./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 21:54:17,105 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 21:54:17,192 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 21:54:17,205 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 21:54:17,206 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 21:54:17,246 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 21:54:17,248 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 21:54:17,249 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 21:54:17,250 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 21:54:17,255 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 21:54:17,256 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 21:54:17,257 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 21:54:17,258 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 21:54:17,259 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 21:54:17,260 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 21:54:17,260 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 21:54:17,261 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 21:54:17,261 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 21:54:17,262 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 21:54:17,262 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 21:54:17,263 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 21:54:17,264 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 21:54:17,264 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 21:54:17,265 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 21:54:17,265 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 21:54:17,266 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 21:54:17,267 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 21:54:17,267 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 21:54:17,268 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 21:54:17,268 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 21:54:17,270 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 21:54:17,270 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 21:54:17,270 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 21:54:17,271 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 21:54:17,271 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 21:54:17,271 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 21:54:17,271 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 21:54:17,272 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 21:54:17,272 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 21:54:17,272 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5a0a9a5f1521df25ea0ff390c35c7186e45318cd30c225704d83030e156744fb [2023-11-06 21:54:17,622 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 21:54:17,661 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 21:54:17,664 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 21:54:17,666 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 21:54:17,667 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 21:54:17,668 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2023-11-06 21:54:20,760 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 21:54:21,002 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 21:54:21,007 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c [2023-11-06 21:54:21,028 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/data/b2280fbe4/b755568e507840adb38fd1f21cc9c71f/FLAGe9995fe3d [2023-11-06 21:54:21,054 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/data/b2280fbe4/b755568e507840adb38fd1f21cc9c71f [2023-11-06 21:54:21,056 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 21:54:21,058 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 21:54:21,068 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 21:54:21,068 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 21:54:21,074 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 21:54:21,074 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,075 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5ad770b3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21, skipping insertion in model container [2023-11-06 21:54:21,076 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,127 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 21:54:21,317 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2023-11-06 21:54:21,411 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 21:54:21,422 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 21:54:21,433 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] [2023-11-06 21:54:21,435 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] [2023-11-06 21:54:21,435 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] [2023-11-06 21:54:21,436 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] [2023-11-06 21:54:21,436 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] [2023-11-06 21:54:21,436 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] [2023-11-06 21:54:21,436 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] [2023-11-06 21:54:21,437 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] [2023-11-06 21:54:21,447 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/sv-benchmarks/c/product-lines/minepump_spec1_product59.cil.c[3645,3658] [2023-11-06 21:54:21,512 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 21:54:21,540 INFO L206 MainTranslator]: Completed translation [2023-11-06 21:54:21,541 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21 WrapperNode [2023-11-06 21:54:21,541 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 21:54:21,542 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 21:54:21,542 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 21:54:21,542 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 21:54:21,550 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,572 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,606 INFO L138 Inliner]: procedures = 57, calls = 102, calls flagged for inlining = 24, calls inlined = 21, statements flattened = 218 [2023-11-06 21:54:21,607 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 21:54:21,608 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 21:54:21,608 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 21:54:21,608 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 21:54:21,618 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,618 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,621 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,621 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,629 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,647 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,649 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,651 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,653 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 21:54:21,654 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 21:54:21,655 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 21:54:21,655 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 21:54:21,656 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (1/1) ... [2023-11-06 21:54:21,663 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 21:54:21,681 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 21:54:21,698 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 21:54:21,718 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 21:54:21,745 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 21:54:21,745 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 21:54:21,745 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 21:54:21,745 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 21:54:21,745 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 21:54:21,746 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 21:54:21,746 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 21:54:21,746 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 21:54:21,746 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 21:54:21,746 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 21:54:21,746 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 21:54:21,747 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 21:54:21,747 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 21:54:21,747 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 21:54:21,747 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 21:54:21,747 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 21:54:21,747 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 21:54:21,747 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 21:54:21,748 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 21:54:21,748 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 21:54:21,833 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 21:54:21,835 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 21:54:22,161 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 21:54:22,173 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 21:54:22,178 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 21:54:22,181 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 09:54:22 BoogieIcfgContainer [2023-11-06 21:54:22,181 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 21:54:22,183 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 21:54:22,183 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 21:54:22,186 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 21:54:22,187 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 09:54:21" (1/3) ... [2023-11-06 21:54:22,187 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47e07b55 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 09:54:22, skipping insertion in model container [2023-11-06 21:54:22,188 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 09:54:21" (2/3) ... [2023-11-06 21:54:22,188 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@47e07b55 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 09:54:22, skipping insertion in model container [2023-11-06 21:54:22,188 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 09:54:22" (3/3) ... [2023-11-06 21:54:22,190 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product59.cil.c [2023-11-06 21:54:22,211 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 21:54:22,212 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 21:54:22,289 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 21:54:22,297 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@792ab508, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 21:54:22,322 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 21:54:22,329 INFO L276 IsEmpty]: Start isEmpty. Operand has 98 states, 74 states have (on average 1.3783783783783783) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) [2023-11-06 21:54:22,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-06 21:54:22,342 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:22,343 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:22,344 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:22,352 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:22,352 INFO L85 PathProgramCache]: Analyzing trace with hash 896796979, now seen corresponding path program 1 times [2023-11-06 21:54:22,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:22,362 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2078290208] [2023-11-06 21:54:22,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:22,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:22,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:22,538 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 21:54:22,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:22,549 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 21:54:22,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:22,550 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2078290208] [2023-11-06 21:54:22,551 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2078290208] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:22,551 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:22,551 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 21:54:22,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [64319572] [2023-11-06 21:54:22,554 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:22,558 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 21:54:22,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:22,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 21:54:22,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 21:54:22,595 INFO L87 Difference]: Start difference. First operand has 98 states, 74 states have (on average 1.3783783783783783) internal successors, (102), 83 states have internal predecessors, (102), 14 states have call successors, (14), 8 states have call predecessors, (14), 8 states have return successors, (14), 11 states have call predecessors, (14), 14 states have call successors, (14) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:22,659 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:22,659 INFO L93 Difference]: Finished difference Result 188 states and 255 transitions. [2023-11-06 21:54:22,660 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 21:54:22,661 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-06 21:54:22,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:22,671 INFO L225 Difference]: With dead ends: 188 [2023-11-06 21:54:22,671 INFO L226 Difference]: Without dead ends: 89 [2023-11-06 21:54:22,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 21:54:22,679 INFO L413 NwaCegarLoop]: 124 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:22,680 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 21:54:22,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2023-11-06 21:54:22,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2023-11-06 21:54:22,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 67 states have (on average 1.3134328358208955) internal successors, (88), 75 states have internal predecessors, (88), 14 states have call successors, (14), 8 states have call predecessors, (14), 7 states have return successors, (13), 10 states have call predecessors, (13), 13 states have call successors, (13) [2023-11-06 21:54:22,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 115 transitions. [2023-11-06 21:54:22,726 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 115 transitions. Word has length 23 [2023-11-06 21:54:22,727 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:22,727 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 115 transitions. [2023-11-06 21:54:22,727 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:22,728 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 115 transitions. [2023-11-06 21:54:22,730 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 21:54:22,730 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:22,731 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:22,731 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 21:54:22,731 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:22,732 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:22,732 INFO L85 PathProgramCache]: Analyzing trace with hash 1625202696, now seen corresponding path program 1 times [2023-11-06 21:54:22,733 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:22,733 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165716798] [2023-11-06 21:54:22,733 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:22,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:22,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:22,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 21:54:22,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:22,868 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 21:54:22,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:22,869 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165716798] [2023-11-06 21:54:22,869 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165716798] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:22,869 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:22,870 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 21:54:22,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1590930345] [2023-11-06 21:54:22,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:22,872 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 21:54:22,872 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:22,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 21:54:22,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 21:54:22,874 INFO L87 Difference]: Start difference. First operand 89 states and 115 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:22,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:22,910 INFO L93 Difference]: Finished difference Result 140 states and 180 transitions. [2023-11-06 21:54:22,910 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 21:54:22,911 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-06 21:54:22,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:22,919 INFO L225 Difference]: With dead ends: 140 [2023-11-06 21:54:22,920 INFO L226 Difference]: Without dead ends: 80 [2023-11-06 21:54:22,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 21:54:22,923 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 16 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 183 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:22,925 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 183 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 21:54:22,927 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2023-11-06 21:54:22,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 80. [2023-11-06 21:54:22,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80 states, 61 states have (on average 1.3278688524590163) internal successors, (81), 69 states have internal predecessors, (81), 11 states have call successors, (11), 7 states have call predecessors, (11), 7 states have return successors, (11), 8 states have call predecessors, (11), 11 states have call successors, (11) [2023-11-06 21:54:22,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80 states to 80 states and 103 transitions. [2023-11-06 21:54:22,952 INFO L78 Accepts]: Start accepts. Automaton has 80 states and 103 transitions. Word has length 24 [2023-11-06 21:54:22,952 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:22,952 INFO L495 AbstractCegarLoop]: Abstraction has 80 states and 103 transitions. [2023-11-06 21:54:22,952 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:22,953 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 103 transitions. [2023-11-06 21:54:22,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 21:54:22,957 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:22,957 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:22,957 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 21:54:22,958 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:22,958 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:22,958 INFO L85 PathProgramCache]: Analyzing trace with hash 2098135563, now seen corresponding path program 1 times [2023-11-06 21:54:22,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:22,959 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1871265065] [2023-11-06 21:54:22,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:22,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:22,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:23,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 21:54:23,158 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:23,158 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1871265065] [2023-11-06 21:54:23,159 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1871265065] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:23,159 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:23,159 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 21:54:23,159 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792538581] [2023-11-06 21:54:23,159 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:23,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 21:54:23,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:23,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 21:54:23,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 21:54:23,162 INFO L87 Difference]: Start difference. First operand 80 states and 103 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:23,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:23,222 INFO L93 Difference]: Finished difference Result 225 states and 295 transitions. [2023-11-06 21:54:23,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 21:54:23,223 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-06 21:54:23,223 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:23,227 INFO L225 Difference]: With dead ends: 225 [2023-11-06 21:54:23,228 INFO L226 Difference]: Without dead ends: 152 [2023-11-06 21:54:23,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 21:54:23,230 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 83 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 211 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:23,231 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 211 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 21:54:23,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2023-11-06 21:54:23,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 149. [2023-11-06 21:54:23,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 149 states, 112 states have (on average 1.3482142857142858) internal successors, (151), 127 states have internal predecessors, (151), 22 states have call successors, (22), 14 states have call predecessors, (22), 14 states have return successors, (22), 15 states have call predecessors, (22), 22 states have call successors, (22) [2023-11-06 21:54:23,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 195 transitions. [2023-11-06 21:54:23,281 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 195 transitions. Word has length 28 [2023-11-06 21:54:23,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:23,281 INFO L495 AbstractCegarLoop]: Abstraction has 149 states and 195 transitions. [2023-11-06 21:54:23,282 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:23,282 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 195 transitions. [2023-11-06 21:54:23,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 21:54:23,296 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:23,297 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:23,298 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 21:54:23,298 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:23,299 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:23,299 INFO L85 PathProgramCache]: Analyzing trace with hash -440127999, now seen corresponding path program 1 times [2023-11-06 21:54:23,300 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:23,300 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373945258] [2023-11-06 21:54:23,300 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:23,300 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:23,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,441 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 21:54:23,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 21:54:23,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:23,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1373945258] [2023-11-06 21:54:23,449 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1373945258] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:23,449 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:23,449 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 21:54:23,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [605783240] [2023-11-06 21:54:23,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:23,450 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 21:54:23,450 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:23,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 21:54:23,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 21:54:23,452 INFO L87 Difference]: Start difference. First operand 149 states and 195 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:23,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:23,596 INFO L93 Difference]: Finished difference Result 383 states and 512 transitions. [2023-11-06 21:54:23,597 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 21:54:23,597 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 21:54:23,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:23,608 INFO L225 Difference]: With dead ends: 383 [2023-11-06 21:54:23,609 INFO L226 Difference]: Without dead ends: 241 [2023-11-06 21:54:23,612 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 21:54:23,618 INFO L413 NwaCegarLoop]: 100 mSDtfsCounter, 60 mSDsluCounter, 260 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 60 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:23,620 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [60 Valid, 360 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 21:54:23,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241 states. [2023-11-06 21:54:23,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241 to 232. [2023-11-06 21:54:23,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 232 states, 175 states have (on average 1.3085714285714285) internal successors, (229), 192 states have internal predecessors, (229), 30 states have call successors, (30), 26 states have call predecessors, (30), 26 states have return successors, (38), 27 states have call predecessors, (38), 30 states have call successors, (38) [2023-11-06 21:54:23,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 297 transitions. [2023-11-06 21:54:23,679 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 297 transitions. Word has length 32 [2023-11-06 21:54:23,679 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:23,680 INFO L495 AbstractCegarLoop]: Abstraction has 232 states and 297 transitions. [2023-11-06 21:54:23,680 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 21:54:23,680 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 297 transitions. [2023-11-06 21:54:23,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 21:54:23,683 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:23,683 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:23,683 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 21:54:23,684 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:23,684 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:23,684 INFO L85 PathProgramCache]: Analyzing trace with hash -1819334165, now seen corresponding path program 1 times [2023-11-06 21:54:23,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:23,685 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1342235167] [2023-11-06 21:54:23,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:23,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:23,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:23,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:23,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 21:54:23,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:23,927 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 21:54:23,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:23,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1342235167] [2023-11-06 21:54:23,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1342235167] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:23,928 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:23,929 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 21:54:23,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287493532] [2023-11-06 21:54:23,929 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:23,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 21:54:23,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:23,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 21:54:23,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 21:54:23,931 INFO L87 Difference]: Start difference. First operand 232 states and 297 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 21:54:24,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:24,196 INFO L93 Difference]: Finished difference Result 519 states and 682 transitions. [2023-11-06 21:54:24,197 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 21:54:24,197 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2023-11-06 21:54:24,198 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:24,202 INFO L225 Difference]: With dead ends: 519 [2023-11-06 21:54:24,202 INFO L226 Difference]: Without dead ends: 294 [2023-11-06 21:54:24,204 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 21:54:24,214 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 63 mSDsluCounter, 268 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:24,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 349 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 21:54:24,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2023-11-06 21:54:24,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 282. [2023-11-06 21:54:24,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 282 states, 215 states have (on average 1.2790697674418605) internal successors, (275), 232 states have internal predecessors, (275), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-06 21:54:24,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 357 transitions. [2023-11-06 21:54:24,274 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 357 transitions. Word has length 50 [2023-11-06 21:54:24,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:24,275 INFO L495 AbstractCegarLoop]: Abstraction has 282 states and 357 transitions. [2023-11-06 21:54:24,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 21:54:24,278 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 357 transitions. [2023-11-06 21:54:24,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 21:54:24,288 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:24,288 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:24,289 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 21:54:24,290 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:24,291 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:24,291 INFO L85 PathProgramCache]: Analyzing trace with hash -1757294551, now seen corresponding path program 1 times [2023-11-06 21:54:24,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:24,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329627401] [2023-11-06 21:54:24,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:24,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:24,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:24,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:24,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 21:54:24,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,417 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 21:54:24,417 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:24,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329627401] [2023-11-06 21:54:24,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329627401] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:24,418 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:24,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 21:54:24,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1896326308] [2023-11-06 21:54:24,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:24,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 21:54:24,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:24,420 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 21:54:24,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 21:54:24,421 INFO L87 Difference]: Start difference. First operand 282 states and 357 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 21:54:24,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:24,578 INFO L93 Difference]: Finished difference Result 575 states and 746 transitions. [2023-11-06 21:54:24,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 21:54:24,579 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) Word has length 50 [2023-11-06 21:54:24,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:24,582 INFO L225 Difference]: With dead ends: 575 [2023-11-06 21:54:24,582 INFO L226 Difference]: Without dead ends: 300 [2023-11-06 21:54:24,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 21:54:24,585 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 67 mSDsluCounter, 191 mSDsCounter, 0 mSdLazyCounter, 94 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 272 SdHoareTripleChecker+Invalid, 111 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 94 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:24,585 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 272 Invalid, 111 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 94 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 21:54:24,587 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2023-11-06 21:54:24,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 286. [2023-11-06 21:54:24,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 286 states, 219 states have (on average 1.273972602739726) internal successors, (279), 236 states have internal predecessors, (279), 34 states have call successors, (34), 26 states have call predecessors, (34), 32 states have return successors, (48), 35 states have call predecessors, (48), 34 states have call successors, (48) [2023-11-06 21:54:24,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 361 transitions. [2023-11-06 21:54:24,619 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 361 transitions. Word has length 50 [2023-11-06 21:54:24,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:24,620 INFO L495 AbstractCegarLoop]: Abstraction has 286 states and 361 transitions. [2023-11-06 21:54:24,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 1 states have call predecessors, (3), 2 states have call successors, (3) [2023-11-06 21:54:24,620 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 361 transitions. [2023-11-06 21:54:24,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2023-11-06 21:54:24,622 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:24,622 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:24,622 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 21:54:24,622 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:24,623 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:24,623 INFO L85 PathProgramCache]: Analyzing trace with hash 2028199655, now seen corresponding path program 1 times [2023-11-06 21:54:24,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:24,624 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1107086046] [2023-11-06 21:54:24,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:24,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:24,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:24,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:24,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2023-11-06 21:54:24,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:24,779 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 21:54:24,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:24,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1107086046] [2023-11-06 21:54:24,780 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1107086046] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:24,780 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:24,780 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 21:54:24,780 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1585197575] [2023-11-06 21:54:24,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:24,781 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 21:54:24,782 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:24,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 21:54:24,783 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 21:54:24,783 INFO L87 Difference]: Start difference. First operand 286 states and 361 transitions. Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 21:54:25,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:25,072 INFO L93 Difference]: Finished difference Result 813 states and 1066 transitions. [2023-11-06 21:54:25,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 21:54:25,073 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 50 [2023-11-06 21:54:25,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:25,078 INFO L225 Difference]: With dead ends: 813 [2023-11-06 21:54:25,078 INFO L226 Difference]: Without dead ends: 534 [2023-11-06 21:54:25,079 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 21:54:25,080 INFO L413 NwaCegarLoop]: 122 mSDtfsCounter, 217 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 223 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:25,081 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [223 Valid, 293 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 21:54:25,082 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 534 states. [2023-11-06 21:54:25,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 534 to 527. [2023-11-06 21:54:25,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 527 states, 400 states have (on average 1.2475) internal successors, (499), 426 states have internal predecessors, (499), 65 states have call successors, (65), 59 states have call predecessors, (65), 61 states have return successors, (103), 64 states have call predecessors, (103), 65 states have call successors, (103) [2023-11-06 21:54:25,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 527 states to 527 states and 667 transitions. [2023-11-06 21:54:25,145 INFO L78 Accepts]: Start accepts. Automaton has 527 states and 667 transitions. Word has length 50 [2023-11-06 21:54:25,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:25,145 INFO L495 AbstractCegarLoop]: Abstraction has 527 states and 667 transitions. [2023-11-06 21:54:25,145 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 8.2) internal successors, (41), 4 states have internal predecessors, (41), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2023-11-06 21:54:25,146 INFO L276 IsEmpty]: Start isEmpty. Operand 527 states and 667 transitions. [2023-11-06 21:54:25,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2023-11-06 21:54:25,147 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:25,147 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:25,147 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 21:54:25,148 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:25,148 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:25,148 INFO L85 PathProgramCache]: Analyzing trace with hash -149120115, now seen corresponding path program 1 times [2023-11-06 21:54:25,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:25,148 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1762698138] [2023-11-06 21:54:25,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:25,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:25,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:25,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 21:54:25,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:25,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 21:54:25,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:25,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:25,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:25,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2023-11-06 21:54:25,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:25,308 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 21:54:25,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:25,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1762698138] [2023-11-06 21:54:25,309 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1762698138] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:25,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:25,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 21:54:25,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [307954133] [2023-11-06 21:54:25,310 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:25,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 21:54:25,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:25,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 21:54:25,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 21:54:25,311 INFO L87 Difference]: Start difference. First operand 527 states and 667 transitions. Second operand has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 21:54:26,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:26,053 INFO L93 Difference]: Finished difference Result 1801 states and 2361 transitions. [2023-11-06 21:54:26,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-06 21:54:26,054 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) Word has length 54 [2023-11-06 21:54:26,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:26,066 INFO L225 Difference]: With dead ends: 1801 [2023-11-06 21:54:26,067 INFO L226 Difference]: Without dead ends: 1281 [2023-11-06 21:54:26,070 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 128 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2023-11-06 21:54:26,071 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 319 mSDsluCounter, 316 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 110 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 325 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 454 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 110 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:26,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [325 Valid, 386 Invalid, 454 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [110 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 21:54:26,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2023-11-06 21:54:26,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 1217. [2023-11-06 21:54:26,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1217 states, 916 states have (on average 1.2161572052401746) internal successors, (1114), 983 states have internal predecessors, (1114), 158 states have call successors, (158), 118 states have call predecessors, (158), 142 states have return successors, (284), 160 states have call predecessors, (284), 158 states have call successors, (284) [2023-11-06 21:54:26,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1217 states to 1217 states and 1556 transitions. [2023-11-06 21:54:26,241 INFO L78 Accepts]: Start accepts. Automaton has 1217 states and 1556 transitions. Word has length 54 [2023-11-06 21:54:26,243 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:26,243 INFO L495 AbstractCegarLoop]: Abstraction has 1217 states and 1556 transitions. [2023-11-06 21:54:26,243 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.625) internal successors, (45), 5 states have internal predecessors, (45), 2 states have call successors, (5), 4 states have call predecessors, (5), 2 states have return successors, (4), 3 states have call predecessors, (4), 2 states have call successors, (4) [2023-11-06 21:54:26,243 INFO L276 IsEmpty]: Start isEmpty. Operand 1217 states and 1556 transitions. [2023-11-06 21:54:26,246 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2023-11-06 21:54:26,246 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:26,246 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:26,247 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 21:54:26,247 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:26,248 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:26,248 INFO L85 PathProgramCache]: Analyzing trace with hash 740773105, now seen corresponding path program 1 times [2023-11-06 21:54:26,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:26,248 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1235736096] [2023-11-06 21:54:26,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:26,249 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:26,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 21:54:26,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 21:54:26,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 21:54:26,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:26,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2023-11-06 21:54:26,500 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,501 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 21:54:26,502 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:26,502 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1235736096] [2023-11-06 21:54:26,502 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1235736096] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 21:54:26,502 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1654950196] [2023-11-06 21:54:26,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:26,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 21:54:26,503 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 21:54:26,510 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 21:54:26,539 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 21:54:26,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:26,632 INFO L262 TraceCheckSpWp]: Trace formula consists of 233 conjuncts, 8 conjunts are in the unsatisfiable core [2023-11-06 21:54:26,639 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 21:54:26,858 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 21:54:26,858 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 21:54:26,859 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1654950196] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:26,859 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 21:54:26,859 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [11] total 16 [2023-11-06 21:54:26,859 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352255223] [2023-11-06 21:54:26,860 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:26,860 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2023-11-06 21:54:26,860 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:26,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-06 21:54:26,861 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=202, Unknown=0, NotChecked=0, Total=240 [2023-11-06 21:54:26,861 INFO L87 Difference]: Start difference. First operand 1217 states and 1556 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 21:54:27,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:27,158 INFO L93 Difference]: Finished difference Result 2365 states and 3043 transitions. [2023-11-06 21:54:27,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 21:54:27,158 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2023-11-06 21:54:27,159 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:27,168 INFO L225 Difference]: With dead ends: 2365 [2023-11-06 21:54:27,168 INFO L226 Difference]: Without dead ends: 1155 [2023-11-06 21:54:27,173 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=45, Invalid=227, Unknown=0, NotChecked=0, Total=272 [2023-11-06 21:54:27,174 INFO L413 NwaCegarLoop]: 187 mSDtfsCounter, 73 mSDsluCounter, 355 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 542 SdHoareTripleChecker+Invalid, 122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:27,175 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 542 Invalid, 122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 21:54:27,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1155 states. [2023-11-06 21:54:27,292 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1155 to 1151. [2023-11-06 21:54:27,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1151 states, 864 states have (on average 1.2037037037037037) internal successors, (1040), 929 states have internal predecessors, (1040), 152 states have call successors, (152), 114 states have call predecessors, (152), 134 states have return successors, (246), 150 states have call predecessors, (246), 152 states have call successors, (246) [2023-11-06 21:54:27,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1151 states to 1151 states and 1438 transitions. [2023-11-06 21:54:27,305 INFO L78 Accepts]: Start accepts. Automaton has 1151 states and 1438 transitions. Word has length 58 [2023-11-06 21:54:27,305 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:27,305 INFO L495 AbstractCegarLoop]: Abstraction has 1151 states and 1438 transitions. [2023-11-06 21:54:27,306 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 6 states have internal predecessors, (47), 3 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 3 states have call successors, (5) [2023-11-06 21:54:27,306 INFO L276 IsEmpty]: Start isEmpty. Operand 1151 states and 1438 transitions. [2023-11-06 21:54:27,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2023-11-06 21:54:27,309 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:27,310 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:27,321 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 21:54:27,516 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2023-11-06 21:54:27,516 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:27,517 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:27,517 INFO L85 PathProgramCache]: Analyzing trace with hash -425325145, now seen corresponding path program 1 times [2023-11-06 21:54:27,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:27,517 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [454507138] [2023-11-06 21:54:27,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:27,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:27,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 21:54:27,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 21:54:27,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 21:54:27,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,639 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:27,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 21:54:27,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2023-11-06 21:54:27,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,656 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2023-11-06 21:54:27,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:27,673 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 21:54:27,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:27,674 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [454507138] [2023-11-06 21:54:27,674 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [454507138] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:27,674 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 21:54:27,674 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 21:54:27,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2009178938] [2023-11-06 21:54:27,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:27,675 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 21:54:27,675 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:27,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 21:54:27,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 21:54:27,677 INFO L87 Difference]: Start difference. First operand 1151 states and 1438 transitions. Second operand has 8 states, 8 states have (on average 8.25) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-06 21:54:28,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:28,231 INFO L93 Difference]: Finished difference Result 1399 states and 1738 transitions. [2023-11-06 21:54:28,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-06 21:54:28,232 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) Word has length 85 [2023-11-06 21:54:28,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:28,238 INFO L225 Difference]: With dead ends: 1399 [2023-11-06 21:54:28,238 INFO L226 Difference]: Without dead ends: 582 [2023-11-06 21:54:28,241 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 32 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2023-11-06 21:54:28,242 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 430 mSDsluCounter, 147 mSDsCounter, 0 mSdLazyCounter, 337 mSolverCounterSat, 126 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 202 SdHoareTripleChecker+Invalid, 463 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 126 IncrementalHoareTripleChecker+Valid, 337 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:28,243 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 202 Invalid, 463 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [126 Valid, 337 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2023-11-06 21:54:28,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 582 states. [2023-11-06 21:54:28,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 582 to 562. [2023-11-06 21:54:28,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 562 states, 422 states have (on average 1.1658767772511849) internal successors, (492), 452 states have internal predecessors, (492), 73 states have call successors, (73), 56 states have call predecessors, (73), 66 states have return successors, (120), 73 states have call predecessors, (120), 73 states have call successors, (120) [2023-11-06 21:54:28,316 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 562 states to 562 states and 685 transitions. [2023-11-06 21:54:28,317 INFO L78 Accepts]: Start accepts. Automaton has 562 states and 685 transitions. Word has length 85 [2023-11-06 21:54:28,317 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:28,317 INFO L495 AbstractCegarLoop]: Abstraction has 562 states and 685 transitions. [2023-11-06 21:54:28,317 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.25) internal successors, (66), 4 states have internal predecessors, (66), 4 states have call successors, (8), 6 states have call predecessors, (8), 2 states have return successors, (7), 3 states have call predecessors, (7), 4 states have call successors, (7) [2023-11-06 21:54:28,317 INFO L276 IsEmpty]: Start isEmpty. Operand 562 states and 685 transitions. [2023-11-06 21:54:28,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-11-06 21:54:28,321 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:28,321 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:28,321 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 21:54:28,322 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:28,322 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:28,322 INFO L85 PathProgramCache]: Analyzing trace with hash 2065692327, now seen corresponding path program 1 times [2023-11-06 21:54:28,323 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:28,323 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1445116154] [2023-11-06 21:54:28,323 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:28,323 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:28,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 21:54:28,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:28,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 21:54:28,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:28,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,589 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 21:54:28,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-06 21:54:28,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-06 21:54:28,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 21:54:28,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2023-11-06 21:54:28,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,611 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 16 proven. 3 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2023-11-06 21:54:28,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:28,611 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1445116154] [2023-11-06 21:54:28,611 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1445116154] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 21:54:28,611 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [90421205] [2023-11-06 21:54:28,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:28,612 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 21:54:28,612 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 21:54:28,613 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 21:54:28,639 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 21:54:28,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:28,730 INFO L262 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 11 conjunts are in the unsatisfiable core [2023-11-06 21:54:28,734 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 21:54:28,861 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 21:54:28,861 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 21:54:28,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [90421205] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:28,861 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 21:54:28,861 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [10] total 10 [2023-11-06 21:54:28,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [297966074] [2023-11-06 21:54:28,862 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:28,862 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 21:54:28,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:28,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 21:54:28,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2023-11-06 21:54:28,863 INFO L87 Difference]: Start difference. First operand 562 states and 685 transitions. Second operand has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-06 21:54:29,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:29,094 INFO L93 Difference]: Finished difference Result 1353 states and 1733 transitions. [2023-11-06 21:54:29,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 21:54:29,095 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 96 [2023-11-06 21:54:29,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:29,102 INFO L225 Difference]: With dead ends: 1353 [2023-11-06 21:54:29,102 INFO L226 Difference]: Without dead ends: 892 [2023-11-06 21:54:29,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 112 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2023-11-06 21:54:29,106 INFO L413 NwaCegarLoop]: 155 mSDtfsCounter, 119 mSDsluCounter, 436 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 591 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:29,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 591 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 21:54:29,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 892 states. [2023-11-06 21:54:29,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 892 to 806. [2023-11-06 21:54:29,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 806 states, 602 states have (on average 1.1677740863787376) internal successors, (703), 644 states have internal predecessors, (703), 106 states have call successors, (106), 82 states have call predecessors, (106), 97 states have return successors, (184), 103 states have call predecessors, (184), 106 states have call successors, (184) [2023-11-06 21:54:29,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 806 states to 806 states and 993 transitions. [2023-11-06 21:54:29,212 INFO L78 Accepts]: Start accepts. Automaton has 806 states and 993 transitions. Word has length 96 [2023-11-06 21:54:29,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:29,214 INFO L495 AbstractCegarLoop]: Abstraction has 806 states and 993 transitions. [2023-11-06 21:54:29,214 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 12.5) internal successors, (75), 6 states have internal predecessors, (75), 3 states have call successors, (10), 3 states have call predecessors, (10), 3 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2023-11-06 21:54:29,214 INFO L276 IsEmpty]: Start isEmpty. Operand 806 states and 993 transitions. [2023-11-06 21:54:29,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2023-11-06 21:54:29,222 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 21:54:29,223 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:29,236 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2023-11-06 21:54:29,429 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2023-11-06 21:54:29,429 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 21:54:29,430 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 21:54:29,430 INFO L85 PathProgramCache]: Analyzing trace with hash 260253993, now seen corresponding path program 1 times [2023-11-06 21:54:29,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 21:54:29,430 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639240599] [2023-11-06 21:54:29,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:29,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 21:54:29,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 21:54:29,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 21:54:29,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 21:54:29,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 21:54:29,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2023-11-06 21:54:29,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2023-11-06 21:54:29,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2023-11-06 21:54:29,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 21:54:29,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 87 [2023-11-06 21:54:29,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,598 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 1 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2023-11-06 21:54:29,598 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 21:54:29,599 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639240599] [2023-11-06 21:54:29,599 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639240599] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 21:54:29,599 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1575251886] [2023-11-06 21:54:29,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 21:54:29,599 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 21:54:29,600 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 21:54:29,601 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 21:54:29,608 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2023-11-06 21:54:29,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 21:54:29,722 INFO L262 TraceCheckSpWp]: Trace formula consists of 325 conjuncts, 5 conjunts are in the unsatisfiable core [2023-11-06 21:54:29,734 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 21:54:29,799 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2023-11-06 21:54:29,799 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 21:54:29,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1575251886] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 21:54:29,799 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 21:54:29,799 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [9] total 12 [2023-11-06 21:54:29,800 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290735604] [2023-11-06 21:54:29,800 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 21:54:29,801 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 21:54:29,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 21:54:29,801 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 21:54:29,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=26, Invalid=106, Unknown=0, NotChecked=0, Total=132 [2023-11-06 21:54:29,802 INFO L87 Difference]: Start difference. First operand 806 states and 993 transitions. Second operand has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 21:54:29,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 21:54:29,888 INFO L93 Difference]: Finished difference Result 1139 states and 1394 transitions. [2023-11-06 21:54:29,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 21:54:29,889 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 96 [2023-11-06 21:54:29,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 21:54:29,890 INFO L225 Difference]: With dead ends: 1139 [2023-11-06 21:54:29,890 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 21:54:29,894 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=148, Unknown=0, NotChecked=0, Total=182 [2023-11-06 21:54:29,895 INFO L413 NwaCegarLoop]: 94 mSDtfsCounter, 13 mSDsluCounter, 264 mSDsCounter, 0 mSdLazyCounter, 11 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 358 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 11 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 21:54:29,896 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 358 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 11 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 21:54:29,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 21:54:29,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 21:54:29,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 21:54:29,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 21:54:29,897 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 96 [2023-11-06 21:54:29,897 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 21:54:29,898 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 21:54:29,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 13.6) internal successors, (68), 5 states have internal predecessors, (68), 2 states have call successors, (9), 2 states have call predecessors, (9), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2023-11-06 21:54:29,898 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 21:54:29,898 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 21:54:29,901 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 21:54:29,912 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2023-11-06 21:54:30,107 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 21:54:30,109 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 21:54:35,787 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 383 390) no Hoare annotation was computed. [2023-11-06 21:54:35,787 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 383 390) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~waterLevel~0 2)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5) (or .cse0 .cse3 .cse4 .cse5))) [2023-11-06 21:54:35,788 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 383 390) no Hoare annotation was computed. [2023-11-06 21:54:35,788 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 298 304) no Hoare annotation was computed. [2023-11-06 21:54:35,788 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 298 304) the Hoare annotation is: true [2023-11-06 21:54:35,788 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 84 95) the Hoare annotation is: (let ((.cse2 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse3 (< |old(~methaneLevelCritical~0)| 1)) (.cse6 (not (= 0 ~systemActive~0))) (.cse4 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= 1 ~systemActive~0)))) (and (or .cse0 (< ~waterLevel~0 1) .cse1 .cse2 .cse3) (or .cse4 .cse0 .cse5 .cse6) (or .cse0 .cse2 .cse3 .cse6) (or .cse4 .cse5 .cse1 (< ~waterLevel~0 2)) (or (not (= ~waterLevel~0 1)) .cse4 .cse0 .cse5 .cse1))) [2023-11-06 21:54:35,788 INFO L899 garLoopResultBuilder]: For program point L88-1(lines 84 95) no Hoare annotation was computed. [2023-11-06 21:54:35,788 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 84 95) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 906 935) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L899 garLoopResultBuilder]: For program point L927(line 927) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L899 garLoopResultBuilder]: For program point L920(lines 920 924) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L902 garLoopResultBuilder]: At program point L920-1(lines 920 924) the Hoare annotation is: true [2023-11-06 21:54:35,789 INFO L899 garLoopResultBuilder]: For program point L917(line 917) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L902 garLoopResultBuilder]: At program point L916-2(lines 916 930) the Hoare annotation is: true [2023-11-06 21:54:35,789 INFO L902 garLoopResultBuilder]: At program point L912(line 912) the Hoare annotation is: true [2023-11-06 21:54:35,789 INFO L899 garLoopResultBuilder]: For program point L912-1(line 912) no Hoare annotation was computed. [2023-11-06 21:54:35,789 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 906 935) the Hoare annotation is: true [2023-11-06 21:54:35,790 INFO L902 garLoopResultBuilder]: At program point L931(lines 906 935) the Hoare annotation is: true [2023-11-06 21:54:35,790 INFO L899 garLoopResultBuilder]: For program point L64(lines 64 68) no Hoare annotation was computed. [2023-11-06 21:54:35,790 INFO L895 garLoopResultBuilder]: At program point L64-2(lines 60 71) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse3 .cse5 .cse1 .cse6) (or .cse0 (< |old(~waterLevel~0)| 1) .cse3 .cse1) (or .cse0 .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse6 .cse4) (or .cse0 .cse4 .cse2))) [2023-11-06 21:54:35,790 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 151 159) the Hoare annotation is: (let ((.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 ~waterLevel~0))) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse4 .cse2) (or .cse5 .cse4 .cse6) (or .cse5 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3) (or .cse5 (< |old(~waterLevel~0)| 1) .cse0 .cse4) (or .cse5 .cse0 .cse1 .cse3) (or .cse5 .cse3 .cse6))) [2023-11-06 21:54:35,791 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 274 297) no Hoare annotation was computed. [2023-11-06 21:54:35,796 INFO L899 garLoopResultBuilder]: For program point L193(line 193) no Hoare annotation was computed. [2023-11-06 21:54:35,797 INFO L895 garLoopResultBuilder]: At program point L346(line 346) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse0 (< |old(~waterLevel~0)| 1) .cse3 .cse1) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse1) (or .cse0 .cse4 .cse2))) [2023-11-06 21:54:35,797 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_processEnvironment_~tmp~3#1|) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 ~waterLevel~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse6) (or .cse4 (not (= |old(~waterLevel~0)| 1)) .cse0 .cse3) (or .cse4 (< |old(~waterLevel~0)| 1) .cse0 .cse5) (or .cse4 .cse0 .cse1 .cse3) (or .cse4 .cse3 .cse6) (or .cse0 .cse1 .cse5 .cse2))) [2023-11-06 21:54:35,798 INFO L895 garLoopResultBuilder]: At program point L169(line 169) the Hoare annotation is: (let ((.cse6 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (= ~pumpRunning~0 0))) (let ((.cse2 (not (= 1 ~systemActive~0))) (.cse4 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse9 (and .cse8 (<= 1 ~waterLevel~0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse8 .cse6)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= 0 ~systemActive~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 1) .cse1 .cse2 .cse3) (or .cse0 .cse2 .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse5 .cse7) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse2 .cse5 (and .cse8 (= ~waterLevel~0 1))) (or .cse2 .cse4 .cse3 .cse9) (or .cse2 (<= 2 ~waterLevel~0) .cse4 .cse5 .cse9) (or .cse0 .cse1 .cse3 .cse7)))) [2023-11-06 21:54:35,798 INFO L899 garLoopResultBuilder]: For program point L169-1(line 169) no Hoare annotation was computed. [2023-11-06 21:54:35,798 INFO L895 garLoopResultBuilder]: At program point L351(line 351) the Hoare annotation is: (let ((.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (not (= ~methaneLevelCritical~0 0))) (.cse8 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (< |old(~waterLevel~0)| 2)) (.cse5 (not (= 0 ~systemActive~0))) (.cse0 (not .cse7)) (.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= |old(~waterLevel~0)| 1))) (.cse2 (not (= 1 ~systemActive~0))) (.cse9 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3 (and .cse4 (= ~waterLevel~0 1))) (or .cse0 .cse3 .cse5) (or .cse2 .cse6 (and .cse4 .cse7 .cse8) .cse3) (or .cse0 (< |old(~waterLevel~0)| 1) .cse2 .cse8 .cse9) (or .cse2 .cse6 .cse9 (and .cse4 .cse7)) (or .cse0 .cse9 .cse5) (or .cse0 .cse4 .cse1 .cse2 .cse9)))) [2023-11-06 21:54:35,799 INFO L895 garLoopResultBuilder]: At program point L351-1(lines 332 356) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0))) (let ((.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse7 (not (= 0 ~systemActive~0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse8 (and .cse1 (<= 1 ~waterLevel~0)))) (and (or .cse0 (< |old(~waterLevel~0)| 1) (and .cse1 .cse2) .cse3 .cse4) (or .cse0 .cse3 .cse5 .cse6 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse6 (and .cse1 (= ~waterLevel~0 1))) (or .cse0 .cse6 .cse7) (or .cse3 .cse5 .cse4 .cse8) (or .cse0 .cse4 .cse7) (or .cse3 (<= 2 ~waterLevel~0) .cse5 .cse6 .cse8)))) [2023-11-06 21:54:35,799 INFO L899 garLoopResultBuilder]: For program point L285-1(lines 285 291) no Hoare annotation was computed. [2023-11-06 21:54:35,799 INFO L899 garLoopResultBuilder]: For program point L475(lines 475 479) no Hoare annotation was computed. [2023-11-06 21:54:35,799 INFO L899 garLoopResultBuilder]: For program point L475-2(lines 475 479) no Hoare annotation was computed. [2023-11-06 21:54:35,799 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 189 196) the Hoare annotation is: (let ((.cse3 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse0 (< |old(~waterLevel~0)| 1) .cse3 .cse1) (or .cse3 .cse5 .cse4) (or .cse3 .cse5 .cse1) (or .cse0 .cse4 .cse2))) [2023-11-06 21:54:35,800 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 274 297) the Hoare annotation is: (let ((.cse10 (= ~pumpRunning~0 0)) (.cse11 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse11)) (.cse7 (not (= |old(~waterLevel~0)| 1))) (.cse4 (not (= 1 ~systemActive~0))) (.cse8 (and .cse10 (= ~waterLevel~0 1))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse10 .cse11)) (.cse9 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse5 .cse2 .cse6) (or .cse0 .cse7 .cse4 .cse2 .cse8) (or .cse4 .cse5 .cse6 .cse9) (or .cse0 .cse7 .cse4 .cse8 .cse9) (or .cse0 .cse1 .cse9 .cse3)))) [2023-11-06 21:54:35,800 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 466 484) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse6 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) (= |timeShift_isLowWaterSensorDry_#res#1| 0) (<= 1 |timeShift_isLowWaterLevel_#res#1|) (<= 1 |timeShift_isLowWaterLevel_~tmp___0~3#1|) (<= 1 ~waterLevel~0) (= |timeShift_isLowWaterLevel_~tmp~6#1| 0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse3 .cse4) (or .cse0 (< |old(~waterLevel~0)| 1) .cse3 .cse1) (or .cse0 .cse3 .cse5 .cse4) (or .cse3 .cse6 .cse5 .cse4) (or .cse0 .cse4 .cse2) (or .cse3 .cse6 .cse5 .cse1))) [2023-11-06 21:54:35,800 INFO L899 garLoopResultBuilder]: For program point L278-1(lines 277 296) no Hoare annotation was computed. [2023-11-06 21:54:35,800 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 348) no Hoare annotation was computed. [2023-11-06 21:54:35,800 INFO L899 garLoopResultBuilder]: For program point L336(lines 336 353) no Hoare annotation was computed. [2023-11-06 21:54:35,801 INFO L899 garLoopResultBuilder]: For program point L175(lines 175 181) no Hoare annotation was computed. [2023-11-06 21:54:35,801 INFO L899 garLoopResultBuilder]: For program point L171(lines 171 184) no Hoare annotation was computed. [2023-11-06 21:54:35,801 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 274 297) no Hoare annotation was computed. [2023-11-06 21:54:35,802 INFO L895 garLoopResultBuilder]: At program point L171-1(lines 163 187) the Hoare annotation is: (let ((.cse1 (= 1 ~systemActive~0))) (let ((.cse4 (< |old(~waterLevel~0)| 1)) (.cse5 (not .cse1)) (.cse11 (<= 2 ~waterLevel~0)) (.cse8 (< |old(~waterLevel~0)| 2)) (.cse9 (not (= ~methaneLevelCritical~0 0))) (.cse10 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~0#1| 0)) (.cse7 (<= 1 ~waterLevel~0)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (= ~pumpRunning~0 0)) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse12 (not (= 0 ~systemActive~0)))) (and (or (and .cse0 .cse1 .cse2) .cse3 .cse4 .cse5 .cse6) (or (and .cse0 .cse1 .cse7) .cse5 .cse8 .cse6) (or .cse3 .cse4 .cse5 .cse9 (and .cse0 .cse10 .cse1 .cse2) (and .cse11 .cse2)) (or (and .cse0 .cse10 .cse2) .cse3 .cse9 .cse12) (or .cse5 (and .cse10 .cse11) .cse8 .cse9 (and .cse0 .cse10 .cse1 .cse7)) (or .cse3 (and .cse0 .cse2) .cse6 .cse12)))) [2023-11-06 21:54:35,802 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 402 410) the Hoare annotation is: (let ((.cse2 (= ~pumpRunning~0 0)) (.cse3 (= |timeShift_isPumpRunning_#res#1| 0))) (let ((.cse7 (not (= 0 ~systemActive~0))) (.cse1 (< |old(~waterLevel~0)| 2)) (.cse6 (not (= ~methaneLevelCritical~0 0))) (.cse5 (not (= |old(~pumpRunning~0)| 0))) (.cse9 (< |old(~waterLevel~0)| 1)) (.cse0 (not (= 1 ~systemActive~0))) (.cse8 (and .cse2 .cse3 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 (and .cse2 .cse3 (<= 1 ~waterLevel~0)) .cse4) (or .cse5 .cse6 .cse7) (or .cse5 .cse8 .cse4 .cse7) (or .cse5 .cse9 .cse0 .cse6) (or .cse0 .cse1 .cse6) (or .cse5 .cse9 .cse0 .cse8 .cse4)))) [2023-11-06 21:54:35,802 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 193) no Hoare annotation was computed. [2023-11-06 21:54:35,802 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 96 104) the Hoare annotation is: true [2023-11-06 21:54:35,803 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 96 104) no Hoare annotation was computed. [2023-11-06 21:54:35,803 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 96 104) no Hoare annotation was computed. [2023-11-06 21:54:35,803 INFO L899 garLoopResultBuilder]: For program point L221(lines 221 227) no Hoare annotation was computed. [2023-11-06 21:54:35,803 INFO L899 garLoopResultBuilder]: For program point L221-1(lines 221 227) no Hoare annotation was computed. [2023-11-06 21:54:35,803 INFO L899 garLoopResultBuilder]: For program point L213(lines 213 217) no Hoare annotation was computed. [2023-11-06 21:54:35,803 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 967 976) the Hoare annotation is: true [2023-11-06 21:54:35,803 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 881 887) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 21:54:35,804 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 977 999) the Hoare annotation is: true [2023-11-06 21:54:35,804 INFO L895 garLoopResultBuilder]: At program point L259(lines 210 260) the Hoare annotation is: false [2023-11-06 21:54:35,804 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 21:54:35,804 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 21:54:35,804 INFO L899 garLoopResultBuilder]: For program point L247(lines 247 253) no Hoare annotation was computed. [2023-11-06 21:54:35,805 INFO L895 garLoopResultBuilder]: At program point L247-2(lines 241 254) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse4 (= ~pumpRunning~0 0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse7 (<= 1 ~waterLevel~0)) (.cse6 (= ~methaneLevelCritical~0 0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0)) (.cse3 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse4 .cse0 .cse3 .cse5) (and .cse4 .cse6 .cse2 .cse3 .cse7) (and .cse4 .cse6 .cse3 .cse5) (and .cse4 .cse0 .cse2 .cse3 .cse7) (and .cse6 .cse1 .cse2 .cse3))) [2023-11-06 21:54:35,805 INFO L895 garLoopResultBuilder]: At program point L491(line 491) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2023-11-06 21:54:35,805 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 960 966) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 21:54:35,805 INFO L899 garLoopResultBuilder]: For program point L231(lines 231 237) no Hoare annotation was computed. [2023-11-06 21:54:35,805 INFO L899 garLoopResultBuilder]: For program point L231-1(lines 231 237) no Hoare annotation was computed. [2023-11-06 21:54:35,805 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 21:54:35,806 INFO L895 garLoopResultBuilder]: At program point L256(lines 211 258) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-06 21:54:35,806 INFO L895 garLoopResultBuilder]: At program point L223(line 223) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-06 21:54:35,806 INFO L899 garLoopResultBuilder]: For program point L987(lines 987 994) no Hoare annotation was computed. [2023-11-06 21:54:35,806 INFO L899 garLoopResultBuilder]: For program point L987-2(lines 987 994) no Hoare annotation was computed. [2023-11-06 21:54:35,806 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 21:54:35,807 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 888 894) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 21:54:35,807 INFO L899 garLoopResultBuilder]: For program point L212(lines 211 258) no Hoare annotation was computed. [2023-11-06 21:54:35,808 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 485 499) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2023-11-06 21:54:35,809 INFO L899 garLoopResultBuilder]: For program point L241(lines 241 254) no Hoare annotation was computed. [2023-11-06 21:54:35,809 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 895 903) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 21:54:35,809 INFO L895 garLoopResultBuilder]: At program point L233(line 233) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse6 (<= 1 ~waterLevel~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse5 .cse2 .cse6) (and .cse0 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse5 .cse2 .cse6) (and .cse4 (<= 2 ~waterLevel~0) .cse5 .cse2))) [2023-11-06 21:54:35,809 INFO L899 garLoopResultBuilder]: For program point L489(lines 489 495) no Hoare annotation was computed. [2023-11-06 21:54:35,809 INFO L899 garLoopResultBuilder]: For program point L489-1(lines 489 495) no Hoare annotation was computed. [2023-11-06 21:54:35,810 INFO L902 garLoopResultBuilder]: At program point L262(lines 201 266) the Hoare annotation is: true [2023-11-06 21:54:35,811 INFO L895 garLoopResultBuilder]: At program point L320(line 320) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (not .cse5)) (.cse1 (not .cse4)) (.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~2#1| 0) .cse4 .cse5)) (.cse3 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 (< ~waterLevel~0 1) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse1 .cse2 .cse3 (< ~waterLevel~0 2))))) [2023-11-06 21:54:35,811 INFO L899 garLoopResultBuilder]: For program point L314(lines 314 322) no Hoare annotation was computed. [2023-11-06 21:54:35,811 INFO L899 garLoopResultBuilder]: For program point L310(lines 310 327) no Hoare annotation was computed. [2023-11-06 21:54:35,811 INFO L899 garLoopResultBuilder]: For program point L141(lines 141 147) no Hoare annotation was computed. [2023-11-06 21:54:35,812 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 306 330) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse2 (< ~waterLevel~0 1)) (.cse3 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 .cse3 (< ~methaneLevelCritical~0 1)))) [2023-11-06 21:54:35,812 INFO L895 garLoopResultBuilder]: At program point L325(line 325) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-06 21:54:35,812 INFO L899 garLoopResultBuilder]: For program point L325-1(lines 306 330) no Hoare annotation was computed. [2023-11-06 21:54:35,812 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 137 150) the Hoare annotation is: (let ((.cse2 (< ~methaneLevelCritical~0 1)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse5 (< ~waterLevel~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse4 (= ~pumpRunning~0 0))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse1 .cse2) (or .cse0 .cse5 .cse1 (and .cse4 .cse3) (not (= ~methaneLevelCritical~0 0)) (and .cse4 (<= 2 ~waterLevel~0))))) [2023-11-06 21:54:35,813 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 447 465) the Hoare annotation is: (let ((.cse5 (= ~pumpRunning~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (= |old(~pumpRunning~0)| 0))) (let ((.cse3 (and .cse5 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~2#1| 0) .cse6 .cse7 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0))) (.cse0 (not .cse7)) (.cse1 (not .cse6)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (and .cse5 (<= 2 ~waterLevel~0) .cse6 .cse7))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2 .cse3) (or .cse0 (< ~waterLevel~0 1) .cse1 .cse3 .cse4 (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 (< ~waterLevel~0 2) .cse4)))) [2023-11-06 21:54:35,813 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 306 330) no Hoare annotation was computed. [2023-11-06 21:54:35,813 INFO L899 garLoopResultBuilder]: For program point L373(lines 373 379) no Hoare annotation was computed. [2023-11-06 21:54:35,813 INFO L895 garLoopResultBuilder]: At program point L373-2(lines 366 382) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 .cse3 (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (and (= ~pumpRunning~0 0) .cse3 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~4#1|) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) (< ~methaneLevelCritical~0 1)))) [2023-11-06 21:54:35,814 INFO L895 garLoopResultBuilder]: At program point L396(line 396) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse5 (= |old(~pumpRunning~0)| 0))) (let ((.cse2 (< ~methaneLevelCritical~0 1)) (.cse0 (not .cse5)) (.cse1 (not .cse4)) (.cse3 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse4 .cse5))) (and (or (not (= ~waterLevel~0 1)) .cse0 .cse1 .cse2) (or .cse0 .cse1 (< ~waterLevel~0 2) .cse3 .cse2) (or .cse0 (< ~waterLevel~0 1) .cse1 (not (= ~methaneLevelCritical~0 0)) .cse3)))) [2023-11-06 21:54:35,814 INFO L899 garLoopResultBuilder]: For program point L396-1(line 396) no Hoare annotation was computed. [2023-11-06 21:54:35,814 INFO L895 garLoopResultBuilder]: At program point isMethaneAlarm_returnLabel#1(lines 391 401) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0))) (.cse3 (= ~pumpRunning~0 0)) (.cse4 (<= 2 ~waterLevel~0))) (and (or .cse0 .cse1 .cse2 (and .cse3 .cse4 (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_isMethaneAlarm_#res#1|)) (< ~methaneLevelCritical~0 1)) (or .cse0 .cse1 .cse2 (not (= ~methaneLevelCritical~0 0)) (and .cse3 .cse4)))) [2023-11-06 21:54:35,814 INFO L899 garLoopResultBuilder]: For program point L456(lines 456 460) no Hoare annotation was computed. [2023-11-06 21:54:35,814 INFO L899 garLoopResultBuilder]: For program point L456-2(lines 456 460) no Hoare annotation was computed. [2023-11-06 21:54:35,814 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 357 364) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (< ~waterLevel~0 1)) (.cse2 (not (= 1 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))) (or .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1)))) [2023-11-06 21:54:35,815 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 72 83) no Hoare annotation was computed. [2023-11-06 21:54:35,815 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 72 83) no Hoare annotation was computed. [2023-11-06 21:54:35,815 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 72 83) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse5 (< |old(~waterLevel~0)| 2)) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse4 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= 0 ~systemActive~0)))) (and (or (< |old(~waterLevel~0)| 1) .cse0 .cse1 .cse2 .cse3) (or .cse0 (not (= |old(~waterLevel~0)| 1)) .cse1 (= ~waterLevel~0 1) .cse4) (or .cse0 .cse1 .cse5 .cse3 .cse4) (or .cse1 .cse5 .cse2 .cse3) (or .cse0 .cse2 .cse3 .cse6) (or .cse0 .cse3 .cse4 .cse6))) [2023-11-06 21:54:35,818 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 21:54:35,820 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 21:54:35,882 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 09:54:35 BoogieIcfgContainer [2023-11-06 21:54:35,883 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 21:54:35,883 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 21:54:35,883 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 21:54:35,884 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 21:54:35,884 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 09:54:22" (3/4) ... [2023-11-06 21:54:35,887 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 21:54:35,891 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 21:54:35,891 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 21:54:35,891 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 21:54:35,892 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 21:54:35,892 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 21:54:35,892 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 21:54:35,892 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 21:54:35,892 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 21:54:35,902 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 17 nodes and edges [2023-11-06 21:54:35,903 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 21:54:35,903 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 21:54:35,904 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 21:54:35,905 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 21:54:35,936 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:35,937 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1)) || ((pumpRunning == 0) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || (2 <= waterLevel)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (1 <= waterLevel)))) [2023-11-06 21:54:35,939 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((((pumpRunning == 0) && (1 == systemActive)) && (1 <= waterLevel)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) && ((((((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || ((tmp == 0) && (2 <= waterLevel))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:35,940 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) [2023-11-06 21:54:35,940 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:35,940 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:35,941 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) || (\result == 1)) && ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) [2023-11-06 21:54:35,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= tmp)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:35,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:35,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:35,942 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) [2023-11-06 21:54:35,946 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (waterLevel < 2)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 21:54:36,014 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:36,015 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1)) || ((pumpRunning == 0) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || (2 <= waterLevel)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (1 <= waterLevel)))) [2023-11-06 21:54:36,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((pumpRunning == 0) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((((pumpRunning == 0) && (1 == systemActive)) && (1 <= waterLevel)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) && ((((((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || ((tmp == 0) && (2 <= waterLevel))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:36,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) [2023-11-06 21:54:36,016 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:36,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:36,017 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) || (\result == 1)) && ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) [2023-11-06 21:54:36,018 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= tmp)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:36,018 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) [2023-11-06 21:54:36,018 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 21:54:36,018 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) [2023-11-06 21:54:36,019 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (waterLevel < 2)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) [2023-11-06 21:54:36,057 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 21:54:36,058 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 21:54:36,058 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 21:54:36,059 INFO L158 Benchmark]: Toolchain (without parser) took 15001.55ms. Allocated memory was 144.7MB in the beginning and 283.1MB in the end (delta: 138.4MB). Free memory was 96.8MB in the beginning and 194.6MB in the end (delta: -97.8MB). Peak memory consumption was 43.5MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,059 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 144.7MB. Free memory is still 116.9MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 21:54:36,060 INFO L158 Benchmark]: CACSL2BoogieTranslator took 473.69ms. Allocated memory is still 144.7MB. Free memory was 96.8MB in the beginning and 77.0MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,060 INFO L158 Benchmark]: Boogie Procedure Inliner took 65.01ms. Allocated memory is still 144.7MB. Free memory was 77.0MB in the beginning and 74.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,061 INFO L158 Benchmark]: Boogie Preprocessor took 46.00ms. Allocated memory is still 144.7MB. Free memory was 74.9MB in the beginning and 73.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 21:54:36,062 INFO L158 Benchmark]: RCFGBuilder took 526.36ms. Allocated memory is still 144.7MB. Free memory was 72.8MB in the beginning and 56.0MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,062 INFO L158 Benchmark]: TraceAbstraction took 13700.20ms. Allocated memory was 144.7MB in the beginning and 283.1MB in the end (delta: 138.4MB). Free memory was 55.4MB in the beginning and 203.0MB in the end (delta: -147.5MB). Peak memory consumption was 110.8MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,063 INFO L158 Benchmark]: Witness Printer took 175.30ms. Allocated memory is still 283.1MB. Free memory was 203.0MB in the beginning and 194.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 21:54:36,066 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 144.7MB. Free memory is still 116.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 473.69ms. Allocated memory is still 144.7MB. Free memory was 96.8MB in the beginning and 77.0MB in the end (delta: 19.8MB). Peak memory consumption was 21.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 65.01ms. Allocated memory is still 144.7MB. Free memory was 77.0MB in the beginning and 74.9MB in the end (delta: 2.0MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 46.00ms. Allocated memory is still 144.7MB. Free memory was 74.9MB in the beginning and 73.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * RCFGBuilder took 526.36ms. Allocated memory is still 144.7MB. Free memory was 72.8MB in the beginning and 56.0MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * TraceAbstraction took 13700.20ms. Allocated memory was 144.7MB in the beginning and 283.1MB in the end (delta: 138.4MB). Free memory was 55.4MB in the beginning and 203.0MB in the end (delta: -147.5MB). Peak memory consumption was 110.8MB. Max. memory is 16.1GB. * Witness Printer took 175.30ms. Allocated memory is still 283.1MB. Free memory was 203.0MB in the beginning and 194.6MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [49] - GenericResultAtLocation [Line: 160]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [160] - GenericResultAtLocation [Line: 188]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [188] - GenericResultAtLocation [Line: 197]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [197] - GenericResultAtLocation [Line: 267]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [267] - GenericResultAtLocation [Line: 500]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [500] - GenericResultAtLocation [Line: 866]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [866] - GenericResultAtLocation [Line: 904]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [904] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 193]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 9 procedures, 98 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 13.5s, OverallIterations: 12, TraceHistogramMax: 3, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 3.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.7s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1494 SdHoareTripleChecker+Valid, 1.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1460 mSDsluCounter, 3871 SdHoareTripleChecker+Invalid, 1.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 2582 mSDsCounter, 358 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1266 IncrementalHoareTripleChecker+Invalid, 1624 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 358 mSolverCounterUnsat, 1289 mSDtfsCounter, 1266 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 450 GetRequests, 348 SyntacticMatches, 2 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 210 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1217occurred in iteration=8, InterpolantAutomatonStates: 89, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.8s AutomataMinimizationTime, 12 MinimizatonAttempts, 219 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 2548 PreInvPairs, 2778 NumberOfFragments, 2662 HoareAnnotationTreeSize, 2548 FomulaSimplifications, 1593 FormulaSimplificationTreeSizeReduction, 0.5s HoareSimplificationTime, 45 FomulaSimplificationsInter, 10278 FormulaSimplificationTreeSizeReductionInter, 5.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 2.3s InterpolantComputationTime, 896 NumberOfCodeBlocks, 896 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 881 ConstructedInterpolants, 0 QuantifiedInterpolants, 1495 SizeOfPredicates, 11 NumberOfNonLiveVariables, 882 ConjunctsInSsa, 24 ConjunctsInUnsatCore, 15 InterpolantComputations, 12 PerfectInterpolantSequences, 156/162 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((((((((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (waterLevel == 1)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1)) || ((pumpRunning == 0) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || (2 <= waterLevel)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (1 <= waterLevel)))) - InvariantResult [Line: 210]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 211]: Loop Invariant Derived loop invariant: ((((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || (((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) || (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0)) && (1 <= waterLevel))) || ((((methaneLevelCritical == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 960]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: ((((((((((((pumpRunning == 0) && (1 == systemActive)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((((((pumpRunning == 0) && (1 == systemActive)) && (1 <= waterLevel)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (\old(waterLevel) == waterLevel))) || ((2 <= waterLevel) && (\old(waterLevel) == waterLevel)))) && ((((((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel)) || !((\old(pumpRunning) == 0))) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((((!((1 == systemActive)) || ((tmp == 0) && (2 <= waterLevel))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 357]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && (((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 366]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0))) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= tmp)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 881]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 895]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 466]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((1 == systemActive)) || ((((((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= \result)) && (1 <= tmp___0)) && (1 <= waterLevel)) && (tmp == 0))) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 60]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || ((pumpRunning == \old(pumpRunning)) && (1 <= waterLevel))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 391]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (2 <= waterLevel)) && (methaneLevelCritical <= \result))) || (methaneLevelCritical < 1)) && ((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) - InvariantResult [Line: 977]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 402]: Loop Invariant Derived loop invariant: ((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == 0) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0)))) && ((((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) || (\result == 1)) && ((((!((\old(pumpRunning) == 0)) || (pumpRunning == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((pumpRunning == 0) && (2 <= waterLevel)))) - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((((((((!((1 == systemActive)) || (\old(waterLevel) < 2)) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel))) || (methaneLevelCritical < 1)) && (((!((1 == systemActive)) || (\old(waterLevel) < 2)) || !((methaneLevelCritical == 0))) || (((pumpRunning == \old(pumpRunning)) && (\result == 0)) && (1 <= waterLevel)))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || !((\old(waterLevel) == 1))) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || (\old(waterLevel) < 1)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) < 2)) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: ((((((!((waterLevel == 1)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) && (((((!((\old(pumpRunning) == 0)) || (waterLevel < 1)) || !((1 == systemActive))) || (((((pumpRunning == 0) && (tmp___0 == 0)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (waterLevel < 2)) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0)))) - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 21:54:36,139 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_c3c51462-a38e-415d-86f3-10821a05ab8d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE