./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 15:45:41,399 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 15:45:41,401 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 15:45:41,442 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 15:45:41,443 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 15:45:41,444 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 15:45:41,445 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 15:45:41,447 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 15:45:41,449 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 15:45:41,450 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 15:45:41,452 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 15:45:41,453 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 15:45:41,453 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 15:45:41,455 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 15:45:41,456 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 15:45:41,457 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 15:45:41,458 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 15:45:41,459 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 15:45:41,461 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 15:45:41,467 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 15:45:41,472 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 15:45:41,479 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 15:45:41,482 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 15:45:41,484 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 15:45:41,492 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 15:45:41,492 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 15:45:41,492 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 15:45:41,493 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 15:45:41,494 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 15:45:41,495 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 15:45:41,495 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 15:45:41,496 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 15:45:41,501 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 15:45:41,503 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 15:45:41,504 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 15:45:41,505 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 15:45:41,506 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 15:45:41,506 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 15:45:41,506 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 15:45:41,510 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 15:45:41,511 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 15:45:41,512 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-11-25 15:45:41,556 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 15:45:41,557 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 15:45:41,557 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 15:45:41,557 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 15:45:41,558 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-11-25 15:45:41,559 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-11-25 15:45:41,559 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 15:45:41,560 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 15:45:41,560 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 15:45:41,560 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 15:45:41,561 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 15:45:41,561 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 15:45:41,562 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 15:45:41,562 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 15:45:41,562 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-11-25 15:45:41,562 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-11-25 15:45:41,562 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-11-25 15:45:41,563 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 15:45:41,563 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 15:45:41,563 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 15:45:41,563 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-11-25 15:45:41,563 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 15:45:41,564 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 15:45:41,564 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-11-25 15:45:41,564 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 15:45:41,564 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 15:45:41,564 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-11-25 15:45:41,565 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-11-25 15:45:41,565 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 15:45:41,565 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-11-25 15:45:41,565 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-11-25 15:45:41,566 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-11-25 15:45:41,566 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-11-25 15:45:41,566 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-11-25 15:45:41,566 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2022-11-25 15:45:41,894 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 15:45:41,927 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 15:45:41,930 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 15:45:41,932 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 15:45:41,933 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 15:45:41,934 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-11-25 15:45:44,992 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 15:45:45,254 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 15:45:45,255 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-11-25 15:45:45,276 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/data/9e3b1f431/d8de8ed907064bd7b4f2e4a514cc73f1/FLAGd5047f142 [2022-11-25 15:45:45,293 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/data/9e3b1f431/d8de8ed907064bd7b4f2e4a514cc73f1 [2022-11-25 15:45:45,296 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 15:45:45,297 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 15:45:45,300 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 15:45:45,301 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 15:45:45,304 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 15:45:45,305 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,306 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2e4f5566 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45, skipping insertion in model container [2022-11-25 15:45:45,307 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,315 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 15:45:45,383 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 15:45:45,524 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-11-25 15:45:45,683 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 15:45:45,699 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 15:45:45,713 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-11-25 15:45:45,770 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 15:45:45,793 INFO L208 MainTranslator]: Completed translation [2022-11-25 15:45:45,793 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45 WrapperNode [2022-11-25 15:45:45,793 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 15:45:45,794 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 15:45:45,795 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 15:45:45,795 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 15:45:45,802 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,828 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,871 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 221 [2022-11-25 15:45:45,872 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 15:45:45,873 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 15:45:45,873 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 15:45:45,873 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 15:45:45,882 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,883 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,886 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,887 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,891 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,896 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,898 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,899 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,901 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 15:45:45,902 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 15:45:45,902 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 15:45:45,903 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 15:45:45,905 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (1/1) ... [2022-11-25 15:45:45,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-11-25 15:45:45,941 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:45:45,952 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-11-25 15:45:45,954 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-11-25 15:45:45,999 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 15:45:45,999 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-11-25 15:45:46,000 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-11-25 15:45:46,000 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-11-25 15:45:46,001 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-11-25 15:45:46,001 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-11-25 15:45:46,001 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-11-25 15:45:46,001 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-11-25 15:45:46,001 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-11-25 15:45:46,002 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:45:46,002 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:45:46,002 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-11-25 15:45:46,002 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-11-25 15:45:46,002 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-25 15:45:46,002 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-11-25 15:45:46,002 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-11-25 15:45:46,003 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-11-25 15:45:46,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 15:45:46,003 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-11-25 15:45:46,003 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-11-25 15:45:46,003 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 15:45:46,003 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 15:45:46,132 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 15:45:46,143 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 15:45:46,580 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 15:45:46,587 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 15:45:46,587 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-11-25 15:45:46,589 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:45:46 BoogieIcfgContainer [2022-11-25 15:45:46,590 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 15:45:46,591 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-11-25 15:45:46,592 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-11-25 15:45:46,595 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-11-25 15:45:46,595 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 25.11 03:45:45" (1/3) ... [2022-11-25 15:45:46,596 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53b340b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 03:45:46, skipping insertion in model container [2022-11-25 15:45:46,596 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 03:45:45" (2/3) ... [2022-11-25 15:45:46,596 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@53b340b2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 25.11 03:45:46, skipping insertion in model container [2022-11-25 15:45:46,596 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:45:46" (3/3) ... [2022-11-25 15:45:46,598 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2022-11-25 15:45:46,617 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-11-25 15:45:46,617 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-11-25 15:45:46,667 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-11-25 15:45:46,674 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@13125025, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-11-25 15:45:46,674 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-11-25 15:45:46,679 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-11-25 15:45:46,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-11-25 15:45:46,689 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:46,690 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:46,690 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:46,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:46,696 INFO L85 PathProgramCache]: Analyzing trace with hash 270425168, now seen corresponding path program 1 times [2022-11-25 15:45:46,706 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:46,706 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [714116143] [2022-11-25 15:45:46,707 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:46,707 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:46,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:46,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-11-25 15:45:47,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,011 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:47,012 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:47,012 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [714116143] [2022-11-25 15:45:47,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [714116143] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:47,014 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:47,014 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 15:45:47,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133911729] [2022-11-25 15:45:47,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:47,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-11-25 15:45:47,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:47,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-11-25 15:45:47,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 15:45:47,053 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:47,093 INFO L93 Difference]: Finished difference Result 195 states and 266 transitions. [2022-11-25 15:45:47,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-11-25 15:45:47,095 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-11-25 15:45:47,096 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:47,109 INFO L225 Difference]: With dead ends: 195 [2022-11-25 15:45:47,109 INFO L226 Difference]: Without dead ends: 93 [2022-11-25 15:45:47,114 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-11-25 15:45:47,120 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:47,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:45:47,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-11-25 15:45:47,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-11-25 15:45:47,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-11-25 15:45:47,167 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 121 transitions. [2022-11-25 15:45:47,169 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 121 transitions. Word has length 25 [2022-11-25 15:45:47,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:47,169 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 121 transitions. [2022-11-25 15:45:47,170 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,170 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 121 transitions. [2022-11-25 15:45:47,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-11-25 15:45:47,172 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:47,173 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:47,174 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-11-25 15:45:47,174 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:47,175 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:47,175 INFO L85 PathProgramCache]: Analyzing trace with hash -1281530714, now seen corresponding path program 1 times [2022-11-25 15:45:47,176 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:47,176 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [67802098] [2022-11-25 15:45:47,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:47,176 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:47,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-11-25 15:45:47,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:47,332 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:47,333 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [67802098] [2022-11-25 15:45:47,334 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [67802098] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:47,334 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:47,334 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 15:45:47,334 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313934602] [2022-11-25 15:45:47,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:47,336 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 15:45:47,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:47,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 15:45:47,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:45:47,338 INFO L87 Difference]: Start difference. First operand 93 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:47,375 INFO L93 Difference]: Finished difference Result 151 states and 197 transitions. [2022-11-25 15:45:47,376 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 15:45:47,376 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-11-25 15:45:47,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:47,379 INFO L225 Difference]: With dead ends: 151 [2022-11-25 15:45:47,379 INFO L226 Difference]: Without dead ends: 84 [2022-11-25 15:45:47,380 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 15:45:47,381 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 12 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:47,382 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:45:47,384 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-25 15:45:47,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-11-25 15:45:47,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3387096774193548) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-25 15:45:47,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-11-25 15:45:47,404 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 26 [2022-11-25 15:45:47,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:47,405 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-11-25 15:45:47,405 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,405 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-11-25 15:45:47,406 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-11-25 15:45:47,408 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:47,408 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:47,409 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-11-25 15:45:47,409 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:47,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:47,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1565936952, now seen corresponding path program 1 times [2022-11-25 15:45:47,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:47,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [781215143] [2022-11-25 15:45:47,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:47,416 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:47,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,618 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:47,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,628 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:47,628 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:47,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [781215143] [2022-11-25 15:45:47,629 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [781215143] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:47,629 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:47,629 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 15:45:47,630 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1222718958] [2022-11-25 15:45:47,630 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:47,630 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 15:45:47,631 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:47,631 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 15:45:47,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-11-25 15:45:47,632 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:47,842 INFO L93 Difference]: Finished difference Result 160 states and 211 transitions. [2022-11-25 15:45:47,842 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 15:45:47,842 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-11-25 15:45:47,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:47,844 INFO L225 Difference]: With dead ends: 160 [2022-11-25 15:45:47,845 INFO L226 Difference]: Without dead ends: 84 [2022-11-25 15:45:47,846 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-11-25 15:45:47,850 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 202 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:47,851 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [202 Valid, 226 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:45:47,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-11-25 15:45:47,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-11-25 15:45:47,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 71 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-11-25 15:45:47,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-11-25 15:45:47,865 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 30 [2022-11-25 15:45:47,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:47,866 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-11-25 15:45:47,866 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-11-25 15:45:47,866 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-11-25 15:45:47,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-11-25 15:45:47,875 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:47,875 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:47,876 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-11-25 15:45:47,876 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:47,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:47,877 INFO L85 PathProgramCache]: Analyzing trace with hash -2059110199, now seen corresponding path program 1 times [2022-11-25 15:45:47,877 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:47,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504059387] [2022-11-25 15:45:47,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:47,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:47,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:47,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:47,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-11-25 15:45:48,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-11-25 15:45:48,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,024 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-11-25 15:45:48,025 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:48,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504059387] [2022-11-25 15:45:48,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504059387] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:48,028 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:48,029 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 15:45:48,029 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1407462455] [2022-11-25 15:45:48,029 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:48,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-11-25 15:45:48,031 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:48,032 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 15:45:48,033 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 15:45:48,033 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-25 15:45:48,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:48,243 INFO L93 Difference]: Finished difference Result 239 states and 313 transitions. [2022-11-25 15:45:48,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 15:45:48,244 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 43 [2022-11-25 15:45:48,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:48,246 INFO L225 Difference]: With dead ends: 239 [2022-11-25 15:45:48,246 INFO L226 Difference]: Without dead ends: 163 [2022-11-25 15:45:48,247 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:45:48,248 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 166 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:48,249 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 220 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 15:45:48,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-11-25 15:45:48,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2022-11-25 15:45:48,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 117 states have (on average 1.2991452991452992) internal successors, (152), 125 states have internal predecessors, (152), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-25 15:45:48,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 201 transitions. [2022-11-25 15:45:48,277 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 201 transitions. Word has length 43 [2022-11-25 15:45:48,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:48,277 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 201 transitions. [2022-11-25 15:45:48,277 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-11-25 15:45:48,278 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 201 transitions. [2022-11-25 15:45:48,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 15:45:48,279 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:48,279 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:48,279 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-11-25 15:45:48,280 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:48,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:48,280 INFO L85 PathProgramCache]: Analyzing trace with hash 1486842068, now seen corresponding path program 1 times [2022-11-25 15:45:48,280 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:48,281 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167053916] [2022-11-25 15:45:48,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:48,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:48,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:48,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:48,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-25 15:45:48,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,457 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:48,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:48,458 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167053916] [2022-11-25 15:45:48,463 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167053916] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:48,463 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:48,464 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 15:45:48,464 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510512813] [2022-11-25 15:45:48,464 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:48,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 15:45:48,465 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:48,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 15:45:48,466 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 15:45:48,466 INFO L87 Difference]: Start difference. First operand 157 states and 201 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:45:48,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:48,676 INFO L93 Difference]: Finished difference Result 314 states and 410 transitions. [2022-11-25 15:45:48,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 15:45:48,679 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-11-25 15:45:48,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:48,685 INFO L225 Difference]: With dead ends: 314 [2022-11-25 15:45:48,685 INFO L226 Difference]: Without dead ends: 165 [2022-11-25 15:45:48,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-11-25 15:45:48,694 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 70 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:48,695 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 424 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:45:48,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-11-25 15:45:48,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 160. [2022-11-25 15:45:48,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 120 states have (on average 1.2916666666666667) internal successors, (155), 128 states have internal predecessors, (155), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-25 15:45:48,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 204 transitions. [2022-11-25 15:45:48,735 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 204 transitions. Word has length 49 [2022-11-25 15:45:48,737 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:48,737 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 204 transitions. [2022-11-25 15:45:48,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:45:48,738 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 204 transitions. [2022-11-25 15:45:48,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 15:45:48,744 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:48,745 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:48,745 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-11-25 15:45:48,746 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:48,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:48,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1909543894, now seen corresponding path program 1 times [2022-11-25 15:45:48,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:48,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564318190] [2022-11-25 15:45:48,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:48,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:48,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,841 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:48,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:48,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-25 15:45:48,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:48,889 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:48,889 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:48,889 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564318190] [2022-11-25 15:45:48,889 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564318190] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:48,890 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:48,890 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:45:48,890 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1102698284] [2022-11-25 15:45:48,890 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:48,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:45:48,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:48,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:45:48,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:45:48,892 INFO L87 Difference]: Start difference. First operand 160 states and 204 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:45:49,048 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:49,049 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-11-25 15:45:49,049 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 15:45:49,049 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-11-25 15:45:49,050 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:49,051 INFO L225 Difference]: With dead ends: 322 [2022-11-25 15:45:49,051 INFO L226 Difference]: Without dead ends: 170 [2022-11-25 15:45:49,052 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:45:49,059 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 74 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:49,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 329 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:45:49,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-11-25 15:45:49,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 162. [2022-11-25 15:45:49,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-11-25 15:45:49,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-11-25 15:45:49,102 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 49 [2022-11-25 15:45:49,103 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:49,104 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-11-25 15:45:49,104 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-11-25 15:45:49,104 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-11-25 15:45:49,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-11-25 15:45:49,110 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:49,111 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:49,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-11-25 15:45:49,111 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:49,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:49,112 INFO L85 PathProgramCache]: Analyzing trace with hash 104105560, now seen corresponding path program 1 times [2022-11-25 15:45:49,112 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:49,112 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1673497922] [2022-11-25 15:45:49,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:49,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:49,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:49,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:49,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-11-25 15:45:49,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,277 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:49,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:49,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1673497922] [2022-11-25 15:45:49,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1673497922] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:49,278 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:49,278 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:45:49,279 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730040890] [2022-11-25 15:45:49,279 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:49,281 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:45:49,281 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:49,282 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:45:49,282 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:45:49,282 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 15:45:49,616 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:49,616 INFO L93 Difference]: Finished difference Result 451 states and 595 transitions. [2022-11-25 15:45:49,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 15:45:49,617 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2022-11-25 15:45:49,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:49,622 INFO L225 Difference]: With dead ends: 451 [2022-11-25 15:45:49,622 INFO L226 Difference]: Without dead ends: 297 [2022-11-25 15:45:49,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-11-25 15:45:49,624 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 222 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:49,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 341 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 15:45:49,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-11-25 15:45:49,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 289. [2022-11-25 15:45:49,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 216 states have (on average 1.2638888888888888) internal successors, (273), 228 states have internal predecessors, (273), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-25 15:45:49,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 371 transitions. [2022-11-25 15:45:49,657 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 371 transitions. Word has length 49 [2022-11-25 15:45:49,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:49,658 INFO L495 AbstractCegarLoop]: Abstraction has 289 states and 371 transitions. [2022-11-25 15:45:49,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-11-25 15:45:49,658 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 371 transitions. [2022-11-25 15:45:49,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-11-25 15:45:49,659 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:49,659 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:49,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-11-25 15:45:49,660 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:49,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:49,660 INFO L85 PathProgramCache]: Analyzing trace with hash 528797415, now seen corresponding path program 1 times [2022-11-25 15:45:49,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:49,661 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1161665948] [2022-11-25 15:45:49,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:49,661 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:49,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:49,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,798 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:49,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-11-25 15:45:49,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,815 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-11-25 15:45:49,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:49,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:49,819 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:49,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1161665948] [2022-11-25 15:45:49,820 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1161665948] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:49,820 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:49,820 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 15:45:49,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1447809457] [2022-11-25 15:45:49,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:49,824 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-11-25 15:45:49,825 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:49,826 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 15:45:49,826 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 15:45:49,826 INFO L87 Difference]: Start difference. First operand 289 states and 371 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:45:50,103 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:50,103 INFO L93 Difference]: Finished difference Result 586 states and 765 transitions. [2022-11-25 15:45:50,104 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-25 15:45:50,104 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-11-25 15:45:50,106 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:50,108 INFO L225 Difference]: With dead ends: 586 [2022-11-25 15:45:50,109 INFO L226 Difference]: Without dead ends: 305 [2022-11-25 15:45:50,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-11-25 15:45:50,113 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 151 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:50,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 381 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-11-25 15:45:50,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-11-25 15:45:50,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 285. [2022-11-25 15:45:50,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 212 states have (on average 1.2311320754716981) internal successors, (261), 224 states have internal predecessors, (261), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-11-25 15:45:50,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 359 transitions. [2022-11-25 15:45:50,154 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 359 transitions. Word has length 51 [2022-11-25 15:45:50,154 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:50,155 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 359 transitions. [2022-11-25 15:45:50,155 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:45:50,155 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 359 transitions. [2022-11-25 15:45:50,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-11-25 15:45:50,156 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:50,157 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:50,157 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-11-25 15:45:50,157 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:50,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:50,158 INFO L85 PathProgramCache]: Analyzing trace with hash 1943832958, now seen corresponding path program 1 times [2022-11-25 15:45:50,158 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:50,158 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909681926] [2022-11-25 15:45:50,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:50,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:50,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:45:50,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 15:45:50,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:50,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-11-25 15:45:50,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:50,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:50,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909681926] [2022-11-25 15:45:50,256 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909681926] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:50,256 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 15:45:50,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 15:45:50,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1913690081] [2022-11-25 15:45:50,256 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:50,257 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-11-25 15:45:50,257 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:50,258 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 15:45:50,258 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 15:45:50,259 INFO L87 Difference]: Start difference. First operand 285 states and 359 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:45:50,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:50,729 INFO L93 Difference]: Finished difference Result 587 states and 785 transitions. [2022-11-25 15:45:50,730 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 15:45:50,730 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-11-25 15:45:50,731 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:50,735 INFO L225 Difference]: With dead ends: 587 [2022-11-25 15:45:50,735 INFO L226 Difference]: Without dead ends: 585 [2022-11-25 15:45:50,736 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-11-25 15:45:50,738 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 328 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:50,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [332 Valid, 221 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-11-25 15:45:50,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2022-11-25 15:45:50,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 521. [2022-11-25 15:45:50,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 521 states, 386 states have (on average 1.238341968911917) internal successors, (478), 413 states have internal predecessors, (478), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2022-11-25 15:45:50,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 521 states to 521 states and 704 transitions. [2022-11-25 15:45:50,817 INFO L78 Accepts]: Start accepts. Automaton has 521 states and 704 transitions. Word has length 53 [2022-11-25 15:45:50,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:50,818 INFO L495 AbstractCegarLoop]: Abstraction has 521 states and 704 transitions. [2022-11-25 15:45:50,819 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-11-25 15:45:50,819 INFO L276 IsEmpty]: Start isEmpty. Operand 521 states and 704 transitions. [2022-11-25 15:45:50,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-11-25 15:45:50,821 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:50,821 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:50,821 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-11-25 15:45:50,822 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:50,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:50,822 INFO L85 PathProgramCache]: Analyzing trace with hash -1822040872, now seen corresponding path program 1 times [2022-11-25 15:45:50,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:50,823 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396339336] [2022-11-25 15:45:50,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:50,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:50,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:45:50,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:50,974 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:50,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:45:51,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,024 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:51,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-25 15:45:51,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-11-25 15:45:51,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:51,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-11-25 15:45:51,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,068 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-11-25 15:45:51,068 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:51,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396339336] [2022-11-25 15:45:51,068 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1396339336] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:45:51,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1809280627] [2022-11-25 15:45:51,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:51,069 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:45:51,070 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:45:51,075 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:45:51,094 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-11-25 15:45:51,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,202 INFO L263 TraceCheckSpWp]: Trace formula consists of 338 conjuncts, 4 conjunts are in the unsatisfiable core [2022-11-25 15:45:51,209 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:45:51,327 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:51,328 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 15:45:51,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1809280627] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:51,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 15:45:51,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-11-25 15:45:51,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2123584101] [2022-11-25 15:45:51,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:51,329 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-11-25 15:45:51,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:51,330 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 15:45:51,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-25 15:45:51,330 INFO L87 Difference]: Start difference. First operand 521 states and 704 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-25 15:45:51,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:51,399 INFO L93 Difference]: Finished difference Result 886 states and 1228 transitions. [2022-11-25 15:45:51,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 15:45:51,399 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 96 [2022-11-25 15:45:51,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:51,402 INFO L225 Difference]: With dead ends: 886 [2022-11-25 15:45:51,402 INFO L226 Difference]: Without dead ends: 426 [2022-11-25 15:45:51,404 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-11-25 15:45:51,405 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 51 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:51,405 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 219 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-11-25 15:45:51,406 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2022-11-25 15:45:51,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 426. [2022-11-25 15:45:51,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 315 states have (on average 1.2158730158730158) internal successors, (383), 338 states have internal predecessors, (383), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2022-11-25 15:45:51,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 531 transitions. [2022-11-25 15:45:51,475 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 531 transitions. Word has length 96 [2022-11-25 15:45:51,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:51,475 INFO L495 AbstractCegarLoop]: Abstraction has 426 states and 531 transitions. [2022-11-25 15:45:51,476 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-11-25 15:45:51,476 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 531 transitions. [2022-11-25 15:45:51,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-11-25 15:45:51,477 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:51,478 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:51,484 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-11-25 15:45:51,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:45:51,683 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:51,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:51,684 INFO L85 PathProgramCache]: Analyzing trace with hash 1708523928, now seen corresponding path program 1 times [2022-11-25 15:45:51,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:51,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1147988041] [2022-11-25 15:45:51,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:51,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:51,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,819 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:45:51,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-11-25 15:45:51,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:45:51,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:51,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-25 15:45:51,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,971 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-11-25 15:45:51,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-11-25 15:45:51,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-25 15:45:51,979 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:51,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,982 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-11-25 15:45:51,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:51,984 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-25 15:45:51,985 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:51,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1147988041] [2022-11-25 15:45:51,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1147988041] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:45:51,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [916484990] [2022-11-25 15:45:51,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:51,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:45:51,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:45:51,987 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:45:51,996 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-11-25 15:45:52,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:52,100 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 11 conjunts are in the unsatisfiable core [2022-11-25 15:45:52,108 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:45:52,294 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 34 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 15:45:52,295 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-11-25 15:45:52,618 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-11-25 15:45:52,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [916484990] provided 0 perfect and 2 imperfect interpolant sequences [2022-11-25 15:45:52,619 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-11-25 15:45:52,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 7] total 18 [2022-11-25 15:45:52,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131314463] [2022-11-25 15:45:52,619 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-11-25 15:45:52,621 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-11-25 15:45:52,621 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:52,622 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-11-25 15:45:52,622 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2022-11-25 15:45:52,622 INFO L87 Difference]: Start difference. First operand 426 states and 531 transitions. Second operand has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-25 15:45:57,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:57,499 INFO L93 Difference]: Finished difference Result 2067 states and 2796 transitions. [2022-11-25 15:45:57,499 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2022-11-25 15:45:57,500 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) Word has length 106 [2022-11-25 15:45:57,500 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:57,510 INFO L225 Difference]: With dead ends: 2067 [2022-11-25 15:45:57,510 INFO L226 Difference]: Without dead ends: 1649 [2022-11-25 15:45:57,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 249 SyntacticMatches, 3 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3648 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=1232, Invalid=9070, Unknown=0, NotChecked=0, Total=10302 [2022-11-25 15:45:57,517 INFO L413 NwaCegarLoop]: 272 mSDtfsCounter, 1208 mSDsluCounter, 1631 mSDsCounter, 0 mSdLazyCounter, 3272 mSolverCounterSat, 656 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1216 SdHoareTripleChecker+Valid, 1903 SdHoareTripleChecker+Invalid, 3928 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 656 IncrementalHoareTripleChecker+Valid, 3272 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:57,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1216 Valid, 1903 Invalid, 3928 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [656 Valid, 3272 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-11-25 15:45:57,519 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1649 states. [2022-11-25 15:45:57,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1649 to 1380. [2022-11-25 15:45:57,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1380 states, 1009 states have (on average 1.1714568880079286) internal successors, (1182), 1074 states have internal predecessors, (1182), 192 states have call successors, (192), 149 states have call predecessors, (192), 178 states have return successors, (311), 190 states have call predecessors, (311), 192 states have call successors, (311) [2022-11-25 15:45:57,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1380 states to 1380 states and 1685 transitions. [2022-11-25 15:45:57,658 INFO L78 Accepts]: Start accepts. Automaton has 1380 states and 1685 transitions. Word has length 106 [2022-11-25 15:45:57,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:57,659 INFO L495 AbstractCegarLoop]: Abstraction has 1380 states and 1685 transitions. [2022-11-25 15:45:57,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-11-25 15:45:57,659 INFO L276 IsEmpty]: Start isEmpty. Operand 1380 states and 1685 transitions. [2022-11-25 15:45:57,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-11-25 15:45:57,662 INFO L187 NwaCegarLoop]: Found error trace [2022-11-25 15:45:57,663 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:45:57,671 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-11-25 15:45:57,868 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-11-25 15:45:57,869 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-11-25 15:45:57,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 15:45:57,869 INFO L85 PathProgramCache]: Analyzing trace with hash -2037149614, now seen corresponding path program 1 times [2022-11-25 15:45:57,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 15:45:57,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730399956] [2022-11-25 15:45:57,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:57,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 15:45:57,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-11-25 15:45:58,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-11-25 15:45:58,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-11-25 15:45:58,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-11-25 15:45:58,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:58,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-11-25 15:45:58,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-11-25 15:45:58,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-11-25 15:45:58,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-11-25 15:45:58,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-11-25 15:45:58,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-11-25 15:45:58,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,194 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-25 15:45:58,194 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 15:45:58,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730399956] [2022-11-25 15:45:58,194 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730399956] provided 0 perfect and 1 imperfect interpolant sequences [2022-11-25 15:45:58,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [845709848] [2022-11-25 15:45:58,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 15:45:58,195 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-11-25 15:45:58,195 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 15:45:58,196 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-11-25 15:45:58,223 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-11-25 15:45:58,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 15:45:58,307 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-25 15:45:58,310 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 15:45:58,490 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-11-25 15:45:58,490 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-11-25 15:45:58,491 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [845709848] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 15:45:58,491 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-11-25 15:45:58,491 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-11-25 15:45:58,491 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152731671] [2022-11-25 15:45:58,491 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 15:45:58,492 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-11-25 15:45:58,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 15:45:58,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 15:45:58,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2022-11-25 15:45:58,493 INFO L87 Difference]: Start difference. First operand 1380 states and 1685 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-25 15:45:58,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 15:45:58,680 INFO L93 Difference]: Finished difference Result 2272 states and 2773 transitions. [2022-11-25 15:45:58,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 15:45:58,681 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2022-11-25 15:45:58,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-11-25 15:45:58,682 INFO L225 Difference]: With dead ends: 2272 [2022-11-25 15:45:58,682 INFO L226 Difference]: Without dead ends: 0 [2022-11-25 15:45:58,689 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=62, Invalid=358, Unknown=0, NotChecked=0, Total=420 [2022-11-25 15:45:58,690 INFO L413 NwaCegarLoop]: 183 mSDtfsCounter, 47 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-11-25 15:45:58,690 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 862 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-11-25 15:45:58,691 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-11-25 15:45:58,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-11-25 15:45:58,691 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 15:45:58,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-11-25 15:45:58,692 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-11-25 15:45:58,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-11-25 15:45:58,692 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-11-25 15:45:58,692 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-11-25 15:45:58,692 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-11-25 15:45:58,692 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-11-25 15:45:58,695 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-11-25 15:45:58,708 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-11-25 15:45:58,901 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-11-25 15:45:58,903 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-11-25 15:46:08,976 INFO L895 garLoopResultBuilder]: At program point deactivatePumpENTRY(lines 624 631) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-11-25 15:46:08,976 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-11-25 15:46:08,977 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2022-11-25 15:46:08,977 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2022-11-25 15:46:08,977 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2022-11-25 15:46:08,977 INFO L899 garLoopResultBuilder]: For program point L897-1(lines 893 904) no Hoare annotation was computed. [2022-11-25 15:46:08,977 INFO L895 garLoopResultBuilder]: At program point changeMethaneLevelENTRY(lines 893 904) the Hoare annotation is: (let ((.cse2 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse3 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse3 .cse4 .cse5) (or .cse7 .cse0 .cse1 .cse8 .cse5) (or .cse7 .cse1 .cse6 .cse8 (< ~waterLevel~0 2)))) [2022-11-25 15:46:08,978 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2022-11-25 15:46:08,978 INFO L902 garLoopResultBuilder]: At program point isMethaneLevelCriticalENTRY(lines 905 913) the Hoare annotation is: true [2022-11-25 15:46:08,978 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 905 913) no Hoare annotation was computed. [2022-11-25 15:46:08,978 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2022-11-25 15:46:08,978 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2022-11-25 15:46:08,978 INFO L902 garLoopResultBuilder]: At program point cleanupENTRY(lines 767 796) the Hoare annotation is: true [2022-11-25 15:46:08,979 INFO L902 garLoopResultBuilder]: At program point L792(lines 767 796) the Hoare annotation is: true [2022-11-25 15:46:08,979 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2022-11-25 15:46:08,979 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2022-11-25 15:46:08,979 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2022-11-25 15:46:08,979 INFO L899 garLoopResultBuilder]: For program point L778(line 778) no Hoare annotation was computed. [2022-11-25 15:46:08,979 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2022-11-25 15:46:08,980 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2022-11-25 15:46:08,980 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2022-11-25 15:46:08,980 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 (not (= |old(~waterLevel~0)| 0)) (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (= ~waterLevel~0 0))) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse6))) [2022-11-25 15:46:08,980 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse10 (= ~waterLevel~0 0)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse6) (or .cse1 .cse2 .cse7 .cse8 .cse9 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse10)) (or .cse1 .cse2 .cse6 (and .cse3 .cse4 .cse5) .cse11) (or .cse0 .cse1 .cse2 .cse6 .cse9 .cse10) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse8 .cse11) (or .cse3 .cse1 .cse2 .cse7 .cse8) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse8))) [2022-11-25 15:46:08,981 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 507 530) no Hoare annotation was computed. [2022-11-25 15:46:08,981 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse4 .cse11 .cse2)) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse11)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse11)) (.cse8 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse2 .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7 .cse10 .cse3 (and .cse4 .cse11)) (or .cse1 .cse7 .cse12 .cse8 .cse13) (or .cse6 .cse1 .cse7 .cse10 .cse3 .cse9 (and .cse5 (= ~waterLevel~0 0))) (or .cse1 .cse7 (<= 1 ~waterLevel~0) .cse3 .cse13) (or .cse0 .cse1 .cse7 .cse12 .cse8)))) [2022-11-25 15:46:08,981 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2022-11-25 15:46:08,981 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (or .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4))) [2022-11-25 15:46:08,982 INFO L895 garLoopResultBuilder]: At program point L610-1(lines 591 615) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse4 .cse11 .cse2)) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse11)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse11)) (.cse8 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse2 .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7 .cse10 .cse3 (and .cse4 .cse11)) (or .cse1 .cse7 .cse12 .cse8 .cse13) (or .cse6 .cse1 .cse7 .cse10 .cse3 .cse9 (and .cse5 (= ~waterLevel~0 0))) (or .cse1 .cse7 (<= 1 ~waterLevel~0) .cse3 .cse13) (or .cse0 .cse1 .cse7 .cse12 .cse8)))) [2022-11-25 15:46:08,982 INFO L895 garLoopResultBuilder]: At program point L639(lines 632 642) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= ~waterLevel~0 0)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse4 .cse5) (or .cse0 .cse1 (<= 1 ~waterLevel~0) .cse3 .cse8) (or .cse6 .cse0 .cse1 .cse7 (and .cse9 (= ~methAndRunningLastTime~0 0) .cse10)) (or .cse0 .cse1 .cse7 (and .cse9 .cse10) .cse8) (or .cse9 .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse6 .cse0 .cse3))) [2022-11-25 15:46:08,982 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2022-11-25 15:46:08,983 INFO L895 garLoopResultBuilder]: At program point L648(lines 643 651) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not .cse7)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 .cse9 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse10) .cse2 (and .cse3 .cse5 .cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))) (or .cse8 .cse9 .cse0 .cse11 .cse12) (or .cse9 .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 0)) (= ~waterLevel~0 0)) (or (and .cse3 .cse4 .cse5 .cse6 .cse7) .cse9 .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse11 .cse12)))) [2022-11-25 15:46:08,983 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2022-11-25 15:46:08,983 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-11-25 15:46:08,983 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2022-11-25 15:46:08,983 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2022-11-25 15:46:08,983 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 761) no Hoare annotation was computed. [2022-11-25 15:46:08,984 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 736 764) the Hoare annotation is: (let ((.cse18 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse3 (and .cse18 .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse12)) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse15 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse7 .cse8) (or (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse16 .cse0 (and .cse17 .cse18 .cse10 .cse12 .cse13 .cse14) .cse5 .cse6) (or .cse16 .cse0 .cse1 .cse2 .cse3) (or .cse16 .cse0 .cse1 .cse2 .cse7 .cse8) (or .cse15 .cse16 .cse0 .cse2 (and .cse17 .cse18 .cse10 .cse12 .cse14) (and .cse9 .cse11 .cse12 .cse14)) (or .cse0 .cse1 (<= 1 ~waterLevel~0) .cse6 .cse4) (or (and .cse18 .cse10 .cse12 .cse13) .cse0 .cse1 .cse5 (and .cse17 .cse10 .cse13) .cse6)))) [2022-11-25 15:46:08,984 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse9 .cse1 .cse2 .cse3 .cse7 .cse8) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or .cse9 .cse1 .cse2 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse9 .cse1 .cse6))) [2022-11-25 15:46:08,984 INFO L899 garLoopResultBuilder]: For program point L637-1(line 637) no Hoare annotation was computed. [2022-11-25 15:46:08,984 INFO L895 garLoopResultBuilder]: At program point L55(lines 50 57) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse4) (or .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4))) [2022-11-25 15:46:08,985 INFO L895 garLoopResultBuilder]: At program point timeShiftENTRY(lines 507 530) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse3) (or .cse4 .cse0 .cse1 .cse5 .cse2) (or .cse0 .cse1 .cse5 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse4 .cse0 .cse3 (and (= ~pumpRunning~0 0) .cse6 .cse7))))) [2022-11-25 15:46:08,985 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2022-11-25 15:46:08,985 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2022-11-25 15:46:08,985 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 877) no Hoare annotation was computed. [2022-11-25 15:46:08,985 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-11-25 15:46:08,986 INFO L895 garLoopResultBuilder]: At program point L873-2(lines 869 880) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse9 .cse1 .cse2 .cse3 .cse7 .cse8) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or .cse9 .cse1 .cse2 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse9 .cse1 .cse6))) [2022-11-25 15:46:08,986 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2022-11-25 15:46:08,986 INFO L895 garLoopResultBuilder]: At program point L733(lines 728 735) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-25 15:46:08,986 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2022-11-25 15:46:08,986 INFO L902 garLoopResultBuilder]: At program point L861(lines 842 864) the Hoare annotation is: true [2022-11-25 15:46:08,987 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2022-11-25 15:46:08,987 INFO L902 garLoopResultBuilder]: At program point L122(lines 63 126) the Hoare annotation is: true [2022-11-25 15:46:08,987 INFO L895 garLoopResultBuilder]: At program point L985(lines 981 987) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-25 15:46:08,987 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-11-25 15:46:08,987 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-11-25 15:46:08,987 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2022-11-25 15:46:08,988 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-11-25 15:46:08,988 INFO L895 garLoopResultBuilder]: At program point L825(lines 821 827) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-25 15:46:08,988 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2022-11-25 15:46:08,988 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2022-11-25 15:46:08,988 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 114) no Hoare annotation was computed. [2022-11-25 15:46:08,988 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-11-25 15:46:08,989 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (not (< ~waterLevel~0 2)) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-11-25 15:46:08,989 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-11-25 15:46:08,989 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-11-25 15:46:08,989 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2022-11-25 15:46:08,989 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-11-25 15:46:08,990 INFO L895 garLoopResultBuilder]: At program point L1000(lines 995 1003) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-25 15:46:08,990 INFO L895 garLoopResultBuilder]: At program point L992(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-11-25 15:46:08,990 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 859) no Hoare annotation was computed. [2022-11-25 15:46:08,990 INFO L899 garLoopResultBuilder]: For program point L852-2(lines 852 859) no Hoare annotation was computed. [2022-11-25 15:46:08,990 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 113) no Hoare annotation was computed. [2022-11-25 15:46:08,990 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (< ~waterLevel~0 2)) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0 0) .cse5 .cse6) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-11-25 15:46:08,991 INFO L902 garLoopResultBuilder]: At program point L836(lines 828 838) the Hoare annotation is: true [2022-11-25 15:46:08,991 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__highWaterSensorENTRY(lines 539 563) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,991 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 560) no Hoare annotation was computed. [2022-11-25 15:46:08,991 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 956) no Hoare annotation was computed. [2022-11-25 15:46:08,991 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,992 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2022-11-25 15:46:08,992 INFO L895 garLoopResultBuilder]: At program point L703(lines 688 706) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-25 15:46:08,992 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2022-11-25 15:46:08,992 INFO L895 garLoopResultBuilder]: At program point L955(lines 946 959) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse2))) [2022-11-25 15:46:08,993 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2022-11-25 15:46:08,993 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2022-11-25 15:46:08,993 INFO L895 garLoopResultBuilder]: At program point L621(lines 616 623) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,993 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,993 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 555) no Hoare annotation was computed. [2022-11-25 15:46:08,994 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2022-11-25 15:46:08,994 INFO L899 garLoopResultBuilder]: For program point L885-1(lines 881 892) no Hoare annotation was computed. [2022-11-25 15:46:08,994 INFO L895 garLoopResultBuilder]: At program point waterRiseENTRY(lines 881 892) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) .cse3 .cse2 .cse4) (or (not (= ~pumpRunning~0 0)) .cse0 .cse3 .cse2 .cse4))) [2022-11-25 15:46:08,994 INFO L895 garLoopResultBuilder]: At program point processEnvironment__wrappee__lowWaterSensorENTRY(lines 565 589) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,994 INFO L895 garLoopResultBuilder]: At program point L965(lines 960 968) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,995 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-25 15:46:08,995 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-25 15:46:08,995 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2022-11-25 15:46:08,995 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2022-11-25 15:46:08,995 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 586) no Hoare annotation was computed. [2022-11-25 15:46:08,996 INFO L895 garLoopResultBuilder]: At program point L722(lines 707 725) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-11-25 15:46:08,996 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 720) no Hoare annotation was computed. [2022-11-25 15:46:08,996 INFO L899 garLoopResultBuilder]: For program point L716-2(lines 716 720) no Hoare annotation was computed. [2022-11-25 15:46:08,996 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-11-25 15:46:08,996 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2022-11-25 15:46:09,000 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 15:46:09,002 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-11-25 15:46:09,040 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 25.11 03:46:09 BoogieIcfgContainer [2022-11-25 15:46:09,040 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-11-25 15:46:09,040 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-11-25 15:46:09,041 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-11-25 15:46:09,041 INFO L275 PluginConnector]: Witness Printer initialized [2022-11-25 15:46:09,041 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 03:45:46" (3/4) ... [2022-11-25 15:46:09,045 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-11-25 15:46:09,052 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-11-25 15:46:09,053 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-11-25 15:46:09,053 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-11-25 15:46:09,053 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-11-25 15:46:09,060 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-11-25 15:46:09,061 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-11-25 15:46:09,061 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-11-25 15:46:09,062 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 15:46:09,062 INFO L915 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-11-25 15:46:09,090 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-11-25 15:46:09,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-11-25 15:46:09,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-11-25 15:46:09,091 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) [2022-11-25 15:46:09,096 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,097 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) [2022-11-25 15:46:09,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,098 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,099 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) && (tmp == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2022-11-25 15:46:09,100 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,101 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-11-25 15:46:09,148 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/witness.graphml [2022-11-25 15:46:09,149 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-11-25 15:46:09,149 INFO L158 Benchmark]: Toolchain (without parser) took 23852.18ms. Allocated memory was 195.0MB in the beginning and 283.1MB in the end (delta: 88.1MB). Free memory was 149.2MB in the beginning and 91.3MB in the end (delta: 57.9MB). Peak memory consumption was 148.0MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,150 INFO L158 Benchmark]: CDTParser took 0.30ms. Allocated memory is still 130.0MB. Free memory was 72.5MB in the beginning and 72.4MB in the end (delta: 117.6kB). There was no memory consumed. Max. memory is 16.1GB. [2022-11-25 15:46:09,150 INFO L158 Benchmark]: CACSL2BoogieTranslator took 493.34ms. Allocated memory is still 195.0MB. Free memory was 148.7MB in the beginning and 129.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,150 INFO L158 Benchmark]: Boogie Procedure Inliner took 77.66ms. Allocated memory is still 195.0MB. Free memory was 129.8MB in the beginning and 127.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,151 INFO L158 Benchmark]: Boogie Preprocessor took 29.05ms. Allocated memory is still 195.0MB. Free memory was 127.1MB in the beginning and 125.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,151 INFO L158 Benchmark]: RCFGBuilder took 687.29ms. Allocated memory is still 195.0MB. Free memory was 125.6MB in the beginning and 157.9MB in the end (delta: -32.3MB). Peak memory consumption was 18.6MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,152 INFO L158 Benchmark]: TraceAbstraction took 22448.53ms. Allocated memory was 195.0MB in the beginning and 283.1MB in the end (delta: 88.1MB). Free memory was 157.9MB in the beginning and 97.6MB in the end (delta: 60.3MB). Peak memory consumption was 165.8MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,153 INFO L158 Benchmark]: Witness Printer took 108.20ms. Allocated memory is still 283.1MB. Free memory was 97.6MB in the beginning and 91.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-11-25 15:46:09,156 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.30ms. Allocated memory is still 130.0MB. Free memory was 72.5MB in the beginning and 72.4MB in the end (delta: 117.6kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 493.34ms. Allocated memory is still 195.0MB. Free memory was 148.7MB in the beginning and 129.8MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 77.66ms. Allocated memory is still 195.0MB. Free memory was 129.8MB in the beginning and 127.1MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 29.05ms. Allocated memory is still 195.0MB. Free memory was 127.1MB in the beginning and 125.6MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 687.29ms. Allocated memory is still 195.0MB. Free memory was 125.6MB in the beginning and 157.9MB in the end (delta: -32.3MB). Peak memory consumption was 18.6MB. Max. memory is 16.1GB. * TraceAbstraction took 22448.53ms. Allocated memory was 195.0MB in the beginning and 283.1MB in the end (delta: 88.1MB). Free memory was 157.9MB in the beginning and 97.6MB in the end (delta: 60.3MB). Peak memory consumption was 165.8MB. Max. memory is 16.1GB. * Witness Printer took 108.20ms. Allocated memory is still 283.1MB. Free memory was 97.6MB in the beginning and 91.3MB in the end (delta: 6.3MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 22.4s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 7.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 10.1s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2572 SdHoareTripleChecker+Valid, 4.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2531 mSDsluCounter, 5456 SdHoareTripleChecker+Invalid, 3.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3897 mSDsCounter, 1021 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4335 IncrementalHoareTripleChecker+Invalid, 5356 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1021 mSolverCounterUnsat, 1559 mSDtfsCounter, 4335 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 734 GetRequests, 559 SyntacticMatches, 4 SemanticMatches, 171 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3706 ImplicationChecksByTransitivity, 2.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1380occurred in iteration=11, InterpolantAutomatonStates: 152, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.5s AutomataMinimizationTime, 12 MinimizatonAttempts, 380 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2015 PreInvPairs, 2346 NumberOfFragments, 3094 HoareAnnotationTreeSize, 2015 FomulaSimplifications, 1329 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 47 FomulaSimplificationsInter, 29972 FormulaSimplificationTreeSizeReductionInter, 9.3s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.8s InterpolantComputationTime, 999 NumberOfCodeBlocks, 999 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1089 ConstructedInterpolants, 0 QuantifiedInterpolants, 2147 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1071 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 248/268 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) && (tmp == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 728]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 828]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-11-25 15:46:09,216 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_aa31b34f-a65a-4666-9cfe-d269f68f6245/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE