !(\result == 0)) && 1 <= tmp___0) && \result == 0) && tmp == 0)) || !(methaneLevelCritical <= 0)) || !(waterLevel <= 2)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && waterLevel <= 1))) && ((((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(waterLevel <= 1))) && (((!(\old(pumpRunning) == 1) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(waterLevel <= 1)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 640]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(waterLevel) == 1)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result == 1) && (((!(1 == systemActive) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && (((((!(\old(waterLevel) <= 1) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || \result <= 1)) && ((((((((pumpRunning == 0 && waterLevel <= 1) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) || (\old(waterLevel) == waterLevel && pumpRunning == 1))) && (((!(\old(pumpRunning) == 0) || !(methaneLevelCritical == systemActive)) || !(methaneLevelCritical == 1)) || !(\old(waterLevel) <= 2))) && ((((((!(1 == systemActive) || ((((tmp == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1) && pumpRunning == 1)) || !(\old(pumpRunning) == 1)) || !(methaneLevelCritical <= 0)) || (((pumpRunning == 0 && waterLevel <= 1) && waterLevel <= \old(waterLevel)) && \result <= 1)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) <= 2)) RESULT: Ultimate proved your program to be correct! [2022-11-23 02:37:01,153 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ab02b901-4e56-4709-97fd-5cef3b49bd3d/bin/uautomizer-QkZJyEgLgS/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE