./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 21:03:25,808 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 21:03:25,810 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 21:03:25,830 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 21:03:25,831 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 21:03:25,832 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 21:03:25,833 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 21:03:25,835 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 21:03:25,836 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 21:03:25,837 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 21:03:25,838 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 21:03:25,839 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 21:03:25,840 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 21:03:25,841 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 21:03:25,842 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 21:03:25,843 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 21:03:25,844 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 21:03:25,845 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 21:03:25,847 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 21:03:25,849 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 21:03:25,850 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 21:03:25,852 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 21:03:25,853 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 21:03:25,854 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 21:03:25,857 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 21:03:25,858 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 21:03:25,858 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 21:03:25,859 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 21:03:25,859 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 21:03:25,860 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 21:03:25,861 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 21:03:25,861 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 21:03:25,862 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 21:03:25,863 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 21:03:25,863 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 21:03:25,864 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 21:03:25,864 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 21:03:25,864 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 21:03:25,865 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 21:03:25,865 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 21:03:25,866 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 21:03:25,866 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/config/svcomp-Reach-32bit-Automizer_Default.epf [2022-12-13 21:03:25,888 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 21:03:25,888 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 21:03:25,888 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 21:03:25,889 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 21:03:25,889 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-13 21:03:25,889 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-13 21:03:25,890 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 21:03:25,890 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 21:03:25,890 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 21:03:25,890 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 21:03:25,890 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 21:03:25,890 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 21:03:25,891 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 21:03:25,891 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 21:03:25,891 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-12-13 21:03:25,891 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-13 21:03:25,891 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-12-13 21:03:25,892 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-13 21:03:25,892 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 21:03:25,893 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2022-12-13 21:03:25,893 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-12-13 21:03:25,894 INFO L138 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2022-12-13 21:03:25,894 INFO L138 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> af2afe79961dd67a52df68c35bd4350c760cf29ba0bba6313951f2194d2dea76 [2022-12-13 21:03:26,077 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 21:03:26,094 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 21:03:26,096 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 21:03:26,097 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 21:03:26,097 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 21:03:26,098 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-12-13 21:03:28,617 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 21:03:28,810 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 21:03:28,811 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c [2022-12-13 21:03:28,821 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/data/2dff032b8/1e1f675bb16e4c649f8995af4552860e/FLAG92d86db3c [2022-12-13 21:03:29,198 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/data/2dff032b8/1e1f675bb16e4c649f8995af4552860e [2022-12-13 21:03:29,204 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 21:03:29,207 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 21:03:29,210 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 21:03:29,210 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 21:03:29,215 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 21:03:29,216 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,217 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e5eff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29, skipping insertion in model container [2022-12-13 21:03:29,217 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,225 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 21:03:29,260 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 21:03:29,467 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-12-13 21:03:29,470 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:03:29,480 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 21:03:29,541 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/sv-benchmarks/c/product-lines/minepump_spec2_product54.cil.c[19335,19348] [2022-12-13 21:03:29,542 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 21:03:29,557 INFO L208 MainTranslator]: Completed translation [2022-12-13 21:03:29,557 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29 WrapperNode [2022-12-13 21:03:29,557 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 21:03:29,558 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 21:03:29,558 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 21:03:29,558 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 21:03:29,563 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,574 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,598 INFO L138 Inliner]: procedures = 58, calls = 104, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 224 [2022-12-13 21:03:29,598 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 21:03:29,599 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 21:03:29,599 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 21:03:29,599 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 21:03:29,606 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,606 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,608 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,608 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,611 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,614 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,615 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,616 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,618 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 21:03:29,618 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 21:03:29,618 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 21:03:29,618 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 21:03:29,619 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (1/1) ... [2022-12-13 21:03:29,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-13 21:03:29,633 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:03:29,643 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-13 21:03:29,645 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-13 21:03:29,673 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 21:03:29,673 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2022-12-13 21:03:29,673 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2022-12-13 21:03:29,673 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2022-12-13 21:03:29,673 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2022-12-13 21:03:29,673 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2022-12-13 21:03:29,673 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2022-12-13 21:03:29,673 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2022-12-13 21:03:29,674 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2022-12-13 21:03:29,674 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 21:03:29,675 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 21:03:29,741 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 21:03:29,743 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 21:03:29,971 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 21:03:29,977 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 21:03:29,977 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-13 21:03:29,978 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:03:29 BoogieIcfgContainer [2022-12-13 21:03:29,979 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 21:03:29,980 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-13 21:03:29,980 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-13 21:03:29,983 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-13 21:03:29,983 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.12 09:03:29" (1/3) ... [2022-12-13 21:03:29,984 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6302d826 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 09:03:29, skipping insertion in model container [2022-12-13 21:03:29,984 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 09:03:29" (2/3) ... [2022-12-13 21:03:29,984 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6302d826 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.12 09:03:29, skipping insertion in model container [2022-12-13 21:03:29,984 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:03:29" (3/3) ... [2022-12-13 21:03:29,985 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product54.cil.c [2022-12-13 21:03:30,006 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-13 21:03:30,006 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-12-13 21:03:30,044 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-13 21:03:30,048 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@14bf97a3, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2022-12-13 21:03:30,049 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-12-13 21:03:30,052 INFO L276 IsEmpty]: Start isEmpty. Operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2022-12-13 21:03:30,058 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-13 21:03:30,059 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:30,059 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:30,060 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:30,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:30,064 INFO L85 PathProgramCache]: Analyzing trace with hash 244440816, now seen corresponding path program 1 times [2022-12-13 21:03:30,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:30,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1326367542] [2022-12-13 21:03:30,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:30,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:30,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2022-12-13 21:03:30,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:30,199 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:30,199 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1326367542] [2022-12-13 21:03:30,200 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1326367542] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:30,200 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:30,200 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 21:03:30,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177306136] [2022-12-13 21:03:30,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:30,205 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2022-12-13 21:03:30,205 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:30,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2022-12-13 21:03:30,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 21:03:30,229 INFO L87 Difference]: Start difference. First operand has 103 states, 76 states have (on average 1.381578947368421) internal successors, (105), 86 states have internal predecessors, (105), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) Second operand has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:30,265 INFO L93 Difference]: Finished difference Result 197 states and 268 transitions. [2022-12-13 21:03:30,266 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-12-13 21:03:30,267 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 25 [2022-12-13 21:03:30,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:30,275 INFO L225 Difference]: With dead ends: 197 [2022-12-13 21:03:30,275 INFO L226 Difference]: Without dead ends: 94 [2022-12-13 21:03:30,278 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2022-12-13 21:03:30,281 INFO L413 NwaCegarLoop]: 131 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 131 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:30,282 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:03:30,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-12-13 21:03:30,316 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2022-12-13 21:03:30,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 69 states have (on average 1.318840579710145) internal successors, (91), 78 states have internal predecessors, (91), 16 states have call successors, (16), 9 states have call predecessors, (16), 8 states have return successors, (15), 10 states have call predecessors, (15), 15 states have call successors, (15) [2022-12-13 21:03:30,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2022-12-13 21:03:30,322 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 25 [2022-12-13 21:03:30,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:30,322 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2022-12-13 21:03:30,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 10.5) internal successors, (21), 2 states have internal predecessors, (21), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,323 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2022-12-13 21:03:30,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-13 21:03:30,325 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:30,325 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:30,325 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-13 21:03:30,325 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:30,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:30,326 INFO L85 PathProgramCache]: Analyzing trace with hash -1307515066, now seen corresponding path program 1 times [2022-12-13 21:03:30,326 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:30,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [306591851] [2022-12-13 21:03:30,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:30,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:30,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-12-13 21:03:30,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:30,430 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:30,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [306591851] [2022-12-13 21:03:30,431 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [306591851] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:30,431 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:30,431 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 21:03:30,431 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618334519] [2022-12-13 21:03:30,431 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:30,432 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 21:03:30,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:30,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:03:30,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:03:30,434 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:30,452 INFO L93 Difference]: Finished difference Result 152 states and 198 transitions. [2022-12-13 21:03:30,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:03:30,453 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2022-12-13 21:03:30,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:30,454 INFO L225 Difference]: With dead ends: 152 [2022-12-13 21:03:30,454 INFO L226 Difference]: Without dead ends: 85 [2022-12-13 21:03:30,455 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 21:03:30,456 INFO L413 NwaCegarLoop]: 109 mSDtfsCounter, 13 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 201 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:30,457 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 201 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:03:30,457 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-12-13 21:03:30,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-12-13 21:03:30,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3333333333333333) internal successors, (84), 72 states have internal predecessors, (84), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 21:03:30,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 110 transitions. [2022-12-13 21:03:30,467 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 110 transitions. Word has length 26 [2022-12-13 21:03:30,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:30,467 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 110 transitions. [2022-12-13 21:03:30,467 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.333333333333333) internal successors, (22), 3 states have internal predecessors, (22), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,467 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 110 transitions. [2022-12-13 21:03:30,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-13 21:03:30,469 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:30,469 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:30,469 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-13 21:03:30,469 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:30,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:30,470 INFO L85 PathProgramCache]: Analyzing trace with hash 1771610293, now seen corresponding path program 1 times [2022-12-13 21:03:30,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:30,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949265762] [2022-12-13 21:03:30,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:30,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:30,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:30,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:30,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:30,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949265762] [2022-12-13 21:03:30,571 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [949265762] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:30,571 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:30,571 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:03:30,571 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1708912267] [2022-12-13 21:03:30,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:30,572 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 21:03:30,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:30,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:03:30,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:03:30,572 INFO L87 Difference]: Start difference. First operand 85 states and 110 transitions. Second operand has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:30,630 INFO L93 Difference]: Finished difference Result 162 states and 213 transitions. [2022-12-13 21:03:30,630 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:03:30,631 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-12-13 21:03:30,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:30,632 INFO L225 Difference]: With dead ends: 162 [2022-12-13 21:03:30,632 INFO L226 Difference]: Without dead ends: 85 [2022-12-13 21:03:30,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:03:30,634 INFO L413 NwaCegarLoop]: 103 mSDtfsCounter, 137 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 275 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:30,635 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 275 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:03:30,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2022-12-13 21:03:30,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 85. [2022-12-13 21:03:30,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 63 states have (on average 1.3174603174603174) internal successors, (83), 72 states have internal predecessors, (83), 13 states have call successors, (13), 8 states have call predecessors, (13), 8 states have return successors, (13), 8 states have call predecessors, (13), 13 states have call successors, (13) [2022-12-13 21:03:30,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 109 transitions. [2022-12-13 21:03:30,646 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 109 transitions. Word has length 31 [2022-12-13 21:03:30,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:30,647 INFO L495 AbstractCegarLoop]: Abstraction has 85 states and 109 transitions. [2022-12-13 21:03:30,647 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.6) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-12-13 21:03:30,647 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 109 transitions. [2022-12-13 21:03:30,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-13 21:03:30,648 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:30,649 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:30,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-13 21:03:30,649 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:30,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:30,650 INFO L85 PathProgramCache]: Analyzing trace with hash 1359704802, now seen corresponding path program 1 times [2022-12-13 21:03:30,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:30,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1562584394] [2022-12-13 21:03:30,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:30,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:30,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:30,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-12-13 21:03:30,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-12-13 21:03:30,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,707 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-13 21:03:30,707 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:30,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1562584394] [2022-12-13 21:03:30,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1562584394] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:30,708 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:30,708 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 21:03:30,708 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551426319] [2022-12-13 21:03:30,708 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:30,709 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-13 21:03:30,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:30,709 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 21:03:30,709 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 21:03:30,710 INFO L87 Difference]: Start difference. First operand 85 states and 109 transitions. Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 21:03:30,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:30,835 INFO L93 Difference]: Finished difference Result 242 states and 316 transitions. [2022-12-13 21:03:30,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:03:30,835 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 44 [2022-12-13 21:03:30,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:30,837 INFO L225 Difference]: With dead ends: 242 [2022-12-13 21:03:30,837 INFO L226 Difference]: Without dead ends: 165 [2022-12-13 21:03:30,838 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:03:30,839 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 167 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 89 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 173 SdHoareTripleChecker+Valid, 223 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 89 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:30,840 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [173 Valid, 223 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 89 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:03:30,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2022-12-13 21:03:30,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 159. [2022-12-13 21:03:30,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 159 states, 119 states have (on average 1.2941176470588236) internal successors, (154), 127 states have internal predecessors, (154), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 21:03:30,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 159 states to 159 states and 203 transitions. [2022-12-13 21:03:30,862 INFO L78 Accepts]: Start accepts. Automaton has 159 states and 203 transitions. Word has length 44 [2022-12-13 21:03:30,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:30,862 INFO L495 AbstractCegarLoop]: Abstraction has 159 states and 203 transitions. [2022-12-13 21:03:30,862 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 8.75) internal successors, (35), 3 states have internal predecessors, (35), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2022-12-13 21:03:30,863 INFO L276 IsEmpty]: Start isEmpty. Operand 159 states and 203 transitions. [2022-12-13 21:03:30,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-13 21:03:30,863 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:30,864 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:30,864 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-13 21:03:30,864 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:30,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:30,864 INFO L85 PathProgramCache]: Analyzing trace with hash 179521665, now seen corresponding path program 1 times [2022-12-13 21:03:30,864 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:30,864 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620649134] [2022-12-13 21:03:30,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:30,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:30,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:30,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,954 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:30,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-12-13 21:03:30,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:30,984 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:30,984 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:30,985 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620649134] [2022-12-13 21:03:30,985 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620649134] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:30,985 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:30,985 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:03:30,985 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1405198566] [2022-12-13 21:03:30,985 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:30,986 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:03:30,986 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:30,986 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:03:30,987 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:03:30,987 INFO L87 Difference]: Start difference. First operand 159 states and 203 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 21:03:31,112 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:31,113 INFO L93 Difference]: Finished difference Result 318 states and 414 transitions. [2022-12-13 21:03:31,113 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:03:31,113 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-12-13 21:03:31,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:31,115 INFO L225 Difference]: With dead ends: 318 [2022-12-13 21:03:31,115 INFO L226 Difference]: Without dead ends: 167 [2022-12-13 21:03:31,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-12-13 21:03:31,117 INFO L413 NwaCegarLoop]: 101 mSDtfsCounter, 70 mSDsluCounter, 328 mSDsCounter, 0 mSdLazyCounter, 146 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 73 SdHoareTripleChecker+Valid, 429 SdHoareTripleChecker+Invalid, 169 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 146 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:31,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [73 Valid, 429 Invalid, 169 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 146 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:03:31,118 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167 states. [2022-12-13 21:03:31,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167 to 162. [2022-12-13 21:03:31,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 162 states, 122 states have (on average 1.2868852459016393) internal successors, (157), 130 states have internal predecessors, (157), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 21:03:31,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 162 states to 162 states and 206 transitions. [2022-12-13 21:03:31,138 INFO L78 Accepts]: Start accepts. Automaton has 162 states and 206 transitions. Word has length 50 [2022-12-13 21:03:31,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:31,138 INFO L495 AbstractCegarLoop]: Abstraction has 162 states and 206 transitions. [2022-12-13 21:03:31,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 21:03:31,139 INFO L276 IsEmpty]: Start isEmpty. Operand 162 states and 206 transitions. [2022-12-13 21:03:31,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-13 21:03:31,140 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:31,140 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:31,140 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-13 21:03:31,140 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:31,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:31,141 INFO L85 PathProgramCache]: Analyzing trace with hash 602223491, now seen corresponding path program 1 times [2022-12-13 21:03:31,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:31,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812350262] [2022-12-13 21:03:31,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:31,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:31,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:31,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:31,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-12-13 21:03:31,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,232 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:31,232 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:31,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812350262] [2022-12-13 21:03:31,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [812350262] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:31,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:31,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:03:31,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [578173317] [2022-12-13 21:03:31,233 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:31,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 21:03:31,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:31,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:03:31,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:03:31,234 INFO L87 Difference]: Start difference. First operand 162 states and 206 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 21:03:31,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:31,347 INFO L93 Difference]: Finished difference Result 326 states and 428 transitions. [2022-12-13 21:03:31,347 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 21:03:31,347 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2022-12-13 21:03:31,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:31,349 INFO L225 Difference]: With dead ends: 326 [2022-12-13 21:03:31,349 INFO L226 Difference]: Without dead ends: 172 [2022-12-13 21:03:31,350 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:03:31,351 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 73 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 112 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 334 SdHoareTripleChecker+Invalid, 131 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 112 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:31,352 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 334 Invalid, 131 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 112 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:03:31,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 172 states. [2022-12-13 21:03:31,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 172 to 164. [2022-12-13 21:03:31,362 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 124 states have (on average 1.282258064516129) internal successors, (159), 132 states have internal predecessors, (159), 19 states have call successors, (19), 15 states have call predecessors, (19), 20 states have return successors, (30), 21 states have call predecessors, (30), 19 states have call successors, (30) [2022-12-13 21:03:31,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 208 transitions. [2022-12-13 21:03:31,363 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 208 transitions. Word has length 50 [2022-12-13 21:03:31,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:31,363 INFO L495 AbstractCegarLoop]: Abstraction has 164 states and 208 transitions. [2022-12-13 21:03:31,364 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2022-12-13 21:03:31,364 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 208 transitions. [2022-12-13 21:03:31,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-13 21:03:31,364 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:31,364 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:31,364 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-13 21:03:31,365 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:31,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:31,365 INFO L85 PathProgramCache]: Analyzing trace with hash -1203214843, now seen corresponding path program 1 times [2022-12-13 21:03:31,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:31,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [672440016] [2022-12-13 21:03:31,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:31,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:31,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:31,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:31,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-12-13 21:03:31,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:31,440 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:31,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [672440016] [2022-12-13 21:03:31,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [672440016] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:31,440 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:31,440 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:03:31,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1876671165] [2022-12-13 21:03:31,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:31,441 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 21:03:31,441 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:31,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:03:31,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:03:31,442 INFO L87 Difference]: Start difference. First operand 164 states and 208 transitions. Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 21:03:31,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:31,653 INFO L93 Difference]: Finished difference Result 458 states and 602 transitions. [2022-12-13 21:03:31,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:03:31,653 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2022-12-13 21:03:31,653 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:31,655 INFO L225 Difference]: With dead ends: 458 [2022-12-13 21:03:31,655 INFO L226 Difference]: Without dead ends: 302 [2022-12-13 21:03:31,655 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-13 21:03:31,656 INFO L413 NwaCegarLoop]: 150 mSDtfsCounter, 223 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 230 SdHoareTripleChecker+Valid, 347 SdHoareTripleChecker+Invalid, 247 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:31,656 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [230 Valid, 347 Invalid, 247 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 21:03:31,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 302 states. [2022-12-13 21:03:31,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 302 to 294. [2022-12-13 21:03:31,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 294 states, 221 states have (on average 1.257918552036199) internal successors, (278), 233 states have internal predecessors, (278), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-12-13 21:03:31,683 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294 states to 294 states and 376 transitions. [2022-12-13 21:03:31,683 INFO L78 Accepts]: Start accepts. Automaton has 294 states and 376 transitions. Word has length 50 [2022-12-13 21:03:31,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:31,683 INFO L495 AbstractCegarLoop]: Abstraction has 294 states and 376 transitions. [2022-12-13 21:03:31,684 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.6) internal successors, (43), 4 states have internal predecessors, (43), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2022-12-13 21:03:31,684 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 376 transitions. [2022-12-13 21:03:31,684 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-13 21:03:31,684 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:31,684 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:31,684 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-13 21:03:31,685 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:31,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:31,685 INFO L85 PathProgramCache]: Analyzing trace with hash 1971090006, now seen corresponding path program 1 times [2022-12-13 21:03:31,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:31,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1872461748] [2022-12-13 21:03:31,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:31,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:31,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:31,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:31,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-12-13 21:03:31,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-12-13 21:03:31,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:31,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:31,780 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1872461748] [2022-12-13 21:03:31,780 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1872461748] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:31,780 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:31,780 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 21:03:31,780 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2029943899] [2022-12-13 21:03:31,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:31,781 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-13 21:03:31,781 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:31,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 21:03:31,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 21:03:31,782 INFO L87 Difference]: Start difference. First operand 294 states and 376 transitions. Second operand has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 21:03:31,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:31,943 INFO L93 Difference]: Finished difference Result 596 states and 775 transitions. [2022-12-13 21:03:31,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 21:03:31,944 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) Word has length 52 [2022-12-13 21:03:31,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:31,945 INFO L225 Difference]: With dead ends: 596 [2022-12-13 21:03:31,945 INFO L226 Difference]: Without dead ends: 310 [2022-12-13 21:03:31,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-12-13 21:03:31,946 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 152 mSDsluCounter, 295 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 157 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:31,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [157 Valid, 386 Invalid, 210 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-13 21:03:31,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 310 states. [2022-12-13 21:03:31,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 310 to 290. [2022-12-13 21:03:31,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 290 states, 217 states have (on average 1.2258064516129032) internal successors, (266), 229 states have internal predecessors, (266), 36 states have call successors, (36), 33 states have call predecessors, (36), 36 states have return successors, (62), 37 states have call predecessors, (62), 36 states have call successors, (62) [2022-12-13 21:03:31,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 290 states to 290 states and 364 transitions. [2022-12-13 21:03:31,965 INFO L78 Accepts]: Start accepts. Automaton has 290 states and 364 transitions. Word has length 52 [2022-12-13 21:03:31,966 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:31,966 INFO L495 AbstractCegarLoop]: Abstraction has 290 states and 364 transitions. [2022-12-13 21:03:31,966 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.166666666666667) internal successors, (43), 5 states have internal predecessors, (43), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 1 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 21:03:31,966 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 364 transitions. [2022-12-13 21:03:31,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-13 21:03:31,966 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:31,966 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:31,966 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-13 21:03:31,967 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:31,967 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:31,967 INFO L85 PathProgramCache]: Analyzing trace with hash 1743345695, now seen corresponding path program 1 times [2022-12-13 21:03:31,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:31,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [244279864] [2022-12-13 21:03:31,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:31,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:31,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:31,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 21:03:32,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 21:03:32,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:32,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,015 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2022-12-13 21:03:32,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:32,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:32,022 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [244279864] [2022-12-13 21:03:32,022 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [244279864] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:32,022 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 21:03:32,022 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 21:03:32,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000455398] [2022-12-13 21:03:32,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:32,022 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-13 21:03:32,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:32,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 21:03:32,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 21:03:32,023 INFO L87 Difference]: Start difference. First operand 290 states and 364 transitions. Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 21:03:32,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:32,305 INFO L93 Difference]: Finished difference Result 594 states and 792 transitions. [2022-12-13 21:03:32,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 21:03:32,306 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2022-12-13 21:03:32,306 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:32,309 INFO L225 Difference]: With dead ends: 594 [2022-12-13 21:03:32,309 INFO L226 Difference]: Without dead ends: 592 [2022-12-13 21:03:32,310 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-13 21:03:32,311 INFO L413 NwaCegarLoop]: 73 mSDtfsCounter, 328 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 230 mSolverCounterSat, 142 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 332 SdHoareTripleChecker+Valid, 225 SdHoareTripleChecker+Invalid, 372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 142 IncrementalHoareTripleChecker+Valid, 230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:32,311 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [332 Valid, 225 Invalid, 372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [142 Valid, 230 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-13 21:03:32,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2022-12-13 21:03:32,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 528. [2022-12-13 21:03:32,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 528 states, 393 states have (on average 1.2340966921119594) internal successors, (485), 420 states have internal predecessors, (485), 70 states have call successors, (70), 51 states have call predecessors, (70), 64 states have return successors, (156), 70 states have call predecessors, (156), 70 states have call successors, (156) [2022-12-13 21:03:32,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 528 states to 528 states and 711 transitions. [2022-12-13 21:03:32,370 INFO L78 Accepts]: Start accepts. Automaton has 528 states and 711 transitions. Word has length 54 [2022-12-13 21:03:32,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:32,370 INFO L495 AbstractCegarLoop]: Abstraction has 528 states and 711 transitions. [2022-12-13 21:03:32,370 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.0) internal successors, (45), 3 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-12-13 21:03:32,370 INFO L276 IsEmpty]: Start isEmpty. Operand 528 states and 711 transitions. [2022-12-13 21:03:32,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 99 [2022-12-13 21:03:32,373 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:32,373 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:32,373 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-13 21:03:32,373 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:32,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:32,374 INFO L85 PathProgramCache]: Analyzing trace with hash 2104240770, now seen corresponding path program 1 times [2022-12-13 21:03:32,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:32,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204816428] [2022-12-13 21:03:32,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:32,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:32,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 21:03:32,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:32,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:03:32,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,505 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:32,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 21:03:32,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2022-12-13 21:03:32,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:32,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,526 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-12-13 21:03:32,527 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,528 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 21 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-12-13 21:03:32,528 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:32,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204816428] [2022-12-13 21:03:32,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [204816428] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 21:03:32,529 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2044759349] [2022-12-13 21:03:32,529 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:32,529 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:03:32,529 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:03:32,530 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 21:03:32,531 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-13 21:03:32,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:32,607 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 4 conjunts are in the unsatisfiable core [2022-12-13 21:03:32,614 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:03:32,695 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:32,695 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 21:03:32,695 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2044759349] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:32,695 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 21:03:32,695 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [9] total 9 [2022-12-13 21:03:32,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1448394323] [2022-12-13 21:03:32,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:32,696 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-13 21:03:32,696 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:32,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 21:03:32,697 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-13 21:03:32,697 INFO L87 Difference]: Start difference. First operand 528 states and 711 transitions. Second operand has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 21:03:32,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:32,762 INFO L93 Difference]: Finished difference Result 899 states and 1241 transitions. [2022-12-13 21:03:32,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 21:03:32,762 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 98 [2022-12-13 21:03:32,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:32,765 INFO L225 Difference]: With dead ends: 899 [2022-12-13 21:03:32,765 INFO L226 Difference]: Without dead ends: 433 [2022-12-13 21:03:32,767 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-13 21:03:32,768 INFO L413 NwaCegarLoop]: 152 mSDtfsCounter, 51 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:32,768 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 222 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:03:32,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2022-12-13 21:03:32,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 433. [2022-12-13 21:03:32,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 433 states, 322 states have (on average 1.2111801242236024) internal successors, (390), 345 states have internal predecessors, (390), 58 states have call successors, (58), 44 states have call predecessors, (58), 52 states have return successors, (90), 57 states have call predecessors, (90), 58 states have call successors, (90) [2022-12-13 21:03:32,807 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 433 states to 433 states and 538 transitions. [2022-12-13 21:03:32,808 INFO L78 Accepts]: Start accepts. Automaton has 433 states and 538 transitions. Word has length 98 [2022-12-13 21:03:32,808 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:32,808 INFO L495 AbstractCegarLoop]: Abstraction has 433 states and 538 transitions. [2022-12-13 21:03:32,808 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 27.0) internal successors, (81), 3 states have internal predecessors, (81), 3 states have call successors, (9), 3 states have call predecessors, (9), 3 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2022-12-13 21:03:32,808 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 538 transitions. [2022-12-13 21:03:32,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2022-12-13 21:03:32,810 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:32,810 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:32,816 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-13 21:03:33,011 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-13 21:03:33,012 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:33,012 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:33,012 INFO L85 PathProgramCache]: Analyzing trace with hash 192141936, now seen corresponding path program 1 times [2022-12-13 21:03:33,012 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:33,012 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1502621106] [2022-12-13 21:03:33,012 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:33,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:33,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 21:03:33,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-12-13 21:03:33,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:03:33,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:33,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 21:03:33,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,241 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 71 [2022-12-13 21:03:33,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,244 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2022-12-13 21:03:33,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-12-13 21:03:33,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:33,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2022-12-13 21:03:33,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,255 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 21:03:33,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:33,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1502621106] [2022-12-13 21:03:33,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1502621106] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 21:03:33,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [495831532] [2022-12-13 21:03:33,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:33,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:03:33,256 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:03:33,256 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 21:03:33,257 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-13 21:03:33,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:33,330 INFO L263 TraceCheckSpWp]: Trace formula consists of 367 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-13 21:03:33,333 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:03:33,448 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 35 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 21:03:33,448 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-13 21:03:33,642 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 21 proven. 4 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 21:03:33,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [495831532] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-13 21:03:33,643 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-13 21:03:33,643 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 6, 7] total 18 [2022-12-13 21:03:33,643 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275186375] [2022-12-13 21:03:33,643 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-13 21:03:33,644 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-13 21:03:33,644 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:33,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-13 21:03:33,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=258, Unknown=0, NotChecked=0, Total=306 [2022-12-13 21:03:33,645 INFO L87 Difference]: Start difference. First operand 433 states and 538 transitions. Second operand has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-12-13 21:03:36,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:36,769 INFO L93 Difference]: Finished difference Result 2106 states and 2835 transitions. [2022-12-13 21:03:36,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 88 states. [2022-12-13 21:03:36,770 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) Word has length 108 [2022-12-13 21:03:36,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:36,778 INFO L225 Difference]: With dead ends: 2106 [2022-12-13 21:03:36,778 INFO L226 Difference]: Without dead ends: 1681 [2022-12-13 21:03:36,782 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 356 GetRequests, 253 SyntacticMatches, 3 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3648 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=1232, Invalid=9070, Unknown=0, NotChecked=0, Total=10302 [2022-12-13 21:03:36,782 INFO L413 NwaCegarLoop]: 278 mSDtfsCounter, 1711 mSDsluCounter, 1758 mSDsCounter, 0 mSdLazyCounter, 3616 mSolverCounterSat, 974 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1719 SdHoareTripleChecker+Valid, 2036 SdHoareTripleChecker+Invalid, 4590 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 974 IncrementalHoareTripleChecker+Valid, 3616 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:36,783 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1719 Valid, 2036 Invalid, 4590 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [974 Valid, 3616 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-13 21:03:36,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1681 states. [2022-12-13 21:03:36,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1681 to 1402. [2022-12-13 21:03:36,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1402 states, 1031 states have (on average 1.1677982541222114) internal successors, (1204), 1096 states have internal predecessors, (1204), 192 states have call successors, (192), 149 states have call predecessors, (192), 178 states have return successors, (311), 190 states have call predecessors, (311), 192 states have call successors, (311) [2022-12-13 21:03:36,863 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1402 states to 1402 states and 1707 transitions. [2022-12-13 21:03:36,863 INFO L78 Accepts]: Start accepts. Automaton has 1402 states and 1707 transitions. Word has length 108 [2022-12-13 21:03:36,863 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:36,863 INFO L495 AbstractCegarLoop]: Abstraction has 1402 states and 1707 transitions. [2022-12-13 21:03:36,863 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 9.38888888888889) internal successors, (169), 14 states have internal predecessors, (169), 7 states have call successors, (26), 7 states have call predecessors, (26), 7 states have return successors, (24), 8 states have call predecessors, (24), 7 states have call successors, (24) [2022-12-13 21:03:36,863 INFO L276 IsEmpty]: Start isEmpty. Operand 1402 states and 1707 transitions. [2022-12-13 21:03:36,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 113 [2022-12-13 21:03:36,865 INFO L187 NwaCegarLoop]: Found error trace [2022-12-13 21:03:36,865 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:36,870 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-13 21:03:37,066 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:03:37,066 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-12-13 21:03:37,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 21:03:37,067 INFO L85 PathProgramCache]: Analyzing trace with hash 1625453290, now seen corresponding path program 1 times [2022-12-13 21:03:37,067 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 21:03:37,067 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382536548] [2022-12-13 21:03:37,067 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:37,067 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 21:03:37,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2022-12-13 21:03:37,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-12-13 21:03:37,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-12-13 21:03:37,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,175 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-12-13 21:03:37,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:37,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-12-13 21:03:37,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 75 [2022-12-13 21:03:37,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-12-13 21:03:37,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2022-12-13 21:03:37,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-12-13 21:03:37,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,201 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2022-12-13 21:03:37,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,203 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 18 proven. 3 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-13 21:03:37,204 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 21:03:37,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [382536548] [2022-12-13 21:03:37,204 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [382536548] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-13 21:03:37,204 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [773926834] [2022-12-13 21:03:37,204 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 21:03:37,204 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:03:37,204 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 21:03:37,205 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-13 21:03:37,206 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-13 21:03:37,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 21:03:37,285 INFO L263 TraceCheckSpWp]: Trace formula consists of 378 conjuncts, 8 conjunts are in the unsatisfiable core [2022-12-13 21:03:37,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 21:03:37,390 INFO L134 CoverageAnalysis]: Checked inductivity of 38 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-13 21:03:37,390 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-13 21:03:37,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [773926834] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 21:03:37,390 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-13 21:03:37,391 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2022-12-13 21:03:37,391 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778729447] [2022-12-13 21:03:37,391 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 21:03:37,391 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-13 21:03:37,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 21:03:37,392 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 21:03:37,392 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=204, Unknown=0, NotChecked=0, Total=240 [2022-12-13 21:03:37,393 INFO L87 Difference]: Start difference. First operand 1402 states and 1707 transitions. Second operand has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-12-13 21:03:37,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 21:03:37,531 INFO L93 Difference]: Finished difference Result 2311 states and 2812 transitions. [2022-12-13 21:03:37,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 21:03:37,531 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) Word has length 112 [2022-12-13 21:03:37,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-13 21:03:37,532 INFO L225 Difference]: With dead ends: 2311 [2022-12-13 21:03:37,532 INFO L226 Difference]: Without dead ends: 0 [2022-12-13 21:03:37,535 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 125 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=292, Unknown=0, NotChecked=0, Total=342 [2022-12-13 21:03:37,536 INFO L413 NwaCegarLoop]: 185 mSDtfsCounter, 47 mSDsluCounter, 784 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 969 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-13 21:03:37,536 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 969 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-13 21:03:37,536 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2022-12-13 21:03:37,536 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2022-12-13 21:03:37,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 21:03:37,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2022-12-13 21:03:37,537 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 112 [2022-12-13 21:03:37,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-13 21:03:37,537 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-12-13 21:03:37,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 12.142857142857142) internal successors, (85), 6 states have internal predecessors, (85), 3 states have call successors, (11), 3 states have call predecessors, (11), 4 states have return successors, (11), 4 states have call predecessors, (11), 3 states have call successors, (11) [2022-12-13 21:03:37,537 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2022-12-13 21:03:37,537 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-12-13 21:03:37,539 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-12-13 21:03:37,544 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-13 21:03:37,740 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-13 21:03:37,742 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2022-12-13 21:03:43,491 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 758 765) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 758 765) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 .cse1 (not (<= ~methaneLevelCritical~0 0)) (not (<= 0 ~methaneLevelCritical~0)) .cse2) (or .cse0 .cse1 (not (<= 1 ~waterLevel~0)) .cse3 .cse2) (or .cse0 .cse1 .cse3 .cse2 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 758 765) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 665 671) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 665 671) the Hoare annotation is: true [2022-12-13 21:03:43,492 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 896 907) the Hoare annotation is: (let ((.cse6 (<= 1 ~methaneLevelCritical~0)) (.cse0 (not (= ~pumpRunning~0 0))) (.cse8 (not (<= 1 |old(~methaneLevelCritical~0)|))) (.cse7 (not (<= 1 ~pumpRunning~0))) (.cse1 (not (<= |old(~methaneLevelCritical~0)| 0))) (.cse2 (and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))) (.cse3 (not (<= 0 |old(~methaneLevelCritical~0)|))) (.cse4 (= 0 ~systemActive~0)) (.cse5 (not (= ~methAndRunningLastTime~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (or .cse6 .cse7 .cse8 (< ~waterLevel~0 2) .cse4) (or .cse6 .cse0 .cse8 .cse4 .cse5) (or .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 896 907) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point L900-1(lines 896 907) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 908 916) the Hoare annotation is: true [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 908 916) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 908 916) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point L733(lines 733 741) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point L729(lines 729 746) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point L180(lines 180 190) no Hoare annotation was computed. [2022-12-13 21:03:43,492 INFO L899 garLoopResultBuilder]: For program point L176(lines 176 193) no Hoare annotation was computed. [2022-12-13 21:03:43,493 INFO L895 garLoopResultBuilder]: At program point L176-1(lines 168 196) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse14 (= ~pumpRunning~0 0)) (.cse6 (= ~methAndRunningLastTime~0 0)) (.cse17 (not .cse3))) (let ((.cse4 (and .cse14 .cse6 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse17)) (.cse15 (not (= |old(~waterLevel~0)| 0))) (.cse16 (= ~waterLevel~0 0)) (.cse10 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (<= 1 ~pumpRunning~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse2 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse13 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse9 (= |timeShift___utac_acc__Specification2_spec__2_~tmp~1#1| 0)) (.cse1 (not (<= 1 |old(~pumpRunning~0)|))) (.cse12 (not (<= 0 ~methaneLevelCritical~0)))) (and (or .cse0 .cse1 .cse2 .cse3 .cse4) (or (and .cse5 .cse6 .cse7 .cse8 .cse9) .cse10 .cse0 .cse11 .cse12 .cse3 (and .cse13 .cse14 .cse6 .cse8 .cse9)) (or .cse1 (< |old(~waterLevel~0)| 2) .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse2 .cse15 .cse3 .cse16) (or .cse1 .cse11 .cse12 .cse15 .cse3 .cse16) (or .cse10 .cse0 (and .cse5 .cse7 .cse8) .cse2 (and .cse13 .cse14 .cse6 .cse8) .cse3) (or .cse1 (and .cse14 .cse6 .cse17 .cse9) .cse11 (and .cse13 .cse6 .cse9) .cse12 .cse3) (or .cse1 (<= 1 ~waterLevel~0) .cse12 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-12-13 21:03:43,493 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 641 664) no Hoare annotation was computed. [2022-12-13 21:03:43,493 INFO L895 garLoopResultBuilder]: At program point L771(line 771) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse0 .cse4 (and .cse3 (= ~methAndRunningLastTime~0 0)) .cse6 .cse2) (or .cse4 .cse5 .cse1 .cse7 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse0 .cse4 .cse6 .cse7 .cse2 .cse8) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (< |old(~waterLevel~0)| 2) .cse6 .cse2))) [2022-12-13 21:03:43,493 INFO L899 garLoopResultBuilder]: For program point L771-1(line 771) no Hoare annotation was computed. [2022-12-13 21:03:43,493 INFO L899 garLoopResultBuilder]: For program point L181(lines 181 187) no Hoare annotation was computed. [2022-12-13 21:03:43,493 INFO L899 garLoopResultBuilder]: For program point L652-1(lines 652 658) no Hoare annotation was computed. [2022-12-13 21:03:43,493 INFO L895 garLoopResultBuilder]: At program point L739(line 739) the Hoare annotation is: (let ((.cse4 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse5 (not (<= 1 ~methaneLevelCritical~0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse3 .cse4 .cse1 .cse2) (or .cse3 .cse4 .cse1 (not (= |old(~waterLevel~0)| 0)) .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) (= ~waterLevel~0 0))) (or .cse3 (< |old(~waterLevel~0)| 2) .cse5 .cse2) (or .cse0 .cse3 .cse5 .cse2) (or .cse3 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:03:43,493 INFO L895 garLoopResultBuilder]: At program point L735(line 735) the Hoare annotation is: (let ((.cse8 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse5 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse9 (not (= |old(~waterLevel~0)| 0))) (.cse10 (= ~waterLevel~0 0)) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or (and .cse3 (= ~methAndRunningLastTime~0 0) .cse4 .cse5) .cse0 .cse6 .cse7 .cse2) (or .cse3 .cse6 .cse8 .cse1 .cse2) (or .cse6 .cse8 .cse1 .cse9 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse10)) (or (and .cse3 .cse4 .cse5) .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse2) (or .cse0 .cse6 .cse7 .cse9 .cse2 .cse10) (or .cse6 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:03:43,493 INFO L899 garLoopResultBuilder]: For program point L1012(line 1012) no Hoare annotation was computed. [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point L174(line 174) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse12 (not .cse3))) (let ((.cse8 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse12)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse1 .cse12)) (.cse11 (not (= |old(~waterLevel~0)| 0))) (.cse9 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse1) .cse2 .cse3 (and .cse4 .cse1 .cse5)) (or .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse8 .cse3) (or .cse6 .cse9 .cse10 .cse2 .cse11 .cse3 (and .cse5 (= ~waterLevel~0 0))) (or .cse0 .cse6 .cse7 .cse10 .cse11 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9 (and .cse4 .cse12) .cse2 .cse3) (or .cse6 (<= 1 ~waterLevel~0) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-12-13 21:03:43,494 INFO L899 garLoopResultBuilder]: For program point L174-1(line 174) no Hoare annotation was computed. [2022-12-13 21:03:43,494 INFO L899 garLoopResultBuilder]: For program point L876(lines 876 880) no Hoare annotation was computed. [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point L876-2(lines 872 883) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (= |old(~waterLevel~0)| 0))) (.cse8 (= ~waterLevel~0 0)) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse0 .cse4 (and .cse3 (= ~methAndRunningLastTime~0 0)) .cse6 .cse2) (or .cse4 .cse5 .cse1 .cse7 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse8)) (or .cse0 .cse4 .cse6 .cse7 .cse2 .cse8) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse3 .cse4 (< |old(~waterLevel~0)| 2) .cse6 .cse2))) [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 1008 1015) the Hoare annotation is: (let ((.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse3 (not (<= 1 |old(~pumpRunning~0)|))) (.cse4 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse3 (< |old(~waterLevel~0)| 2) .cse4 .cse2) (or .cse0 .cse3 .cse4 .cse2))) [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 641 664) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse7 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))) (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 1 ~methaneLevelCritical~0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse7)) (.cse5 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse4 (not (<= 0 ~methaneLevelCritical~0))) (.cse3 (= 0 ~systemActive~0))) (and (or .cse0 (< |old(~waterLevel~0)| 2) .cse1 .cse2 .cse3) (or .cse0 .cse2 (not (<= ~methaneLevelCritical~0 0)) .cse4 .cse3) (or .cse5 .cse0 .cse1 .cse2 .cse3) (or (not (= |old(~pumpRunning~0)| 0)) .cse5 .cse4 .cse3 (and (= ~pumpRunning~0 0) .cse6 .cse7))))) [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point L744(line 744) the Hoare annotation is: (let ((.cse0 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0))) (.cse4 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse1 .cse2) (or .cse0 (< |old(~waterLevel~0)| 2) .cse3 .cse2) (or .cse4 .cse0 .cse3 .cse2) (or (not (= |old(~pumpRunning~0)| 0)) .cse4 .cse1 .cse2 (and (= ~pumpRunning~0 0) (= |old(~waterLevel~0)| ~waterLevel~0) (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0))))) [2022-12-13 21:03:43,494 INFO L895 garLoopResultBuilder]: At program point L744-1(lines 725 749) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0))) (let ((.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse12 (not .cse3))) (let ((.cse8 (and .cse4 (<= 1 |timeShift_isMethaneAlarm_#res#1|) (<= 1 |timeShift_processEnvironment_~tmp~8#1|) .cse12)) (.cse5 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse7 (not (<= 1 ~methaneLevelCritical~0))) (.cse10 (and .cse4 .cse1 .cse12)) (.cse11 (not (= |old(~waterLevel~0)| 0))) (.cse9 (not (<= ~methaneLevelCritical~0 0))) (.cse6 (not (<= 1 |old(~pumpRunning~0)|))) (.cse2 (not (<= 0 ~methaneLevelCritical~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse1) .cse2 .cse3 (and .cse4 .cse1 .cse5)) (or .cse0 .cse6 .cse7 .cse8 .cse3) (or .cse6 (< |old(~waterLevel~0)| 2) .cse7 .cse8 .cse3) (or .cse6 .cse9 .cse10 .cse2 .cse11 .cse3 (and .cse5 (= ~waterLevel~0 0))) (or .cse0 .cse6 .cse7 .cse10 .cse11 .cse3) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6 .cse9 (and .cse4 .cse12) .cse2 .cse3) (or .cse6 (<= 1 ~waterLevel~0) .cse2 .cse3 (not (<= 2 |old(~waterLevel~0)|))))))) [2022-12-13 21:03:43,494 INFO L899 garLoopResultBuilder]: For program point L645-1(lines 644 663) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 641 664) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 766 776) the Hoare annotation is: (let ((.cse5 (not (<= ~methaneLevelCritical~0 0))) (.cse3 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse0 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse6 (not (<= 1 ~methaneLevelCritical~0))) (.cse8 (not (= |old(~waterLevel~0)| 0))) (.cse9 (= ~waterLevel~0 0)) (.cse4 (not (<= 1 |old(~pumpRunning~0)|))) (.cse1 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5 .cse1 .cse2) (or .cse4 (< |old(~waterLevel~0)| 2) .cse6 (and .cse3 .cse7) .cse2) (or .cse4 .cse5 .cse1 .cse8 .cse2 (and (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0) .cse9)) (or .cse0 .cse4 .cse6 (and .cse3 (= ~methAndRunningLastTime~0 0) .cse7) .cse2) (or .cse0 .cse4 .cse6 .cse8 .cse2 .cse9) (or .cse4 (<= 1 ~waterLevel~0) .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))))) [2022-12-13 21:03:43,495 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 777 785) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0))) (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse11 (not (<= ~methaneLevelCritical~0 0))) (.cse12 (not (<= 0 ~methaneLevelCritical~0))) (.cse4 (= ~pumpRunning~0 0)) (.cse7 (<= 1 |timeShift_isMethaneAlarm_#res#1|)) (.cse8 (<= 1 |timeShift_processEnvironment_~tmp~8#1|)) (.cse5 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse9 (not .cse6)) (.cse1 (not (= |old(~methAndRunningLastTime~0)| 0))) (.cse10 (not (<= 1 |old(~pumpRunning~0)|))) (.cse3 (not (<= 1 ~methaneLevelCritical~0)))) (and (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0))) (or .cse0 .cse1 (and (<= 1 ~pumpRunning~0) (= ~methAndRunningLastTime~0 0) (<= 2 ~waterLevel~0) .cse2) .cse3 (and .cse4 .cse5 .cse2 (= |old(~methAndRunningLastTime~0)| ~methAndRunningLastTime~0)) .cse6)) (or .cse1 (and .cse4 .cse7 .cse8 .cse5 .cse9) .cse10 .cse3 .cse6) (or .cse0 .cse1 .cse11 .cse12 .cse6) (or .cse10 .cse11 .cse12 .cse6) (or (and .cse4 .cse7 .cse8 .cse5 (<= 1 ~waterLevel~0) .cse9) .cse10 (< |old(~waterLevel~0)| 2) .cse3 .cse6) (or .cse1 .cse10 .cse3 (not (= |old(~waterLevel~0)| 0)) .cse6 (= ~waterLevel~0 0))))) [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 1012) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L902 garLoopResultBuilder]: At program point L66-1(lines 66 70) the Hoare annotation is: true [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 52 81) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point L63(line 63) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L902 garLoopResultBuilder]: At program point L62-2(lines 62 76) the Hoare annotation is: true [2022-12-13 21:03:43,495 INFO L902 garLoopResultBuilder]: At program point L58(line 58) the Hoare annotation is: true [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point L58-1(line 58) no Hoare annotation was computed. [2022-12-13 21:03:43,495 INFO L902 garLoopResultBuilder]: At program point L77(lines 52 81) the Hoare annotation is: true [2022-12-13 21:03:43,495 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 52 81) the Hoare annotation is: true [2022-12-13 21:03:43,495 INFO L899 garLoopResultBuilder]: For program point L73(line 73) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L66(lines 66 70) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L576(lines 575 622) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L605(lines 605 618) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L895 garLoopResultBuilder]: At program point startSystem_returnLabel#1(lines 860 867) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (not (< ~waterLevel~0 2)) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6 .cse5) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse6 .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-12-13 21:03:43,496 INFO L895 garLoopResultBuilder]: At program point L597(line 597) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 (not (< ~waterLevel~0 2)) .cse2 .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-12-13 21:03:43,496 INFO L902 garLoopResultBuilder]: At program point L626(lines 565 630) the Hoare annotation is: true [2022-12-13 21:03:43,496 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 118 128) the Hoare annotation is: true [2022-12-13 21:03:43,496 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 984 990) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L585(lines 585 591) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 132 154) the Hoare annotation is: true [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L585-1(lines 585 591) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L577(lines 577 581) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2022-12-13 21:03:43,496 INFO L895 garLoopResultBuilder]: At program point L623(lines 574 624) the Hoare annotation is: false [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 109 115) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point L595(lines 595 601) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point L595-1(lines 595 601) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point L620(lines 575 622) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point L587(line 587) the Hoare annotation is: (let ((.cse0 (<= 1 ~pumpRunning~0)) (.cse5 (= ~methAndRunningLastTime~0 0)) (.cse1 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse2 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 ~systemActive~0)))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2 (<= 2 ~waterLevel~0) .cse3 .cse4) (and (= ~pumpRunning~0 0) .cse5 .cse1 .cse2 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse1 .cse2 (<= ~methaneLevelCritical~0 0) .cse3 .cse6 .cse4))) [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 991 997) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point __utac_acc__Specification2_spec__1_returnLabel#1(lines 160 167) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (= |ULTIMATE.start_main_~tmp~0#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point L142(lines 142 149) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point L142-2(lines 142 149) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 998 1006) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methAndRunningLastTime~0 0) (= |ULTIMATE.start_valid_product_#res#1| 1) (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0) (= ~waterLevel~0 1) (not (= 0 ~systemActive~0))) [2022-12-13 21:03:43,497 INFO L899 garLoopResultBuilder]: For program point L613(lines 613 617) no Hoare annotation was computed. [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point L613-2(lines 605 618) the Hoare annotation is: (let ((.cse6 (<= 0 ~methaneLevelCritical~0)) (.cse0 (<= 1 ~pumpRunning~0)) (.cse7 (= ~methAndRunningLastTime~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res#1| 1)) (.cse3 (= |ULTIMATE.start_main_~tmp~0#1| 1)) (.cse4 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2 (not (< ~waterLevel~0 2)) .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse3 (<= ~methaneLevelCritical~0 0) .cse4 .cse6 .cse5) (and (= ~pumpRunning~0 0) .cse7 .cse2 .cse3 .cse4 .cse6 .cse5) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5))) [2022-12-13 21:03:43,497 INFO L895 garLoopResultBuilder]: At program point activatePump_returnLabel#1(lines 750 757) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (= |old(~pumpRunning~0)| 0)) (and (<= 1 ~pumpRunning~0) (<= 2 ~waterLevel~0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1))) [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point L692(line 692) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L692-1(lines 673 697) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 673 697) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 949 962) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (let ((.cse2 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (and .cse2 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) .cse0 (and .cse2 (<= 2 ~waterLevel~0)) .cse1 (not (= ~methAndRunningLastTime~0 0)))))) [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L831(lines 831 835) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L831-2(lines 831 835) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 822 840) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse2 (= 0 ~systemActive~0))) (and (let ((.cse1 (= ~pumpRunning~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (and .cse1 (<= 2 ~waterLevel~0)) (and .cse1 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0)) .cse2 (not (= ~methAndRunningLastTime~0 0)))) (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse2))) [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 673 697) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L953(lines 953 959) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point L687(line 687) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~6#1| 0)) (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L681(lines 681 689) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L677(lines 677 694) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 884 895) no Hoare annotation was computed. [2022-12-13 21:03:43,498 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 884 895) the Hoare annotation is: (let ((.cse0 (not (<= 1 ~pumpRunning~0))) (.cse3 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse2 (= 0 ~systemActive~0)) (.cse4 (not (= ~methAndRunningLastTime~0 0)))) (and (or (not (<= 1 ~methaneLevelCritical~0)) .cse0 .cse1 .cse2 (not (<= 2 |old(~waterLevel~0)|))) (or .cse0 (not (<= ~methaneLevelCritical~0 0)) .cse3 .cse1 .cse2 .cse4) (or (not (= ~pumpRunning~0 0)) .cse3 .cse1 .cse2 .cse4))) [2022-12-13 21:03:43,498 INFO L899 garLoopResultBuilder]: For program point L888-1(lines 884 895) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 963 971) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) (= ~waterLevel~0 0))) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 699 723) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point L713(line 713) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point L709(line 709) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point L707(lines 707 715) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point L703(lines 703 720) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 841 859) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1 (let ((.cse2 (= ~waterLevel~0 0))) (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterLevel_~tmp~10#1| 0) .cse2) (or (= |processEnvironment__wrappee__lowWaterSensor_isLowWaterSensorDry_#res#1| 0) .cse2)))) (or (not (= |old(~pumpRunning~0)| 0)) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__lowWaterSensorEXIT(lines 699 723) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point L850(lines 850 854) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point L850-2(lines 850 854) no Hoare annotation was computed. [2022-12-13 21:03:43,499 INFO L895 garLoopResultBuilder]: At program point L718(line 718) the Hoare annotation is: (let ((.cse0 (not (<= 0 ~methaneLevelCritical~0))) (.cse1 (= 0 ~systemActive~0))) (and (or (not (<= 1 |old(~pumpRunning~0)|)) (not (<= ~methaneLevelCritical~0 0)) .cse0 .cse1) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 .cse1 (not (= ~methAndRunningLastTime~0 0))))) [2022-12-13 21:03:43,499 INFO L899 garLoopResultBuilder]: For program point L718-1(lines 699 723) no Hoare annotation was computed. [2022-12-13 21:03:43,502 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 21:03:43,503 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-12-13 21:03:43,525 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.12 09:03:43 BoogieIcfgContainer [2022-12-13 21:03:43,526 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-12-13 21:03:43,526 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-12-13 21:03:43,526 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-12-13 21:03:43,526 INFO L275 PluginConnector]: Witness Printer initialized [2022-12-13 21:03:43,527 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 09:03:29" (3/4) ... [2022-12-13 21:03:43,529 INFO L137 WitnessPrinter]: Generating witness for correct program [2022-12-13 21:03:43,533 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2022-12-13 21:03:43,534 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__lowWaterSensor [2022-12-13 21:03:43,539 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 26 nodes and edges [2022-12-13 21:03:43,539 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 8 nodes and edges [2022-12-13 21:03:43,539 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2022-12-13 21:03:43,539 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 21:03:43,540 INFO L961 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2022-12-13 21:03:43,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-12-13 21:03:43,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-12-13 21:03:43,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) [2022-12-13 21:03:43,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) [2022-12-13 21:03:43,558 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-12-13 21:03:43,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || (pumpRunning == 0 && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 21:03:43,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && !(waterLevel < 2)) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) [2022-12-13 21:03:43,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) && ((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0))) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 21:03:43,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) [2022-12-13 21:03:43,559 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && 1 <= waterLevel) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && (tmp == 0 || waterLevel == 0)) && (\result == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-12-13 21:03:43,560 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) [2022-12-13 21:03:43,574 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/witness.graphml [2022-12-13 21:03:43,574 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-12-13 21:03:43,575 INFO L158 Benchmark]: Toolchain (without parser) took 14368.46ms. Allocated memory was 125.8MB in the beginning and 157.3MB in the end (delta: 31.5MB). Free memory was 94.6MB in the beginning and 73.6MB in the end (delta: 21.0MB). Peak memory consumption was 54.7MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,575 INFO L158 Benchmark]: CDTParser took 0.12ms. Allocated memory is still 125.8MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-12-13 21:03:43,575 INFO L158 Benchmark]: CACSL2BoogieTranslator took 347.12ms. Allocated memory is still 125.8MB. Free memory was 94.1MB in the beginning and 75.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,575 INFO L158 Benchmark]: Boogie Procedure Inliner took 40.51ms. Allocated memory is still 125.8MB. Free memory was 75.4MB in the beginning and 72.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,575 INFO L158 Benchmark]: Boogie Preprocessor took 18.99ms. Allocated memory is still 125.8MB. Free memory was 72.7MB in the beginning and 71.3MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,576 INFO L158 Benchmark]: RCFGBuilder took 360.33ms. Allocated memory is still 125.8MB. Free memory was 71.3MB in the beginning and 54.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,576 INFO L158 Benchmark]: TraceAbstraction took 13545.27ms. Allocated memory was 125.8MB in the beginning and 157.3MB in the end (delta: 31.5MB). Free memory was 53.4MB in the beginning and 78.8MB in the end (delta: -25.5MB). Peak memory consumption was 54.8MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,576 INFO L158 Benchmark]: Witness Printer took 48.33ms. Allocated memory is still 157.3MB. Free memory was 78.8MB in the beginning and 73.6MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. [2022-12-13 21:03:43,577 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.12ms. Allocated memory is still 125.8MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 347.12ms. Allocated memory is still 125.8MB. Free memory was 94.1MB in the beginning and 75.4MB in the end (delta: 18.7MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 40.51ms. Allocated memory is still 125.8MB. Free memory was 75.4MB in the beginning and 72.7MB in the end (delta: 2.6MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 18.99ms. Allocated memory is still 125.8MB. Free memory was 72.7MB in the beginning and 71.3MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 360.33ms. Allocated memory is still 125.8MB. Free memory was 71.3MB in the beginning and 54.1MB in the end (delta: 17.2MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13545.27ms. Allocated memory was 125.8MB in the beginning and 157.3MB in the end (delta: 31.5MB). Free memory was 53.4MB in the beginning and 78.8MB in the end (delta: -25.5MB). Peak memory consumption was 54.8MB. Max. memory is 16.1GB. * Witness Printer took 48.33ms. Allocated memory is still 157.3MB. Free memory was 78.8MB in the beginning and 73.6MB in the end (delta: 5.2MB). Peak memory consumption was 6.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 1012]: call to reach_error is unreachable For all program executions holds that call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 10 procedures, 103 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.5s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 4.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 3013 SdHoareTripleChecker+Valid, 2.5s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 2972 mSDsluCounter, 5778 SdHoareTripleChecker+Invalid, 2.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 4198 mSDsCounter, 1313 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4637 IncrementalHoareTripleChecker+Invalid, 5950 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1313 mSolverCounterUnsat, 1580 mSDtfsCounter, 4637 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 741 GetRequests, 569 SyntacticMatches, 4 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3701 ImplicationChecksByTransitivity, 1.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1402occurred in iteration=11, InterpolantAutomatonStates: 152, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 12 MinimizatonAttempts, 390 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 48 LocationsWithAnnotation, 2016 PreInvPairs, 2366 NumberOfFragments, 3089 HoareAnnotationTreeSize, 2016 FomulaSimplifications, 1387 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 48 FomulaSimplificationsInter, 30935 FormulaSimplificationTreeSizeReductionInter, 5.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 1018 NumberOfCodeBlocks, 1018 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 1110 ConstructedInterpolants, 0 QuantifiedInterpolants, 2139 SizeOfPredicates, 8 NumberOfNonLiveVariables, 1089 ConjunctsInSsa, 23 ConjunctsInUnsatCore, 16 InterpolantComputations, 11 PerfectInterpolantSequences, 255/275 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 109]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 565]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning) && (\result == 0 || waterLevel == 0)) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: ((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == \old(pumpRunning) && (tmp == 0 || waterLevel == 0)) && (\result == 0 || waterLevel == 0))) && (((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 574]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: ((((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && !(waterLevel < 2)) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((1 <= pumpRunning && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || ((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && splverifierCounter == 0) && !(0 == systemActive)) - InvariantResult [Line: 1008]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 984]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 750]: Loop Invariant Derived loop invariant: ((((!(\old(pumpRunning) == 0) || (1 <= pumpRunning && 2 <= waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 575]: Loop Invariant Derived loop invariant: (((((((1 <= pumpRunning && 1 <= methaneLevelCritical) && \result == 1) && tmp == 1) && 2 <= waterLevel) && splverifierCounter == 0) && !(0 == systemActive)) || ((((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive))) || (((((((1 <= pumpRunning && methAndRunningLastTime == 0) && \result == 1) && tmp == 1) && methaneLevelCritical <= 0) && splverifierCounter == 0) && 0 <= methaneLevelCritical) && !(0 == systemActive)) - InvariantResult [Line: 998]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0 && methAndRunningLastTime == 0) && \result == 1) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 766]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (pumpRunning == \old(pumpRunning) && 1 <= \result)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && 1 <= \result)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 168]: Loop Invariant Derived loop invariant: ((((((((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) && ((((((((((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel) && tmp == 0) || !(\old(pumpRunning) == 0)) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel) && tmp == 0))) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) || ((((pumpRunning == 0 && methAndRunningLastTime == 0) && 1 <= \result) && 1 <= tmp) && !(0 == systemActive)))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && (((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || ((1 <= pumpRunning && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == \old(pumpRunning) && pumpRunning == 0) && methAndRunningLastTime == 0) && \old(waterLevel) == waterLevel)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || (((pumpRunning == 0 && methAndRunningLastTime == 0) && !(0 == systemActive)) && tmp == 0)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0) && tmp == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 872]: Loop Invariant Derived loop invariant: ((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || (pumpRunning == \old(pumpRunning) && methAndRunningLastTime == 0)) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel)))) && ((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 991]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0 && methAndRunningLastTime == 0) && methaneLevelCritical <= 0) && 0 <= methaneLevelCritical) && waterLevel == 1) && !(0 == systemActive) - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: ((((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) && ((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && !(0 == systemActive))) || 0 == systemActive)) && ((((((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || (\old(methAndRunningLastTime) == methAndRunningLastTime && waterLevel == 0))) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || ((pumpRunning == 0 && \old(waterLevel) == waterLevel) && !(0 == systemActive))) || !(\old(waterLevel) == 0)) || 0 == systemActive)) && (((((pumpRunning == \old(pumpRunning) || !(1 <= \old(pumpRunning))) || !(methaneLevelCritical <= 0)) || (pumpRunning == 0 && !(0 == systemActive))) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(1 <= \old(pumpRunning)) || 1 <= waterLevel) || !(0 <= methaneLevelCritical)) || 0 == systemActive) || !(2 <= \old(waterLevel))) - InvariantResult [Line: 132]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 777]: Loop Invariant Derived loop invariant: (((((((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || (((1 <= pumpRunning && methAndRunningLastTime == 0) && 2 <= waterLevel) && \old(waterLevel) == waterLevel)) || !(1 <= methaneLevelCritical)) || (((pumpRunning == 0 && \result == 0) && \old(waterLevel) == waterLevel) && \old(methAndRunningLastTime) == methAndRunningLastTime)) || 0 == systemActive) && ((((!(\old(methAndRunningLastTime) == 0) || ((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && !(0 == systemActive))) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && ((((!(\old(pumpRunning) == 0) || !(\old(methAndRunningLastTime) == 0)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive)) && (((((((((pumpRunning == 0 && 1 <= \result) && 1 <= tmp) && \result == 0) && 1 <= waterLevel) && !(0 == systemActive)) || !(1 <= \old(pumpRunning))) || \old(waterLevel) < 2) || !(1 <= methaneLevelCritical)) || 0 == systemActive)) && (((((!(\old(methAndRunningLastTime) == 0) || !(1 <= \old(pumpRunning))) || !(1 <= methaneLevelCritical)) || !(\old(waterLevel) == 0)) || 0 == systemActive) || waterLevel == 0) - InvariantResult [Line: 949]: Loop Invariant Derived loop invariant: (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) && (((((!(\old(pumpRunning) == 0) || (pumpRunning == 0 && \result == 1)) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) - InvariantResult [Line: 62]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 822]: Loop Invariant Derived loop invariant: (((((!(\old(pumpRunning) == 0) || !(0 <= methaneLevelCritical)) || (pumpRunning == 0 && 2 <= waterLevel)) || ((pumpRunning == 0 && tmp___0 == 0) && \result == 0)) || 0 == systemActive) || !(methAndRunningLastTime == 0)) && (((!(1 <= \old(pumpRunning)) || !(methaneLevelCritical <= 0)) || !(0 <= methaneLevelCritical)) || 0 == systemActive) - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2022-12-13 21:03:43,597 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_34ee5058-eca2-4f64-819e-7f122322c42f/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE