./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 16:18:30,323 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 16:18:30,324 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 16:18:30,336 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 16:18:30,337 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 16:18:30,337 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 16:18:30,338 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 16:18:30,339 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 16:18:30,340 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 16:18:30,340 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 16:18:30,341 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 16:18:30,342 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 16:18:30,342 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 16:18:30,343 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 16:18:30,343 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 16:18:30,344 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 16:18:30,345 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 16:18:30,345 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 16:18:30,346 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 16:18:30,347 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 16:18:30,348 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 16:18:30,349 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 16:18:30,350 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 16:18:30,350 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 16:18:30,352 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 16:18:30,353 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 16:18:30,353 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 16:18:30,353 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 16:18:30,354 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 16:18:30,354 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 16:18:30,355 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 16:18:30,355 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 16:18:30,355 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 16:18:30,356 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 16:18:30,357 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 16:18:30,357 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 16:18:30,357 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 16:18:30,357 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 16:18:30,357 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 16:18:30,358 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 16:18:30,358 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 16:18:30,359 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 16:18:30,372 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 16:18:30,373 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 16:18:30,373 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 16:18:30,373 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 16:18:30,373 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 16:18:30,373 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 16:18:30,374 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 16:18:30,374 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 16:18:30,374 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 16:18:30,374 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 16:18:30,374 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 16:18:30,374 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 16:18:30,375 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 16:18:30,376 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 16:18:30,376 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 16:18:30,376 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 16:18:30,377 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f55fffdfb523946c08e4798dfd7a981dcf70594f408e958cce4b1b6e97bd924 [2022-12-13 16:18:30,542 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 16:18:30,562 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 16:18:30,565 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 16:18:30,566 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 16:18:30,566 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 16:18:30,568 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-12-13 16:18:33,193 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 16:18:33,353 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 16:18:33,353 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c [2022-12-13 16:18:33,360 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/data/a886e620e/7c3f00d0d6d041ff853cc0a31f84c828/FLAG56c3d095d [2022-12-13 16:18:33,370 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/data/a886e620e/7c3f00d0d6d041ff853cc0a31f84c828 [2022-12-13 16:18:33,372 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 16:18:33,373 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 16:18:33,373 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 16:18:33,373 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 16:18:33,376 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 16:18:33,376 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,377 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1592421f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33, skipping insertion in model container [2022-12-13 16:18:33,377 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,382 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 16:18:33,405 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 16:18:33,505 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-12-13 16:18:33,575 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 16:18:33,583 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 16:18:33,593 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/sv-benchmarks/c/product-lines/minepump_spec2_product53.cil.c[1605,1618] [2022-12-13 16:18:33,629 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 16:18:33,641 INFO L208 MainTranslator]: Completed translation [2022-12-13 16:18:33,641 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33 WrapperNode [2022-12-13 16:18:33,642 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 16:18:33,642 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 16:18:33,642 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 16:18:33,642 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 16:18:33,648 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,657 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,674 INFO L138 Inliner]: procedures = 57, calls = 103, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 221 [2022-12-13 16:18:33,675 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 16:18:33,675 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 16:18:33,675 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 16:18:33,675 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 16:18:33,682 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,683 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,684 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,684 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,688 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,691 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,692 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,693 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,694 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 16:18:33,695 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 16:18:33,695 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 16:18:33,695 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 16:18:33,696 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (1/1) ... [2022-12-13 16:18:33,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 16:18:33,710 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 16:18:33,719 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 16:18:33,721 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 16:18:33,749 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 16:18:33,749 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 16:18:33,750 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 16:18:33,750 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 16:18:33,750 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 16:18:33,750 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 16:18:33,750 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 16:18:33,750 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 16:18:33,750 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 16:18:33,750 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 16:18:33,751 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 16:18:33,751 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 16:18:33,751 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 16:18:33,751 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 16:18:33,751 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 16:18:33,751 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-13 16:18:33,751 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-13 16:18:33,751 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 16:18:33,752 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 16:18:33,752 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 16:18:33,752 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 16:18:33,752 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 16:18:33,816 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 16:18:33,818 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 16:18:34,035 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 16:18:34,041 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 16:18:34,041 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 16:18:34,043 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:18:34 BoogieIcfgContainer [2022-12-13 16:18:34,043 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 16:18:34,045 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 16:18:34,045 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 16:18:34,047 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 16:18:34,047 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 04:18:33" (1/3) ... [2022-12-13 16:18:34,048 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d1892b1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 04:18:34, skipping insertion in model container [2022-12-13 16:18:34,048 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 04:18:33" (2/3) ... [2022-12-13 16:18:34,048 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4d1892b1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 04:18:34, skipping insertion in model container [2022-12-13 16:18:34,048 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:18:34" (3/3) ... [2022-12-13 16:18:34,049 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product53.cil.c [2022-12-13 16:18:34,063 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 16:18:34,063 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 16:18:34,102 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 16:18:34,117 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6f1f9a7f, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 16:18:34,118 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 16:18:34,123 INFO L276 IsEmpty]: Start isEmpty. Operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-12-13 16:18:34,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 16:18:34,130 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:34,131 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:34,131 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:34,135 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:34,135 INFO L85 PathProgramCache]: Analyzing trace with hash 270425168, now seen corresponding path program 1 times [2022-12-13 16:18:34,142 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:34,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [973647724] [2022-12-13 16:18:34,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:34,143 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:34,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 16:18:34,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,290 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:34,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:34,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [973647724] [2022-12-13 16:18:34,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [973647724] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:34,291 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:34,291 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 16:18:34,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735444525] [2022-12-13 16:18:34,293 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:34,296 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 16:18:34,296 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:34,316 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 16:18:34,317 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 16:18:34,319 INFO L87 Difference]: Start difference. First operand has 102 states, 75 states have (on average 1.3866666666666667) internal successors, (104), 85 states have internal predecessors, (104), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:34,344 INFO L93 Difference]: Finished difference Result 195 states and 266 transitions. [2022-12-13 16:18:34,345 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 16:18:34,346 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 16:18:34,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:34,354 INFO L225 Difference]: With dead ends: 195 [2022-12-13 16:18:34,355 INFO L226 Difference]: Without dead ends: 93 [2022-12-13 16:18:34,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 16:18:34,360 INFO L413 NwaCegarLoop]: 130 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:34,361 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 130 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:18:34,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-12-13 16:18:34,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 93. [2022-12-13 16:18:34,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 93 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 77 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-12-13 16:18:34,400 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 93 states to 93 states and 121 transitions. [2022-12-13 16:18:34,402 INFO L78 Accepts]: Start accepts. Automaton has 93 states and 121 transitions. Word has length 25 [2022-12-13 16:18:34,402 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:34,402 INFO L495 AbstractCegarLoop]: Abstraction has 93 states and 121 transitions. [2022-12-13 16:18:34,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,403 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states and 121 transitions. [2022-12-13 16:18:34,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 16:18:34,405 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:34,406 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:34,406 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 16:18:34,406 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:34,407 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:34,407 INFO L85 PathProgramCache]: Analyzing trace with hash -1281530714, now seen corresponding path program 1 times [2022-12-13 16:18:34,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:34,408 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1816973538] [2022-12-13 16:18:34,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:34,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:34,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 16:18:34,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,516 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:34,516 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:34,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1816973538] [2022-12-13 16:18:34,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1816973538] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:34,517 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:34,517 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 16:18:34,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252000144] [2022-12-13 16:18:34,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:34,518 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 16:18:34,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:34,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 16:18:34,520 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:18:34,520 INFO L87 Difference]: Start difference. First operand 93 states and 121 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:34,535 INFO L93 Difference]: Finished difference Result 151 states and 197 transitions. [2022-12-13 16:18:34,536 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 16:18:34,536 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 16:18:34,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:34,537 INFO L225 Difference]: With dead ends: 151 [2022-12-13 16:18:34,537 INFO L226 Difference]: Without dead ends: 84 [2022-12-13 16:18:34,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 16:18:34,538 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 12 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:34,539 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 200 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:18:34,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-12-13 16:18:34,545 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-12-13 16:18:34,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3387096774193548) internal successors, (83), 71 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 16:18:34,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 109 transitions. [2022-12-13 16:18:34,546 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 109 transitions. Word has length 26 [2022-12-13 16:18:34,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:34,546 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 109 transitions. [2022-12-13 16:18:34,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,546 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 109 transitions. [2022-12-13 16:18:34,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-13 16:18:34,547 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:34,547 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:34,547 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 16:18:34,548 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:34,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:34,548 INFO L85 PathProgramCache]: Analyzing trace with hash -1565936952, now seen corresponding path program 1 times [2022-12-13 16:18:34,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:34,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1651012092] [2022-12-13 16:18:34,548 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:34,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:34,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:34,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:34,649 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:34,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1651012092] [2022-12-13 16:18:34,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1651012092] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:34,650 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:34,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 16:18:34,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2041171427] [2022-12-13 16:18:34,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:34,651 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 16:18:34,651 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:34,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 16:18:34,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-13 16:18:34,651 INFO L87 Difference]: Start difference. First operand 84 states and 109 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:34,759 INFO L93 Difference]: Finished difference Result 160 states and 211 transitions. [2022-12-13 16:18:34,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 16:18:34,760 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-12-13 16:18:34,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:34,761 INFO L225 Difference]: With dead ends: 160 [2022-12-13 16:18:34,761 INFO L226 Difference]: Without dead ends: 84 [2022-12-13 16:18:34,761 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-13 16:18:34,762 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 202 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 202 SdHoareTripleChecker+Valid, 226 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:34,763 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [202 Valid, 226 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:34,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-12-13 16:18:34,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 84. [2022-12-13 16:18:34,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84 states, 62 states have (on average 1.3225806451612903) internal successors, (82), 71 states have internal predecessors, (82), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 16:18:34,770 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84 states to 84 states and 108 transitions. [2022-12-13 16:18:34,770 INFO L78 Accepts]: Start accepts. Automaton has 84 states and 108 transitions. Word has length 30 [2022-12-13 16:18:34,771 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:34,771 INFO L495 AbstractCegarLoop]: Abstraction has 84 states and 108 transitions. [2022-12-13 16:18:34,771 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 6 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 16:18:34,771 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 108 transitions. [2022-12-13 16:18:34,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-12-13 16:18:34,772 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:34,772 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:34,772 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 16:18:34,773 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:34,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:34,773 INFO L85 PathProgramCache]: Analyzing trace with hash -2059110199, now seen corresponding path program 1 times [2022-12-13 16:18:34,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:34,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1299464630] [2022-12-13 16:18:34,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:34,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:34,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:34,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-12-13 16:18:34,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-12-13 16:18:34,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:34,817 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 16:18:34,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:34,818 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1299464630] [2022-12-13 16:18:34,818 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1299464630] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:34,818 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:34,818 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 16:18:34,818 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524122426] [2022-12-13 16:18:34,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:34,819 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-13 16:18:34,819 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:34,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 16:18:34,820 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 16:18:34,820 INFO L87 Difference]: Start difference. First operand 84 states and 108 transitions. Second operand has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 16:18:34,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:34,964 INFO L93 Difference]: Finished difference Result 239 states and 313 transitions. [2022-12-13 16:18:34,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 16:18:34,964 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 43 [2022-12-13 16:18:34,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:34,965 INFO L225 Difference]: With dead ends: 239 [2022-12-13 16:18:34,965 INFO L226 Difference]: Without dead ends: 163 [2022-12-13 16:18:34,967 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-13 16:18:34,968 INFO L413 NwaCegarLoop]: 104 mSDtfsCounter, 166 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 172 SdHoareTripleChecker+Valid, 220 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:34,968 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [172 Valid, 220 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:34,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 163 states. [2022-12-13 16:18:34,987 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 163 to 157. [2022-12-13 16:18:34,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 117 states have (on average 1.2991452991452992) internal successors, (152), 125 states have internal predecessors, (152), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 16:18:34,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 201 transitions. [2022-12-13 16:18:34,988 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 201 transitions. Word has length 43 [2022-12-13 16:18:34,989 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:34,989 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 201 transitions. [2022-12-13 16:18:34,989 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.5) internal successors, (34), 3 states have internal predecessors, (34), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 16:18:34,989 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 201 transitions. [2022-12-13 16:18:34,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-13 16:18:34,990 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:34,990 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:34,990 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 16:18:34,990 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:34,990 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:34,990 INFO L85 PathProgramCache]: Analyzing trace with hash 1486842068, now seen corresponding path program 1 times [2022-12-13 16:18:34,990 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:34,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1897614128] [2022-12-13 16:18:34,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:34,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:35,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:35,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:35,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-12-13 16:18:35,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:35,123 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:35,123 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1897614128] [2022-12-13 16:18:35,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1897614128] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:35,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:35,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 16:18:35,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [764754862] [2022-12-13 16:18:35,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:35,125 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 16:18:35,125 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:35,125 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 16:18:35,125 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 16:18:35,126 INFO L87 Difference]: Start difference. First operand 157 states and 201 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 16:18:35,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:35,268 INFO L93 Difference]: Finished difference Result 314 states and 410 transitions. [2022-12-13 16:18:35,268 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 16:18:35,268 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-12-13 16:18:35,269 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:35,270 INFO L225 Difference]: With dead ends: 314 [2022-12-13 16:18:35,270 INFO L226 Difference]: Without dead ends: 165 [2022-12-13 16:18:35,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 16:18:35,272 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 70 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 424 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:35,273 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 424 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:35,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-12-13 16:18:35,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 160. [2022-12-13 16:18:35,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 160 states, 120 states have (on average 1.2916666666666667) internal successors, (155), 128 states have internal predecessors, (155), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 16:18:35,293 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 160 states to 160 states and 204 transitions. [2022-12-13 16:18:35,294 INFO L78 Accepts]: Start accepts. Automaton has 160 states and 204 transitions. Word has length 49 [2022-12-13 16:18:35,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:35,294 INFO L495 AbstractCegarLoop]: Abstraction has 160 states and 204 transitions. [2022-12-13 16:18:35,294 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 16:18:35,294 INFO L276 IsEmpty]: Start isEmpty. Operand 160 states and 204 transitions. [2022-12-13 16:18:35,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-13 16:18:35,296 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:35,296 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:35,296 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 16:18:35,296 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:35,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:35,297 INFO L85 PathProgramCache]: Analyzing trace with hash 1909543894, now seen corresponding path program 1 times [2022-12-13 16:18:35,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:35,297 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396576282] [2022-12-13 16:18:35,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:35,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:35,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:35,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:35,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-12-13 16:18:35,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:35,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:35,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396576282] [2022-12-13 16:18:35,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1396576282] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:35,396 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:35,396 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 16:18:35,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270882824] [2022-12-13 16:18:35,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:35,397 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 16:18:35,397 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:35,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 16:18:35,398 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 16:18:35,398 INFO L87 Difference]: Start difference. First operand 160 states and 204 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 16:18:35,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:35,500 INFO L93 Difference]: Finished difference Result 322 states and 424 transitions. [2022-12-13 16:18:35,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 16:18:35,501 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 49 [2022-12-13 16:18:35,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:35,502 INFO L225 Difference]: With dead ends: 322 [2022-12-13 16:18:35,502 INFO L226 Difference]: Without dead ends: 170 [2022-12-13 16:18:35,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 16:18:35,504 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 74 mSDsluCounter, 229 mSDsCounter, 0 mSdLazyCounter, 109 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 329 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 109 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:35,505 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 329 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 109 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:35,506 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 170 states. [2022-12-13 16:18:35,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 170 to 162. [2022-12-13 16:18:35,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 16:18:35,524 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-12-13 16:18:35,524 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 49 [2022-12-13 16:18:35,524 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:35,525 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-12-13 16:18:35,525 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 16:18:35,525 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-12-13 16:18:35,526 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-13 16:18:35,526 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:35,526 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:35,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 16:18:35,526 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:35,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:35,527 INFO L85 PathProgramCache]: Analyzing trace with hash 104105560, now seen corresponding path program 1 times [2022-12-13 16:18:35,527 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:35,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [996668839] [2022-12-13 16:18:35,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:35,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:35,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:35,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:35,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2022-12-13 16:18:35,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:35,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:35,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [996668839] [2022-12-13 16:18:35,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [996668839] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:35,613 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:35,614 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 16:18:35,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1095286885] [2022-12-13 16:18:35,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:35,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 16:18:35,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:35,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 16:18:35,615 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 16:18:35,615 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 16:18:35,805 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:35,805 INFO L93 Difference]: Finished difference Result 451 states and 595 transitions. [2022-12-13 16:18:35,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 16:18:35,806 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 49 [2022-12-13 16:18:35,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:35,808 INFO L225 Difference]: With dead ends: 451 [2022-12-13 16:18:35,808 INFO L226 Difference]: Without dead ends: 297 [2022-12-13 16:18:35,808 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 16:18:35,809 INFO L413 NwaCegarLoop]: 148 mSDtfsCounter, 222 mSDsluCounter, 193 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 229 SdHoareTripleChecker+Valid, 341 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:35,809 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [229 Valid, 341 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:35,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 297 states. [2022-12-13 16:18:35,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 297 to 289. [2022-12-13 16:18:35,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 289 states, 216 states have (on average 1.2638888888888888) internal successors, (273), 228 states have internal predecessors, (273), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-12-13 16:18:35,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 289 states to 289 states and 371 transitions. [2022-12-13 16:18:35,828 INFO L78 Accepts]: Start accepts. Automaton has 289 states and 371 transitions. Word has length 49 [2022-12-13 16:18:35,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:35,829 INFO L495 AbstractCegarLoop]: Abstraction has 289 states and 371 transitions. [2022-12-13 16:18:35,829 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.4) internal successors, (42), 4 states have internal predecessors, (42), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 16:18:35,829 INFO L276 IsEmpty]: Start isEmpty. Operand 289 states and 371 transitions. [2022-12-13 16:18:35,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-13 16:18:35,830 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:35,830 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:35,830 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 16:18:35,830 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:35,830 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:35,831 INFO L85 PathProgramCache]: Analyzing trace with hash 528797415, now seen corresponding path program 1 times [2022-12-13 16:18:35,831 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:35,831 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887567705] [2022-12-13 16:18:35,831 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:35,831 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:35,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:35,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:35,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 16:18:35,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-12-13 16:18:35,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:35,911 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:35,911 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:35,911 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887567705] [2022-12-13 16:18:35,911 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [887567705] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:35,911 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:35,911 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 16:18:35,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534909804] [2022-12-13 16:18:35,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:35,912 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 16:18:35,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:35,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 16:18:35,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 16:18:35,912 INFO L87 Difference]: Start difference. First operand 289 states and 371 transitions. Second operand has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 16:18:36,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:36,107 INFO L93 Difference]: Finished difference Result 586 states and 765 transitions. [2022-12-13 16:18:36,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 16:18:36,108 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 51 [2022-12-13 16:18:36,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:36,109 INFO L225 Difference]: With dead ends: 586 [2022-12-13 16:18:36,109 INFO L226 Difference]: Without dead ends: 305 [2022-12-13 16:18:36,110 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-12-13 16:18:36,111 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 151 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 156 SdHoareTripleChecker+Valid, 381 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:36,111 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [156 Valid, 381 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 16:18:36,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2022-12-13 16:18:36,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 285. [2022-12-13 16:18:36,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 212 states have (on average 1.2311320754716981) internal successors, (261), 224 states have internal predecessors, (261), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-12-13 16:18:36,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 359 transitions. [2022-12-13 16:18:36,134 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 359 transitions. Word has length 51 [2022-12-13 16:18:36,135 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:36,135 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 359 transitions. [2022-12-13 16:18:36,135 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.0) internal successors, (42), 5 states have internal predecessors, (42), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 16:18:36,135 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 359 transitions. [2022-12-13 16:18:36,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-13 16:18:36,136 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:36,136 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:36,136 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 16:18:36,136 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:36,136 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:36,136 INFO L85 PathProgramCache]: Analyzing trace with hash 1943832958, now seen corresponding path program 1 times [2022-12-13 16:18:36,137 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:36,137 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [458539494] [2022-12-13 16:18:36,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:36,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:36,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 16:18:36,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 16:18:36,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:36,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-12-13 16:18:36,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:36,183 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:36,183 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [458539494] [2022-12-13 16:18:36,183 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [458539494] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:36,183 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 16:18:36,183 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 16:18:36,184 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1474603047] [2022-12-13 16:18:36,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:36,184 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 16:18:36,184 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:36,184 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 16:18:36,185 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 16:18:36,185 INFO L87 Difference]: Start difference. First operand 285 states and 359 transitions. Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 16:18:36,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:36,476 INFO L93 Difference]: Finished difference Result 587 states and 785 transitions. [2022-12-13 16:18:36,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 16:18:36,477 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 53 [2022-12-13 16:18:36,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:36,480 INFO L225 Difference]: With dead ends: 587 [2022-12-13 16:18:36,480 INFO L226 Difference]: Without dead ends: 585 [2022-12-13 16:18:36,481 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-13 16:18:36,481 INFO L413 NwaCegarLoop]: 72 mSDtfsCounter, 328 mSDsluCounter, 149 mSDsCounter, 0 mSdLazyCounter, 231 mSolverCounterSat, 140 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 371 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 140 IncrementalHoareTripleChecker+Valid, 231 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:36,481 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [332 Valid, 221 Invalid, 371 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [140 Valid, 231 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 16:18:36,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585 states. [2022-12-13 16:18:36,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585 to 521. [2022-12-13 16:18:36,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 521 states, 386 states have (on average 1.238341968911917) internal successors, (478), 413 states have internal predecessors, (478), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2022-12-13 16:18:36,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 521 states to 521 states and 704 transitions. [2022-12-13 16:18:36,514 INFO L78 Accepts]: Start accepts. Automaton has 521 states and 704 transitions. Word has length 53 [2022-12-13 16:18:36,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:36,515 INFO L495 AbstractCegarLoop]: Abstraction has 521 states and 704 transitions. [2022-12-13 16:18:36,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.8) internal successors, (44), 3 states have internal predecessors, (44), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 16:18:36,515 INFO L276 IsEmpty]: Start isEmpty. Operand 521 states and 704 transitions. [2022-12-13 16:18:36,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2022-12-13 16:18:36,516 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:36,517 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:36,517 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 16:18:36,517 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:36,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:36,517 INFO L85 PathProgramCache]: Analyzing trace with hash -1822040872, now seen corresponding path program 1 times [2022-12-13 16:18:36,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:36,517 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [135294588] [2022-12-13 16:18:36,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:36,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:36,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 16:18:36,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:36,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 16:18:36,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:36,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 16:18:36,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2022-12-13 16:18:36,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:36,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2022-12-13 16:18:36,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,642 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 20 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-13 16:18:36,642 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:36,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [135294588] [2022-12-13 16:18:36,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [135294588] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 16:18:36,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [680575833] [2022-12-13 16:18:36,642 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:36,642 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 16:18:36,642 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 16:18:36,643 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 16:18:36,644 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 16:18:36,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:36,721 INFO L263 TraceCheckSpWp]: Trace formula consists of 338 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-13 16:18:36,725 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 16:18:36,790 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 40 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:36,790 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 16:18:36,790 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [680575833] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:36,790 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 16:18:36,790 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-12-13 16:18:36,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197749693] [2022-12-13 16:18:36,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:36,791 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 16:18:36,791 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:36,791 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 16:18:36,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-13 16:18:36,791 INFO L87 Difference]: Start difference. First operand 521 states and 704 transitions. Second operand has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 16:18:36,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:36,849 INFO L93 Difference]: Finished difference Result 886 states and 1228 transitions. [2022-12-13 16:18:36,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 16:18:36,850 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 96 [2022-12-13 16:18:36,850 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:36,853 INFO L225 Difference]: With dead ends: 886 [2022-12-13 16:18:36,853 INFO L226 Difference]: Without dead ends: 426 [2022-12-13 16:18:36,855 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-13 16:18:36,856 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 51 mSDsluCounter, 69 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 219 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:36,856 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 219 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:18:36,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 426 states. [2022-12-13 16:18:36,894 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 426 to 426. [2022-12-13 16:18:36,895 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 315 states have (on average 1.2158730158730158) internal successors, (383), 338 states have internal predecessors, (383), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2022-12-13 16:18:36,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 531 transitions. [2022-12-13 16:18:36,898 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 531 transitions. Word has length 96 [2022-12-13 16:18:36,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:36,898 INFO L495 AbstractCegarLoop]: Abstraction has 426 states and 531 transitions. [2022-12-13 16:18:36,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 26.333333333333332) internal successors, (79), 3 states have internal predecessors, (79), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 16:18:36,898 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 531 transitions. [2022-12-13 16:18:36,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-12-13 16:18:36,900 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:36,900 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:36,906 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 16:18:37,101 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-13 16:18:37,101 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:37,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:37,102 INFO L85 PathProgramCache]: Analyzing trace with hash 1708523928, now seen corresponding path program 1 times [2022-12-13 16:18:37,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:37,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [554589200] [2022-12-13 16:18:37,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:37,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:37,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 16:18:37,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-12-13 16:18:37,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 16:18:37,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:37,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 16:18:37,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-12-13 16:18:37,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,279 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2022-12-13 16:18:37,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-12-13 16:18:37,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,286 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:37,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 96 [2022-12-13 16:18:37,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,288 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 16:18:37,288 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:37,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [554589200] [2022-12-13 16:18:37,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [554589200] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 16:18:37,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1754151277] [2022-12-13 16:18:37,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:37,289 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 16:18:37,289 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 16:18:37,289 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 16:18:37,290 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 16:18:37,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:37,366 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-13 16:18:37,369 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 16:18:37,474 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 34 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 16:18:37,475 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 16:18:37,647 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 16:18:37,648 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1754151277] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 16:18:37,648 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 16:18:37,648 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 7] total 18 [2022-12-13 16:18:37,648 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1840668989] [2022-12-13 16:18:37,648 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 16:18:37,648 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-13 16:18:37,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:37,649 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-13 16:18:37,649 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2022-12-13 16:18:37,649 INFO L87 Difference]: Start difference. First operand 426 states and 531 transitions. Second operand has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-12-13 16:18:40,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:40,450 INFO L93 Difference]: Finished difference Result 2067 states and 2796 transitions. [2022-12-13 16:18:40,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2022-12-13 16:18:40,451 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) Word has length 106 [2022-12-13 16:18:40,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:40,459 INFO L225 Difference]: With dead ends: 2067 [2022-12-13 16:18:40,459 INFO L226 Difference]: Without dead ends: 1649 [2022-12-13 16:18:40,465 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 249 SyntacticMatches, 3 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3648 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=1232, Invalid=9070, Unknown=0, NotChecked=0, Total=10302 [2022-12-13 16:18:40,466 INFO L413 NwaCegarLoop]: 273 mSDtfsCounter, 1208 mSDsluCounter, 1632 mSDsCounter, 0 mSdLazyCounter, 3278 mSolverCounterSat, 654 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1216 SdHoareTripleChecker+Valid, 1905 SdHoareTripleChecker+Invalid, 3932 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 654 IncrementalHoareTripleChecker+Valid, 3278 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:40,466 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1216 Valid, 1905 Invalid, 3932 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [654 Valid, 3278 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-12-13 16:18:40,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1649 states. [2022-12-13 16:18:40,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1649 to 1380. [2022-12-13 16:18:40,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1380 states, 1009 states have (on average 1.1714568880079286) internal successors, (1182), 1074 states have internal predecessors, (1182), 192 states have call successors, (192), 149 states have call predecessors, (192), 178 states have return successors, (311), 190 states have call predecessors, (311), 192 states have call successors, (311) [2022-12-13 16:18:40,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1380 states to 1380 states and 1685 transitions. [2022-12-13 16:18:40,556 INFO L78 Accepts]: Start accepts. Automaton has 1380 states and 1685 transitions. Word has length 106 [2022-12-13 16:18:40,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:40,556 INFO L495 AbstractCegarLoop]: Abstraction has 1380 states and 1685 transitions. [2022-12-13 16:18:40,557 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 9.166666666666666) internal successors, (165), 14 states have internal predecessors, (165), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-12-13 16:18:40,557 INFO L276 IsEmpty]: Start isEmpty. Operand 1380 states and 1685 transitions. [2022-12-13 16:18:40,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2022-12-13 16:18:40,558 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 16:18:40,558 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:40,563 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 16:18:40,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-13 16:18:40,759 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 16:18:40,760 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 16:18:40,760 INFO L85 PathProgramCache]: Analyzing trace with hash -2037149614, now seen corresponding path program 1 times [2022-12-13 16:18:40,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 16:18:40,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242160053] [2022-12-13 16:18:40,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:40,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 16:18:40,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 16:18:40,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-12-13 16:18:40,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-12-13 16:18:40,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 16:18:40,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:40,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 16:18:40,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2022-12-13 16:18:40,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2022-12-13 16:18:40,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,958 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-12-13 16:18:40,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 16:18:40,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,962 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2022-12-13 16:18:40,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:40,964 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 16:18:40,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 16:18:40,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242160053] [2022-12-13 16:18:40,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242160053] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 16:18:40,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1295472368] [2022-12-13 16:18:40,965 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 16:18:40,965 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 16:18:40,965 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 16:18:40,966 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 16:18:40,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-13 16:18:41,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 16:18:41,030 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 8 conjunts are in the unsatisfiable core [2022-12-13 16:18:41,033 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 16:18:41,129 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-12-13 16:18:41,129 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 16:18:41,129 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1295472368] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 16:18:41,129 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 16:18:41,130 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [14] total 18 [2022-12-13 16:18:41,130 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [937598711] [2022-12-13 16:18:41,130 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 16:18:41,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 16:18:41,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 16:18:41,131 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 16:18:41,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=41, Invalid=265, Unknown=0, NotChecked=0, Total=306 [2022-12-13 16:18:41,131 INFO L87 Difference]: Start difference. First operand 1380 states and 1685 transitions. Second operand has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-12-13 16:18:41,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 16:18:41,260 INFO L93 Difference]: Finished difference Result 2272 states and 2773 transitions. [2022-12-13 16:18:41,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 16:18:41,261 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 110 [2022-12-13 16:18:41,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 16:18:41,262 INFO L225 Difference]: With dead ends: 2272 [2022-12-13 16:18:41,262 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 16:18:41,267 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 143 GetRequests, 124 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 33 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=62, Invalid=358, Unknown=0, NotChecked=0, Total=420 [2022-12-13 16:18:41,267 INFO L413 NwaCegarLoop]: 183 mSDtfsCounter, 47 mSDsluCounter, 679 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 862 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 16:18:41,268 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 862 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 16:18:41,268 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 16:18:41,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 16:18:41,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 16:18:41,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 16:18:41,269 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2022-12-13 16:18:41,269 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 16:18:41,269 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 16:18:41,269 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.0) internal successors, (84), 6 states have internal predecessors, (84), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-12-13 16:18:41,269 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 16:18:41,270 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 16:18:41,272 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 16:18:41,277 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-13 16:18:41,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 16:18:41,474 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 16:18:47,652 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 624 631) no Hoare annotation was computed. [2022-12-13 16:18:47,652 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 624 631) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|)))) (and (or .cse0 .cse1 .cse2 (not (<= 1 ~waterLevel~0)) .cse3) (or .cse0 .cse1 .cse2 .cse3 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0))))) [2022-12-13 16:18:47,652 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 624 631) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 531 537) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 531 537) the Hoare annotation is: true [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point L897-1(lines 893 904) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 893 904) the Hoare annotation is: (let ((.cse2 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse3 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse4 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (not (= ~methAndRunningLastTime~0 0))) (.cse7 (<= 1 ~methaneLevelCritical~0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 1 ~pumpRunning~0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse1 .cse6 .cse2 .cse3 .cse4 .cse5) (or .cse7 .cse0 .cse1 .cse8 .cse5) (or .cse7 .cse1 .cse6 .cse8 (< ~waterLevel~0 2)))) [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 893 904) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 905 913) the Hoare annotation is: true [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 905 913) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 905 913) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 767 796) no Hoare annotation was computed. [2022-12-13 16:18:47,653 INFO L902 garLoopResultBuilder]: At program point L792(lines 767 796) the Hoare annotation is: true [2022-12-13 16:18:47,654 INFO L899 garLoopResultBuilder]: For program point L788(line 788) no Hoare annotation was computed. [2022-12-13 16:18:47,654 INFO L899 garLoopResultBuilder]: For program point L781(lines 781 785) no Hoare annotation was computed. [2022-12-13 16:18:47,654 INFO L902 garLoopResultBuilder]: At program point L781-1(lines 781 785) the Hoare annotation is: true [2022-12-13 16:18:47,654 INFO L899 garLoopResultBuilder]: For program point L778(line 778) no Hoare annotation was computed. [2022-12-13 16:18:47,654 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 767 796) the Hoare annotation is: true [2022-12-13 16:18:47,654 INFO L902 garLoopResultBuilder]: At program point L777-2(lines 777 791) the Hoare annotation is: true [2022-12-13 16:18:47,654 INFO L902 garLoopResultBuilder]: At program point L773(line 773) the Hoare annotation is: true [2022-12-13 16:18:47,654 INFO L899 garLoopResultBuilder]: For program point L773-1(line 773) no Hoare annotation was computed. [2022-12-13 16:18:47,655 INFO L895 garLoopResultBuilder]: At program point L605(line 605) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 (not (= |old(~waterLevel~0)| 0)) (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (= ~waterLevel~0 0))) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse6))) [2022-12-13 16:18:47,655 INFO L895 garLoopResultBuilder]: At program point L601(line 601) the Hoare annotation is: (let ((.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse10 (= ~waterLevel~0 0)) (.cse11 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse7 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse8 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse6) (or .cse1 .cse2 .cse7 .cse8 .cse9 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse10)) (or .cse1 .cse2 .cse6 (and .cse3 .cse4 .cse5) .cse11) (or .cse0 .cse1 .cse2 .cse6 .cse9 .cse10) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse8 .cse11) (or .cse3 .cse1 .cse2 .cse7 .cse8) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse8))) [2022-12-13 16:18:47,655 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 507 530) no Hoare annotation was computed. [2022-12-13 16:18:47,656 INFO L895 garLoopResultBuilder]: At program point L742(line 742) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse4 .cse11 .cse2)) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse11)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse11)) (.cse8 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse2 .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7 .cse10 .cse3 (and .cse4 .cse11)) (or .cse1 .cse7 .cse12 .cse8 .cse13) (or .cse6 .cse1 .cse7 .cse10 .cse3 .cse9 (and .cse5 (= ~waterLevel~0 0))) (or .cse1 .cse7 (<= 1 ~waterLevel~0) .cse3 .cse13) (or .cse0 .cse1 .cse7 .cse12 .cse8)))) [2022-12-13 16:18:47,656 INFO L899 garLoopResultBuilder]: For program point L742-1(line 742) no Hoare annotation was computed. [2022-12-13 16:18:47,656 INFO L895 garLoopResultBuilder]: At program point L610(line 610) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse4 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (or .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4))) [2022-12-13 16:18:47,656 INFO L895 garLoopResultBuilder]: At program point L610-1(lines 591 615) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse11 (= 1 ~systemActive~0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse6 (and .cse4 .cse11 .cse2)) (.cse10 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse13 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not .cse11)) (.cse7 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse11)) (.cse8 (not (<= 1 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse2 .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse8 .cse9) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse1 .cse7 .cse10 .cse3 (and .cse4 .cse11)) (or .cse1 .cse7 .cse12 .cse8 .cse13) (or .cse6 .cse1 .cse7 .cse10 .cse3 .cse9 (and .cse5 (= ~waterLevel~0 0))) (or .cse1 .cse7 (<= 1 ~waterLevel~0) .cse3 .cse13) (or .cse0 .cse1 .cse7 .cse12 .cse8)))) [2022-12-13 16:18:47,656 INFO L899 garLoopResultBuilder]: For program point L511-1(lines 510 529) no Hoare annotation was computed. [2022-12-13 16:18:47,656 INFO L899 garLoopResultBuilder]: For program point L599(lines 599 607) no Hoare annotation was computed. [2022-12-13 16:18:47,656 INFO L899 garLoopResultBuilder]: For program point L54(line 54) no Hoare annotation was computed. [2022-12-13 16:18:47,656 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 612) no Hoare annotation was computed. [2022-12-13 16:18:47,657 INFO L899 garLoopResultBuilder]: For program point L748(lines 748 758) no Hoare annotation was computed. [2022-12-13 16:18:47,657 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 50 57) the Hoare annotation is: (let ((.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse4) (or .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4))) [2022-12-13 16:18:47,657 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 507 530) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse3) (or .cse4 .cse0 .cse1 .cse5 .cse2) (or .cse0 .cse1 .cse5 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or (not (= |old(~pumpRunning~0)| 0)) .cse4 .cse0 .cse3 (and (= ~pumpRunning~0 0) .cse6 .cse7))))) [2022-12-13 16:18:47,657 INFO L899 garLoopResultBuilder]: For program point L744(lines 744 761) no Hoare annotation was computed. [2022-12-13 16:18:47,658 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 736 764) the Hoare annotation is: (let ((.cse18 (= ~pumpRunning~0 0)) (.cse10 (= ~methAndRunningLastTime~0 0)) (.cse12 (= 1 ~systemActive~0))) (let ((.cse3 (and .cse18 .cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~6#1|) .cse12)) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse15 (not (= |old(~pumpRunning~0)| 0))) (.cse16 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (<= 1 ~pumpRunning~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse14 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse0 (not .cse12)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse17 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse13 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~9#1| 0)) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5 .cse6 .cse7 .cse8) (or (and .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) .cse15 .cse16 .cse0 (and .cse17 .cse18 .cse10 .cse12 .cse13 .cse14) .cse5 .cse6) (or .cse16 .cse0 .cse1 .cse2 .cse3) (or .cse16 .cse0 .cse1 .cse2 .cse7 .cse8) (or .cse15 .cse16 .cse0 .cse2 (and .cse17 .cse18 .cse10 .cse12 .cse14) (and .cse9 .cse11 .cse12 .cse14)) (or .cse0 .cse1 (<= 1 ~waterLevel~0) .cse6 .cse4) (or (and .cse18 .cse10 .cse12 .cse13) .cse0 .cse1 .cse5 (and .cse17 .cse10 .cse13) .cse6)))) [2022-12-13 16:18:47,658 INFO L895 garLoopResultBuilder]: At program point L637(line 637) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse9 .cse1 .cse2 .cse3 .cse7 .cse8) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or .cse9 .cse1 .cse2 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse9 .cse1 .cse6))) [2022-12-13 16:18:47,658 INFO L899 garLoopResultBuilder]: For program point L637-1(line 637) no Hoare annotation was computed. [2022-12-13 16:18:47,658 INFO L899 garLoopResultBuilder]: For program point L749(lines 749 755) no Hoare annotation was computed. [2022-12-13 16:18:47,658 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 507 530) no Hoare annotation was computed. [2022-12-13 16:18:47,658 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 632 642) the Hoare annotation is: (let ((.cse4 (not (= |old(~waterLevel~0)| 0))) (.cse5 (= ~waterLevel~0 0)) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (not (<= 2 |old(~waterLevel~0)|))) (.cse9 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse5)) (or .cse6 .cse0 .cse1 .cse7 .cse4 .cse5) (or .cse0 .cse1 (<= 1 ~waterLevel~0) .cse3 .cse8) (or .cse6 .cse0 .cse1 .cse7 (and .cse9 (= ~methAndRunningLastTime~0 0) .cse10)) (or .cse0 .cse1 .cse7 (and .cse9 .cse10) .cse8) (or .cse9 .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse6 .cse0 .cse3))) [2022-12-13 16:18:47,658 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 877) no Hoare annotation was computed. [2022-12-13 16:18:47,659 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 643 651) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse8 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse6 (<= 1 |timeShift_processEnvironment_~tmp~6#1|)) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (not .cse7)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 .cse5 .cse6 .cse7 (<= 1 ~waterLevel~0)) (not (<= 2 |old(~waterLevel~0)|))) (let ((.cse10 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse8 .cse9 .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse10) .cse2 (and .cse3 .cse5 .cse10 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)))) (or .cse8 .cse9 .cse0 .cse11 .cse12) (or .cse9 .cse0 .cse1 .cse2 (not (= |old(~waterLevel~0)| 0)) (= ~waterLevel~0 0)) (or (and .cse3 .cse4 .cse5 .cse6 .cse7) .cse9 .cse0 .cse1 .cse2) (or .cse0 .cse1 .cse11 .cse12)))) [2022-12-13 16:18:47,659 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 54) no Hoare annotation was computed. [2022-12-13 16:18:47,659 INFO L895 garLoopResultBuilder]: At program point L873-2(lines 869 880) the Hoare annotation is: (let ((.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse4 (not (<= 2 |old(~waterLevel~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse2 (not (<= 1 |old(~pumpRunning~0)|))) (.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse9 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse6 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or .cse1 .cse2 .cse5 .cse6 .cse7 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse9 .cse1 .cse2 .cse3 .cse7 .cse8) (or .cse1 .cse2 (<= 1 ~waterLevel~0) .cse6 .cse4) (or .cse9 .cse1 .cse2 (and .cse0 (= ~methAndRunningLastTime~0 0)) .cse3) (or .cse0 .cse1 .cse2 .cse5 .cse6) (or (not (= |old(~pumpRunning~0)| 0)) .cse9 .cse1 .cse6))) [2022-12-13 16:18:47,659 INFO L899 garLoopResultBuilder]: For program point L518-1(lines 518 524) no Hoare annotation was computed. [2022-12-13 16:18:47,659 INFO L899 garLoopResultBuilder]: For program point L93(lines 93 99) no Hoare annotation was computed. [2022-12-13 16:18:47,659 INFO L899 garLoopResultBuilder]: For program point L93-1(lines 93 99) no Hoare annotation was computed. [2022-12-13 16:18:47,659 INFO L902 garLoopResultBuilder]: At program point L122(lines 63 126) the Hoare annotation is: true [2022-12-13 16:18:47,659 INFO L895 garLoopResultBuilder]: At program point L85(line 85) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-12-13 16:18:47,660 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 828 838) the Hoare annotation is: true [2022-12-13 16:18:47,660 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 981 987) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-12-13 16:18:47,660 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 842 864) the Hoare annotation is: true [2022-12-13 16:18:47,660 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 16:18:47,660 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 16:18:47,660 INFO L895 garLoopResultBuilder]: At program point L119(lines 72 120) the Hoare annotation is: false [2022-12-13 16:18:47,660 INFO L899 garLoopResultBuilder]: For program point L74(lines 73 118) no Hoare annotation was computed. [2022-12-13 16:18:47,660 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 821 827) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-12-13 16:18:47,660 INFO L899 garLoopResultBuilder]: For program point L103(lines 103 114) no Hoare annotation was computed. [2022-12-13 16:18:47,660 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L895 garLoopResultBuilder]: At program point L95(line 95) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (not (< ~waterLevel~0 2)) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-12-13 16:18:47,661 INFO L895 garLoopResultBuilder]: At program point L116(lines 73 118) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) (<= 2 ~waterLevel~0) .cse1 .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse0 .cse5 .cse1 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6))) [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point L83(lines 83 89) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point L83-1(lines 83 89) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point L75(lines 75 79) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 988 994) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-12-13 16:18:47,661 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 728 735) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point L852(lines 852 859) no Hoare annotation was computed. [2022-12-13 16:18:47,661 INFO L899 garLoopResultBuilder]: For program point L852-2(lines 852 859) no Hoare annotation was computed. [2022-12-13 16:18:47,662 INFO L899 garLoopResultBuilder]: For program point L109(lines 109 113) no Hoare annotation was computed. [2022-12-13 16:18:47,662 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 995 1003) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= 1 ~systemActive~0) (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1)) [2022-12-13 16:18:47,662 INFO L895 garLoopResultBuilder]: At program point L109-2(lines 103 114) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_main_~tmp~10#1| ~systemActive~0)) (.cse3 (= 1 ~systemActive~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res#1| ~systemActive~0)) (.cse5 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 (not (< ~waterLevel~0 2)) .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse4 (<= ~methaneLevelCritical~0 0) .cse5 .cse6) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-12-13 16:18:47,662 INFO L899 garLoopResultBuilder]: For program point L543(lines 543 560) no Hoare annotation was computed. [2022-12-13 16:18:47,662 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 616 623) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,662 INFO L899 garLoopResultBuilder]: For program point L950(lines 950 956) no Hoare annotation was computed. [2022-12-13 16:18:47,662 INFO L895 garLoopResultBuilder]: At program point L558(line 558) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,662 INFO L899 garLoopResultBuilder]: For program point L558-1(lines 539 563) no Hoare annotation was computed. [2022-12-13 16:18:47,662 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 539 563) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,663 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 946 959) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse2))) [2022-12-13 16:18:47,663 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 688 706) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~1#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2 (and .cse1 (<= 2 ~waterLevel~0)) (not (= ~methAndRunningLastTime~0 0)))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse2))) [2022-12-13 16:18:47,663 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 539 563) no Hoare annotation was computed. [2022-12-13 16:18:47,663 INFO L899 garLoopResultBuilder]: For program point L697(lines 697 701) no Hoare annotation was computed. [2022-12-13 16:18:47,663 INFO L899 garLoopResultBuilder]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2022-12-13 16:18:47,663 INFO L895 garLoopResultBuilder]: At program point L553(line 553) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~4#1| 0)) (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,663 INFO L899 garLoopResultBuilder]: For program point L547(lines 547 555) no Hoare annotation was computed. [2022-12-13 16:18:47,663 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 881 892) no Hoare annotation was computed. [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 881 892) the Hoare annotation is: (let ((.cse1 (not (<= 1 ~pumpRunning~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 (not (<= 1 ~methaneLevelCritical~0)) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) .cse3 .cse2 .cse4) (or (not (= ~pumpRunning~0 0)) .cse0 .cse3 .cse2 .cse4))) [2022-12-13 16:18:47,664 INFO L899 garLoopResultBuilder]: For program point L885-1(lines 881 892) no Hoare annotation was computed. [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 960 968) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 565 589) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point L579(line 579) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point L575(line 575) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 16:18:47,664 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 707 725) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~8#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 16:18:47,664 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 565 589) no Hoare annotation was computed. [2022-12-13 16:18:47,665 INFO L899 garLoopResultBuilder]: For program point L573(lines 573 581) no Hoare annotation was computed. [2022-12-13 16:18:47,665 INFO L899 garLoopResultBuilder]: For program point L569(lines 569 586) no Hoare annotation was computed. [2022-12-13 16:18:47,665 INFO L899 garLoopResultBuilder]: For program point L716(lines 716 720) no Hoare annotation was computed. [2022-12-13 16:18:47,665 INFO L899 garLoopResultBuilder]: For program point L716-2(lines 716 720) no Hoare annotation was computed. [2022-12-13 16:18:47,665 INFO L895 garLoopResultBuilder]: At program point L584(line 584) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or .cse0 (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse1))) [2022-12-13 16:18:47,665 INFO L899 garLoopResultBuilder]: For program point L584-1(lines 565 589) no Hoare annotation was computed. [2022-12-13 16:18:47,668 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 16:18:47,669 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 16:18:47,690 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 04:18:47 BoogieIcfgContainer [2022-12-13 16:18:47,690 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 16:18:47,690 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 16:18:47,690 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 16:18:47,691 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 16:18:47,691 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 04:18:34" (3/4) ... [2022-12-13 16:18:47,693 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 16:18:47,698 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 16:18:47,699 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 16:18:47,699 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 16:18:47,699 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 16:18:47,705 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 25 nodes and edges [2022-12-13 16:18:47,705 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 16:18:47,705 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 16:18:47,706 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 16:18:47,706 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 16:18:47,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-12-13 16:18:47,722 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-12-13 16:18:47,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 [2022-12-13 16:18:47,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) [2022-12-13 16:18:47,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,723 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) [2022-12-13 16:18:47,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,724 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) && (tmp == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) [2022-12-13 16:18:47,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,725 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) [2022-12-13 16:18:47,741 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 16:18:47,741 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 16:18:47,741 INFO L158 Benchmark]: Toolchain (without parser) took 14368.97ms. Allocated memory was 136.3MB in the beginning and 163.6MB in the end (delta: 27.3MB). Free memory was 95.3MB in the beginning and 69.5MB in the end (delta: 25.9MB). Peak memory consumption was 54.6MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,742 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 136.3MB. Free memory was 107.3MB in the beginning and 107.2MB in the end (delta: 140.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 16:18:47,742 INFO L158 Benchmark]: CACSL2BoogieTranslator took 268.47ms. Allocated memory is still 136.3MB. Free memory was 94.9MB in the beginning and 76.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,742 INFO L158 Benchmark]: Boogie Procedure Inliner took 32.42ms. Allocated memory is still 136.3MB. Free memory was 76.0MB in the beginning and 73.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,742 INFO L158 Benchmark]: Boogie Preprocessor took 19.52ms. Allocated memory is still 136.3MB. Free memory was 73.9MB in the beginning and 72.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,743 INFO L158 Benchmark]: RCFGBuilder took 347.96ms. Allocated memory is still 136.3MB. Free memory was 72.3MB in the beginning and 55.0MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,743 INFO L158 Benchmark]: TraceAbstraction took 13645.25ms. Allocated memory was 136.3MB in the beginning and 163.6MB in the end (delta: 27.3MB). Free memory was 54.6MB in the beginning and 74.7MB in the end (delta: -20.1MB). Peak memory consumption was 50.4MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,743 INFO L158 Benchmark]: Witness Printer took 50.70ms. Allocated memory is still 163.6MB. Free memory was 74.7MB in the beginning and 69.5MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 16:18:47,745 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 136.3MB. Free memory was 107.3MB in the beginning and 107.2MB in the end (delta: 140.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 268.47ms. Allocated memory is still 136.3MB. Free memory was 94.9MB in the beginning and 76.0MB in the end (delta: 18.9MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 32.42ms. Allocated memory is still 136.3MB. Free memory was 76.0MB in the beginning and 73.9MB in the end (delta: 2.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 19.52ms. Allocated memory is still 136.3MB. Free memory was 73.9MB in the beginning and 72.3MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 347.96ms. Allocated memory is still 136.3MB. Free memory was 72.3MB in the beginning and 55.0MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13645.25ms. Allocated memory was 136.3MB in the beginning and 163.6MB in the end (delta: 27.3MB). Free memory was 54.6MB in the beginning and 74.7MB in the end (delta: -20.1MB). Peak memory consumption was 50.4MB. Max. memory is 16.1GB. * Witness Printer took 50.70ms. Allocated memory is still 163.6MB. Free memory was 74.7MB in the beginning and 69.5MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 54]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 102 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.6s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.3s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 2572 SdHoareTripleChecker+Valid, 2.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2531 mSDsluCounter, 5458 SdHoareTripleChecker+Invalid, 2.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3898 mSDsCounter, 1017 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4342 IncrementalHoareTripleChecker+Invalid, 5359 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1017 mSolverCounterUnsat, 1560 mSDtfsCounter, 4342 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 734 GetRequests, 559 SyntacticMatches, 4 SemanticMatches, 171 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3706 ImplicationChecksByTransitivity, 1.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1380occurred in iteration=11, InterpolantAutomatonStates: 152, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 380 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 47 LocationsWithAnnotation, 2015 PreInvPairs, 2346 NumberOfFragments, 3094 HoareAnnotationTreeSize, 2015 FomulaSimplifications, 1329 FormulaSimplificationTreeSizeReduction, 0.4s HoareSimplificationTime, 47 FomulaSimplificationsInter, 29972 FormulaSimplificationTreeSizeReductionInter, 5.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 999 NumberOfCodeBlocks, 999 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1089 ConstructedInterpolants, 0 QuantifiedInterpolants, 2147 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1071 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 248/268 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 821]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 72]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 707]: Loop Invariant Derived loop invariant: ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) && (tmp == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 728]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 50]: Loop Invariant Derived loop invariant: (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 767]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 869]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 616]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 995]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 632]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 988]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1 - InvariantResult [Line: 591]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && (((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0))) && (((((pumpRunning == \old(pumpRunning) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 1 == systemActive))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && 1 == systemActive) && \old(waterLevel) == waterLevel) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(1 <= methaneLevelCritical)) - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive)) || !(2 <= \old(waterLevel))) && (((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) && \old(waterLevel) == waterLevel)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && 1 == systemActive))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= methaneLevelCritical)) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && 1 == systemActive) && \old(waterLevel) == waterLevel)) || (((1 <= pumpRunning && 2 <= waterLevel) && 1 == systemActive) && \old(waterLevel) == waterLevel))) && ((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || !(2 <= \old(waterLevel)))) && ((((((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 == systemActive) && tmp == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 842]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 643]: Loop Invariant Derived loop invariant: ((((((((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) && 1 <= waterLevel)) || !(2 <= \old(waterLevel))) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime))) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || waterLevel == 0)) && ((((((((pumpRunning == 0 && 1 <= \result) && \result == 0) && 1 <= tmp) && 1 == systemActive) || !(\old(methAndRunningLastTime) == 0)) || !(1 == systemActive)) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical))) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 73]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && 2 <= waterLevel) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && splverifierCounter == 0) && 0 <= methaneLevelCritical)) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && tmp == systemActive) && 1 == systemActive) && \result == systemActive) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) - InvariantResult [Line: 946]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(1 == systemActive)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || !(methAndRunningLastTime == 0)) && (((!(1 == systemActive) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 828]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-13 16:18:47,767 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_853e41f8-9f54-4dd3-9df9-ef26ed51fcc7/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE