./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version e7bb482b Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/config/AutomizerReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b --- Real Ultimate output --- This is Ultimate 0.2.3-dev-e7bb482 [2023-11-06 22:34:16,825 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-06 22:34:16,966 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/config/svcomp-Reach-32bit-Automizer_Default.epf [2023-11-06 22:34:16,972 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-06 22:34:16,982 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-06 22:34:17,021 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-06 22:34:17,023 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-06 22:34:17,023 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-06 22:34:17,024 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2023-11-06 22:34:17,025 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2023-11-06 22:34:17,026 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-06 22:34:17,027 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-06 22:34:17,028 INFO L153 SettingsManager]: * Use SBE=true [2023-11-06 22:34:17,029 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-06 22:34:17,029 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2023-11-06 22:34:17,030 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-06 22:34:17,031 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-06 22:34:17,032 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-06 22:34:17,033 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-06 22:34:17,033 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2023-11-06 22:34:17,034 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2023-11-06 22:34:17,035 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2023-11-06 22:34:17,036 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-06 22:34:17,036 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-06 22:34:17,037 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-06 22:34:17,038 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-06 22:34:17,038 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-06 22:34:17,039 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2023-11-06 22:34:17,040 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:34:17,040 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-06 22:34:17,041 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2023-11-06 22:34:17,041 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2023-11-06 22:34:17,042 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-06 22:34:17,042 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2023-11-06 22:34:17,043 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2023-11-06 22:34:17,044 INFO L153 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2023-11-06 22:34:17,044 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2023-11-06 22:34:17,045 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2023-11-06 22:34:17,045 INFO L153 SettingsManager]: * Independence relation used for large block encoding in concurrent analysis=SYNTACTIC [2023-11-06 22:34:17,046 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fd0b8ceecda33bdad48c402c2c8ba6fe539641c6d50bf604e9c60e70c71a562b [2023-11-06 22:34:17,344 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-06 22:34:17,384 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-06 22:34:17,388 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-06 22:34:17,390 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-06 22:34:17,391 INFO L274 PluginConnector]: CDTParser initialized [2023-11-06 22:34:17,392 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/../../sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2023-11-06 22:34:20,944 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-06 22:34:21,255 INFO L384 CDTParser]: Found 1 translation units. [2023-11-06 22:34:21,255 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c [2023-11-06 22:34:21,270 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/data/aeaeb1fab/96f396f3a89344ada609ba2948ff9cb9/FLAGbb1c9a26c [2023-11-06 22:34:21,286 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/data/aeaeb1fab/96f396f3a89344ada609ba2948ff9cb9 [2023-11-06 22:34:21,288 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-06 22:34:21,290 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-06 22:34:21,292 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-06 22:34:21,292 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-06 22:34:21,298 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-06 22:34:21,298 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,300 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@52e46b9d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21, skipping insertion in model container [2023-11-06 22:34:21,300 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,351 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-06 22:34:21,587 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2023-11-06 22:34:21,749 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:34:21,772 INFO L202 MainTranslator]: Completed pre-run [2023-11-06 22:34:21,781 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] [2023-11-06 22:34:21,782 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [316] [2023-11-06 22:34:21,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [386] [2023-11-06 22:34:21,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [395] [2023-11-06 22:34:21,783 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [761] [2023-11-06 22:34:21,784 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [860] [2023-11-06 22:34:21,784 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [886] [2023-11-06 22:34:21,784 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [990] [2023-11-06 22:34:21,816 WARN L240 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/sv-benchmarks/c/product-lines/minepump_spec1_product63.cil.c[6160,6173] [2023-11-06 22:34:21,859 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-06 22:34:21,881 INFO L206 MainTranslator]: Completed translation [2023-11-06 22:34:21,881 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21 WrapperNode [2023-11-06 22:34:21,881 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-06 22:34:21,883 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-06 22:34:21,883 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-06 22:34:21,883 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-06 22:34:21,892 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,908 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,960 INFO L138 Inliner]: procedures = 58, calls = 106, calls flagged for inlining = 23, calls inlined = 20, statements flattened = 220 [2023-11-06 22:34:21,965 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-06 22:34:21,966 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-06 22:34:21,967 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-06 22:34:21,967 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-06 22:34:21,977 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,977 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,981 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,981 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,989 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,997 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:21,999 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:22,001 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:22,006 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-06 22:34:22,007 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-06 22:34:22,007 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-06 22:34:22,008 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-06 22:34:22,009 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (1/1) ... [2023-11-06 22:34:22,031 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2023-11-06 22:34:22,054 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:34:22,082 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2023-11-06 22:34:22,098 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2023-11-06 22:34:22,134 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-06 22:34:22,134 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__base [2023-11-06 22:34:22,135 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__base [2023-11-06 22:34:22,135 INFO L130 BoogieDeclarations]: Found specification of procedure cleanup [2023-11-06 22:34:22,138 INFO L138 BoogieDeclarations]: Found implementation of procedure cleanup [2023-11-06 22:34:22,139 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneLevelCritical [2023-11-06 22:34:22,139 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneLevelCritical [2023-11-06 22:34:22,140 INFO L130 BoogieDeclarations]: Found specification of procedure timeShift [2023-11-06 22:34:22,140 INFO L138 BoogieDeclarations]: Found implementation of procedure timeShift [2023-11-06 22:34:22,140 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:34:22,140 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:34:22,141 INFO L130 BoogieDeclarations]: Found specification of procedure waterRise [2023-11-06 22:34:22,141 INFO L138 BoogieDeclarations]: Found implementation of procedure waterRise [2023-11-06 22:34:22,141 INFO L130 BoogieDeclarations]: Found specification of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:34:22,141 INFO L138 BoogieDeclarations]: Found implementation of procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:34:22,142 INFO L130 BoogieDeclarations]: Found specification of procedure isMethaneAlarm [2023-11-06 22:34:22,142 INFO L138 BoogieDeclarations]: Found implementation of procedure isMethaneAlarm [2023-11-06 22:34:22,144 INFO L130 BoogieDeclarations]: Found specification of procedure deactivatePump [2023-11-06 22:34:22,144 INFO L138 BoogieDeclarations]: Found implementation of procedure deactivatePump [2023-11-06 22:34:22,144 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2023-11-06 22:34:22,145 INFO L130 BoogieDeclarations]: Found specification of procedure changeMethaneLevel [2023-11-06 22:34:22,146 INFO L138 BoogieDeclarations]: Found implementation of procedure changeMethaneLevel [2023-11-06 22:34:22,147 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-06 22:34:22,147 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-06 22:34:22,336 INFO L236 CfgBuilder]: Building ICFG [2023-11-06 22:34:22,339 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-06 22:34:22,767 INFO L277 CfgBuilder]: Performing block encoding [2023-11-06 22:34:22,778 INFO L297 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-06 22:34:22,778 INFO L302 CfgBuilder]: Removed 2 assume(true) statements. [2023-11-06 22:34:22,781 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:34:22 BoogieIcfgContainer [2023-11-06 22:34:22,782 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-06 22:34:22,786 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2023-11-06 22:34:22,786 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2023-11-06 22:34:22,790 INFO L274 PluginConnector]: TraceAbstraction initialized [2023-11-06 22:34:22,791 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 10:34:21" (1/3) ... [2023-11-06 22:34:22,792 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@831db98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:34:22, skipping insertion in model container [2023-11-06 22:34:22,792 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 10:34:21" (2/3) ... [2023-11-06 22:34:22,793 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@831db98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 10:34:22, skipping insertion in model container [2023-11-06 22:34:22,793 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:34:22" (3/3) ... [2023-11-06 22:34:22,795 INFO L112 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product63.cil.c [2023-11-06 22:34:22,822 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2023-11-06 22:34:22,822 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2023-11-06 22:34:22,891 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2023-11-06 22:34:22,900 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@39f3f5ce, mLbeIndependenceSettings=[IndependenceType=SYNTACTIC, AbstractionType=NONE, UseConditional=, UseSemiCommutativity=, Solver=, SolverTimeout=] [2023-11-06 22:34:22,900 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2023-11-06 22:34:22,906 INFO L276 IsEmpty]: Start isEmpty. Operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) [2023-11-06 22:34:22,918 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2023-11-06 22:34:22,918 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:22,919 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:22,920 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:22,927 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:22,927 INFO L85 PathProgramCache]: Analyzing trace with hash 155128550, now seen corresponding path program 1 times [2023-11-06 22:34:22,940 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:22,941 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1940440601] [2023-11-06 22:34:22,941 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:22,942 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:23,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2023-11-06 22:34:23,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,190 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:34:23,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:23,192 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1940440601] [2023-11-06 22:34:23,193 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1940440601] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:23,193 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:23,194 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2023-11-06 22:34:23,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219830603] [2023-11-06 22:34:23,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:23,203 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2023-11-06 22:34:23,204 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:23,246 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2023-11-06 22:34:23,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:34:23,253 INFO L87 Difference]: Start difference. First operand has 112 states, 81 states have (on average 1.3703703703703705) internal successors, (111), 92 states have internal predecessors, (111), 19 states have call successors, (19), 10 states have call predecessors, (19), 10 states have return successors, (19), 14 states have call predecessors, (19), 19 states have call successors, (19) Second operand has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:23,308 INFO L93 Difference]: Finished difference Result 216 states and 293 transitions. [2023-11-06 22:34:23,309 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2023-11-06 22:34:23,310 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 23 [2023-11-06 22:34:23,311 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:23,323 INFO L225 Difference]: With dead ends: 216 [2023-11-06 22:34:23,324 INFO L226 Difference]: Without dead ends: 103 [2023-11-06 22:34:23,330 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2023-11-06 22:34:23,334 INFO L413 NwaCegarLoop]: 143 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:23,336 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 143 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:34:23,359 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2023-11-06 22:34:23,400 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 103. [2023-11-06 22:34:23,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103 states, 74 states have (on average 1.3108108108108107) internal successors, (97), 84 states have internal predecessors, (97), 19 states have call successors, (19), 10 states have call predecessors, (19), 9 states have return successors, (18), 13 states have call predecessors, (18), 18 states have call successors, (18) [2023-11-06 22:34:23,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 134 transitions. [2023-11-06 22:34:23,409 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 134 transitions. Word has length 23 [2023-11-06 22:34:23,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:23,410 INFO L495 AbstractCegarLoop]: Abstraction has 103 states and 134 transitions. [2023-11-06 22:34:23,410 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 9.5) internal successors, (19), 2 states have internal predecessors, (19), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,411 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 134 transitions. [2023-11-06 22:34:23,415 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2023-11-06 22:34:23,415 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:23,415 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:23,416 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2023-11-06 22:34:23,416 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:23,417 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:23,418 INFO L85 PathProgramCache]: Analyzing trace with hash -389594040, now seen corresponding path program 1 times [2023-11-06 22:34:23,418 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:23,418 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1818168918] [2023-11-06 22:34:23,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:23,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:23,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2023-11-06 22:34:23,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:34:23,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:23,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1818168918] [2023-11-06 22:34:23,614 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1818168918] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:23,615 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:23,615 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:34:23,615 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296621495] [2023-11-06 22:34:23,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:23,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:34:23,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:23,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:34:23,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:34:23,619 INFO L87 Difference]: Start difference. First operand 103 states and 134 transitions. Second operand has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:23,665 INFO L93 Difference]: Finished difference Result 168 states and 218 transitions. [2023-11-06 22:34:23,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:34:23,666 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2023-11-06 22:34:23,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:23,669 INFO L225 Difference]: With dead ends: 168 [2023-11-06 22:34:23,669 INFO L226 Difference]: Without dead ends: 94 [2023-11-06 22:34:23,671 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:34:23,673 INFO L413 NwaCegarLoop]: 121 mSDtfsCounter, 16 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:23,674 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 221 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:34:23,675 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2023-11-06 22:34:23,690 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 94. [2023-11-06 22:34:23,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 78 states have internal predecessors, (90), 16 states have call successors, (16), 9 states have call predecessors, (16), 9 states have return successors, (16), 11 states have call predecessors, (16), 16 states have call successors, (16) [2023-11-06 22:34:23,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94 states to 94 states and 122 transitions. [2023-11-06 22:34:23,694 INFO L78 Accepts]: Start accepts. Automaton has 94 states and 122 transitions. Word has length 24 [2023-11-06 22:34:23,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:23,694 INFO L495 AbstractCegarLoop]: Abstraction has 94 states and 122 transitions. [2023-11-06 22:34:23,694 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.666666666666667) internal successors, (20), 3 states have internal predecessors, (20), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,695 INFO L276 IsEmpty]: Start isEmpty. Operand 94 states and 122 transitions. [2023-11-06 22:34:23,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2023-11-06 22:34:23,697 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:23,697 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:23,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2023-11-06 22:34:23,698 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:23,698 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:23,699 INFO L85 PathProgramCache]: Analyzing trace with hash -2116148500, now seen corresponding path program 1 times [2023-11-06 22:34:23,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:23,699 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1409253783] [2023-11-06 22:34:23,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:23,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:23,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:34:23,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:23,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:34:23,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:23,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1409253783] [2023-11-06 22:34:23,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1409253783] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:23,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:23,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-06 22:34:23,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [271972564] [2023-11-06 22:34:23,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:23,834 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2023-11-06 22:34:23,836 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:23,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-06 22:34:23,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:34:23,838 INFO L87 Difference]: Start difference. First operand 94 states and 122 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,920 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:23,921 INFO L93 Difference]: Finished difference Result 267 states and 352 transitions. [2023-11-06 22:34:23,921 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-06 22:34:23,921 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2023-11-06 22:34:23,922 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:23,925 INFO L225 Difference]: With dead ends: 267 [2023-11-06 22:34:23,926 INFO L226 Difference]: Without dead ends: 180 [2023-11-06 22:34:23,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-06 22:34:23,929 INFO L413 NwaCegarLoop]: 141 mSDtfsCounter, 102 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 253 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:23,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 253 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2023-11-06 22:34:23,932 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 180 states. [2023-11-06 22:34:23,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 180 to 177. [2023-11-06 22:34:23,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 177 states, 126 states have (on average 1.3412698412698412) internal successors, (169), 145 states have internal predecessors, (169), 32 states have call successors, (32), 18 states have call predecessors, (32), 18 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2023-11-06 22:34:23,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 177 states to 177 states and 233 transitions. [2023-11-06 22:34:23,972 INFO L78 Accepts]: Start accepts. Automaton has 177 states and 233 transitions. Word has length 28 [2023-11-06 22:34:23,973 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:23,973 INFO L495 AbstractCegarLoop]: Abstraction has 177 states and 233 transitions. [2023-11-06 22:34:23,973 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:23,973 INFO L276 IsEmpty]: Start isEmpty. Operand 177 states and 233 transitions. [2023-11-06 22:34:23,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2023-11-06 22:34:23,976 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:23,977 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:23,977 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2023-11-06 22:34:23,977 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:23,978 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:23,978 INFO L85 PathProgramCache]: Analyzing trace with hash -1322411102, now seen corresponding path program 1 times [2023-11-06 22:34:23,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:23,979 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1031813717] [2023-11-06 22:34:23,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:23,979 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:24,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,153 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:34:24,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,161 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:34:24,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:24,161 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1031813717] [2023-11-06 22:34:24,162 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1031813717] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:24,162 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:24,162 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:34:24,162 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [496648452] [2023-11-06 22:34:24,163 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:24,163 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:34:24,164 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:24,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:34:24,165 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:34:24,165 INFO L87 Difference]: Start difference. First operand 177 states and 233 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:24,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:24,307 INFO L93 Difference]: Finished difference Result 457 states and 614 transitions. [2023-11-06 22:34:24,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-06 22:34:24,308 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2023-11-06 22:34:24,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:24,313 INFO L225 Difference]: With dead ends: 457 [2023-11-06 22:34:24,313 INFO L226 Difference]: Without dead ends: 287 [2023-11-06 22:34:24,317 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:34:24,319 INFO L413 NwaCegarLoop]: 118 mSDtfsCounter, 71 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 71 SdHoareTripleChecker+Valid, 430 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:24,320 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [71 Valid, 430 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:34:24,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 287 states. [2023-11-06 22:34:24,366 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 287 to 278. [2023-11-06 22:34:24,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 278 states, 201 states have (on average 1.2885572139303483) internal successors, (259), 220 states have internal predecessors, (259), 42 states have call successors, (42), 34 states have call predecessors, (42), 34 states have return successors, (54), 37 states have call predecessors, (54), 42 states have call successors, (54) [2023-11-06 22:34:24,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 278 states to 278 states and 355 transitions. [2023-11-06 22:34:24,373 INFO L78 Accepts]: Start accepts. Automaton has 278 states and 355 transitions. Word has length 32 [2023-11-06 22:34:24,374 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:24,374 INFO L495 AbstractCegarLoop]: Abstraction has 278 states and 355 transitions. [2023-11-06 22:34:24,374 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 5 states have internal predecessors, (29), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2023-11-06 22:34:24,374 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 355 transitions. [2023-11-06 22:34:24,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-06 22:34:24,384 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:24,384 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:24,384 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2023-11-06 22:34:24,385 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:24,385 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:24,385 INFO L85 PathProgramCache]: Analyzing trace with hash -1980945601, now seen corresponding path program 1 times [2023-11-06 22:34:24,386 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:24,386 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131349004] [2023-11-06 22:34:24,386 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:24,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:24,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:34:24,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:24,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:24,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:24,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:34:24,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:24,774 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:34:24,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:24,775 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131349004] [2023-11-06 22:34:24,775 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [131349004] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:24,775 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:24,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2023-11-06 22:34:24,776 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247766927] [2023-11-06 22:34:24,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:24,776 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2023-11-06 22:34:24,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:24,778 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2023-11-06 22:34:24,778 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2023-11-06 22:34:24,778 INFO L87 Difference]: Start difference. First operand 278 states and 355 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:34:25,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:25,087 INFO L93 Difference]: Finished difference Result 619 states and 814 transitions. [2023-11-06 22:34:25,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:34:25,088 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2023-11-06 22:34:25,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:25,094 INFO L225 Difference]: With dead ends: 619 [2023-11-06 22:34:25,094 INFO L226 Difference]: Without dead ends: 348 [2023-11-06 22:34:25,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2023-11-06 22:34:25,100 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 75 mSDsluCounter, 295 mSDsCounter, 0 mSdLazyCounter, 166 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 80 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 193 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 166 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:25,101 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [80 Valid, 384 Invalid, 193 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 166 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:34:25,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 348 states. [2023-11-06 22:34:25,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 348 to 336. [2023-11-06 22:34:25,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 336 states, 245 states have (on average 1.2612244897959184) internal successors, (309), 264 states have internal predecessors, (309), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2023-11-06 22:34:25,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 336 states to 336 states and 423 transitions. [2023-11-06 22:34:25,164 INFO L78 Accepts]: Start accepts. Automaton has 336 states and 423 transitions. Word has length 59 [2023-11-06 22:34:25,164 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:25,164 INFO L495 AbstractCegarLoop]: Abstraction has 336 states and 423 transitions. [2023-11-06 22:34:25,165 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:34:25,165 INFO L276 IsEmpty]: Start isEmpty. Operand 336 states and 423 transitions. [2023-11-06 22:34:25,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-06 22:34:25,169 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:25,169 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:25,169 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2023-11-06 22:34:25,170 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:25,170 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:25,170 INFO L85 PathProgramCache]: Analyzing trace with hash -1706185987, now seen corresponding path program 1 times [2023-11-06 22:34:25,171 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:25,171 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286642322] [2023-11-06 22:34:25,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:25,171 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:25,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:34:25,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:25,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,364 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:25,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:25,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:34:25,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,388 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:34:25,388 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:25,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286642322] [2023-11-06 22:34:25,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1286642322] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:25,389 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:25,389 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:34:25,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [901795800] [2023-11-06 22:34:25,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:25,392 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:34:25,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:25,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:34:25,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:34:25,394 INFO L87 Difference]: Start difference. First operand 336 states and 423 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:34:25,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:25,663 INFO L93 Difference]: Finished difference Result 683 states and 886 transitions. [2023-11-06 22:34:25,664 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-06 22:34:25,664 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 59 [2023-11-06 22:34:25,665 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:25,670 INFO L225 Difference]: With dead ends: 683 [2023-11-06 22:34:25,670 INFO L226 Difference]: Without dead ends: 354 [2023-11-06 22:34:25,673 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:34:25,686 INFO L413 NwaCegarLoop]: 90 mSDtfsCounter, 77 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 127 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 300 SdHoareTripleChecker+Invalid, 149 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 127 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:25,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 300 Invalid, 149 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 127 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:34:25,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 354 states. [2023-11-06 22:34:25,761 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 354 to 340. [2023-11-06 22:34:25,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 340 states, 249 states have (on average 1.2570281124497993) internal successors, (313), 268 states have internal predecessors, (313), 46 states have call successors, (46), 34 states have call predecessors, (46), 44 states have return successors, (68), 49 states have call predecessors, (68), 46 states have call successors, (68) [2023-11-06 22:34:25,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 340 states to 340 states and 427 transitions. [2023-11-06 22:34:25,769 INFO L78 Accepts]: Start accepts. Automaton has 340 states and 427 transitions. Word has length 59 [2023-11-06 22:34:25,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:25,770 INFO L495 AbstractCegarLoop]: Abstraction has 340 states and 427 transitions. [2023-11-06 22:34:25,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 2 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2023-11-06 22:34:25,771 INFO L276 IsEmpty]: Start isEmpty. Operand 340 states and 427 transitions. [2023-11-06 22:34:25,777 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2023-11-06 22:34:25,777 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:25,778 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:25,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2023-11-06 22:34:25,778 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:25,779 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:25,779 INFO L85 PathProgramCache]: Analyzing trace with hash 344798011, now seen corresponding path program 1 times [2023-11-06 22:34:25,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:25,779 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1308364923] [2023-11-06 22:34:25,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:25,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:25,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:34:25,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:25,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:25,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:25,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,995 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2023-11-06 22:34:25,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:25,998 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2023-11-06 22:34:25,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:25,999 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1308364923] [2023-11-06 22:34:25,999 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1308364923] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:25,999 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:25,999 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-06 22:34:26,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796224805] [2023-11-06 22:34:26,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:26,001 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2023-11-06 22:34:26,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:26,002 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-06 22:34:26,002 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-06 22:34:26,002 INFO L87 Difference]: Start difference. First operand 340 states and 427 transitions. Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:34:26,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:26,395 INFO L93 Difference]: Finished difference Result 941 states and 1230 transitions. [2023-11-06 22:34:26,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-06 22:34:26,396 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) Word has length 59 [2023-11-06 22:34:26,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:26,404 INFO L225 Difference]: With dead ends: 941 [2023-11-06 22:34:26,404 INFO L226 Difference]: Without dead ends: 608 [2023-11-06 22:34:26,406 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 13 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2023-11-06 22:34:26,409 INFO L413 NwaCegarLoop]: 134 mSDtfsCounter, 245 mSDsluCounter, 189 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 76 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 323 SdHoareTripleChecker+Invalid, 245 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 76 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:26,410 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [253 Valid, 323 Invalid, 245 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [76 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2023-11-06 22:34:26,413 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 608 states. [2023-11-06 22:34:26,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 608 to 601. [2023-11-06 22:34:26,502 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 601 states, 442 states have (on average 1.2330316742081449) internal successors, (545), 470 states have internal predecessors, (545), 81 states have call successors, (81), 71 states have call predecessors, (81), 77 states have return successors, (133), 82 states have call predecessors, (133), 81 states have call successors, (133) [2023-11-06 22:34:26,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 601 states to 601 states and 759 transitions. [2023-11-06 22:34:26,511 INFO L78 Accepts]: Start accepts. Automaton has 601 states and 759 transitions. Word has length 59 [2023-11-06 22:34:26,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:26,515 INFO L495 AbstractCegarLoop]: Abstraction has 601 states and 759 transitions. [2023-11-06 22:34:26,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.2) internal successors, (46), 4 states have internal predecessors, (46), 4 states have call successors, (6), 3 states have call predecessors, (6), 2 states have return successors, (5), 3 states have call predecessors, (5), 4 states have call successors, (5) [2023-11-06 22:34:26,516 INFO L276 IsEmpty]: Start isEmpty. Operand 601 states and 759 transitions. [2023-11-06 22:34:26,517 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2023-11-06 22:34:26,518 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:26,518 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:26,518 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2023-11-06 22:34:26,519 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:26,519 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:26,519 INFO L85 PathProgramCache]: Analyzing trace with hash 616558741, now seen corresponding path program 1 times [2023-11-06 22:34:26,520 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:26,520 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [367057090] [2023-11-06 22:34:26,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:26,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:26,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:34:26,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:34:26,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:26,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:26,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:26,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,787 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2023-11-06 22:34:26,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:26,807 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:34:26,808 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:26,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [367057090] [2023-11-06 22:34:26,808 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [367057090] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:26,808 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:26,809 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:34:26,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1429226188] [2023-11-06 22:34:26,809 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:26,810 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:34:26,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:26,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:34:26,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:34:26,811 INFO L87 Difference]: Start difference. First operand 601 states and 759 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:34:27,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:27,889 INFO L93 Difference]: Finished difference Result 2015 states and 2633 transitions. [2023-11-06 22:34:27,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2023-11-06 22:34:27,890 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 63 [2023-11-06 22:34:27,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:27,904 INFO L225 Difference]: With dead ends: 2015 [2023-11-06 22:34:27,904 INFO L226 Difference]: Without dead ends: 1421 [2023-11-06 22:34:27,908 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 128 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=133, Invalid=467, Unknown=0, NotChecked=0, Total=600 [2023-11-06 22:34:27,910 INFO L413 NwaCegarLoop]: 64 mSDtfsCounter, 367 mSDsluCounter, 286 mSDsCounter, 0 mSdLazyCounter, 466 mSolverCounterSat, 161 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 374 SdHoareTripleChecker+Valid, 350 SdHoareTripleChecker+Invalid, 627 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 161 IncrementalHoareTripleChecker+Valid, 466 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:27,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [374 Valid, 350 Invalid, 627 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [161 Valid, 466 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2023-11-06 22:34:27,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1421 states. [2023-11-06 22:34:28,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1421 to 1357. [2023-11-06 22:34:28,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1357 states, 988 states have (on average 1.2044534412955465) internal successors, (1190), 1059 states have internal predecessors, (1190), 194 states have call successors, (194), 142 states have call predecessors, (194), 174 states have return successors, (352), 200 states have call predecessors, (352), 194 states have call successors, (352) [2023-11-06 22:34:28,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1357 states to 1357 states and 1736 transitions. [2023-11-06 22:34:28,192 INFO L78 Accepts]: Start accepts. Automaton has 1357 states and 1736 transitions. Word has length 63 [2023-11-06 22:34:28,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:28,193 INFO L495 AbstractCegarLoop]: Abstraction has 1357 states and 1736 transitions. [2023-11-06 22:34:28,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 5 states have internal predecessors, (50), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2023-11-06 22:34:28,194 INFO L276 IsEmpty]: Start isEmpty. Operand 1357 states and 1736 transitions. [2023-11-06 22:34:28,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2023-11-06 22:34:28,197 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:28,198 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:28,198 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2023-11-06 22:34:28,198 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:28,199 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:28,199 INFO L85 PathProgramCache]: Analyzing trace with hash 1067655569, now seen corresponding path program 1 times [2023-11-06 22:34:28,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:28,199 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253406960] [2023-11-06 22:34:28,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:28,200 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:28,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:34:28,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2023-11-06 22:34:28,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2023-11-06 22:34:28,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,494 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:28,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:28,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,767 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:28,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2023-11-06 22:34:28,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:28,821 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2023-11-06 22:34:28,821 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:28,821 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253406960] [2023-11-06 22:34:28,822 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253406960] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:34:28,822 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [310534134] [2023-11-06 22:34:28,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:28,822 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:34:28,823 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:34:28,828 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:34:28,879 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2023-11-06 22:34:29,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:29,005 INFO L262 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:34:29,013 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:34:29,303 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-06 22:34:29,304 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:34:29,304 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [310534134] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:29,304 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:34:29,305 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [15] total 21 [2023-11-06 22:34:29,305 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [41712602] [2023-11-06 22:34:29,305 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:29,306 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:34:29,306 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:29,307 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:34:29,307 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:34:29,308 INFO L87 Difference]: Start difference. First operand 1357 states and 1736 transitions. Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:34:29,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:29,690 INFO L93 Difference]: Finished difference Result 2637 states and 3389 transitions. [2023-11-06 22:34:29,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:34:29,691 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) Word has length 67 [2023-11-06 22:34:29,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:29,701 INFO L225 Difference]: With dead ends: 2637 [2023-11-06 22:34:29,702 INFO L226 Difference]: Without dead ends: 1287 [2023-11-06 22:34:29,707 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 90 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=60, Invalid=360, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:34:29,708 INFO L413 NwaCegarLoop]: 222 mSDtfsCounter, 80 mSDsluCounter, 705 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 82 SdHoareTripleChecker+Valid, 927 SdHoareTripleChecker+Invalid, 199 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:29,709 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [82 Valid, 927 Invalid, 199 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2023-11-06 22:34:29,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1287 states. [2023-11-06 22:34:29,881 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1287 to 1287. [2023-11-06 22:34:29,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1287 states, 934 states have (on average 1.1927194860813704) internal successors, (1114), 1003 states have internal predecessors, (1114), 188 states have call successors, (188), 138 states have call predecessors, (188), 164 states have return successors, (308), 188 states have call predecessors, (308), 188 states have call successors, (308) [2023-11-06 22:34:29,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1287 states to 1287 states and 1610 transitions. [2023-11-06 22:34:29,899 INFO L78 Accepts]: Start accepts. Automaton has 1287 states and 1610 transitions. Word has length 67 [2023-11-06 22:34:29,899 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:29,900 INFO L495 AbstractCegarLoop]: Abstraction has 1287 states and 1610 transitions. [2023-11-06 22:34:29,900 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.5) internal successors, (52), 6 states have internal predecessors, (52), 3 states have call successors, (8), 3 states have call predecessors, (8), 5 states have return successors, (7), 5 states have call predecessors, (7), 3 states have call successors, (7) [2023-11-06 22:34:29,900 INFO L276 IsEmpty]: Start isEmpty. Operand 1287 states and 1610 transitions. [2023-11-06 22:34:29,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2023-11-06 22:34:29,905 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:29,905 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:29,925 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2023-11-06 22:34:30,117 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:34:30,117 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:30,118 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:30,118 INFO L85 PathProgramCache]: Analyzing trace with hash -1513239529, now seen corresponding path program 1 times [2023-11-06 22:34:30,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:30,119 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2084360908] [2023-11-06 22:34:30,120 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:30,125 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:30,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:34:30,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2023-11-06 22:34:30,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:34:30,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:30,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,255 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:30,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:30,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:34:30,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2023-11-06 22:34:30,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2023-11-06 22:34:30,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:30,280 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:34:30,280 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:30,280 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2084360908] [2023-11-06 22:34:30,280 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2084360908] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:30,281 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-06 22:34:30,281 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2023-11-06 22:34:30,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472303194] [2023-11-06 22:34:30,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:30,282 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:34:30,282 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:30,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:34:30,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2023-11-06 22:34:30,284 INFO L87 Difference]: Start difference. First operand 1287 states and 1610 transitions. Second operand has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2023-11-06 22:34:31,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:31,092 INFO L93 Difference]: Finished difference Result 1535 states and 1910 transitions. [2023-11-06 22:34:31,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2023-11-06 22:34:31,092 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) Word has length 94 [2023-11-06 22:34:31,093 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:31,098 INFO L225 Difference]: With dead ends: 1535 [2023-11-06 22:34:31,099 INFO L226 Difference]: Without dead ends: 650 [2023-11-06 22:34:31,102 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2023-11-06 22:34:31,103 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 335 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 439 mSolverCounterSat, 120 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 344 SdHoareTripleChecker+Valid, 237 SdHoareTripleChecker+Invalid, 559 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 120 IncrementalHoareTripleChecker+Valid, 439 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:31,105 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [344 Valid, 237 Invalid, 559 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [120 Valid, 439 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2023-11-06 22:34:31,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 650 states. [2023-11-06 22:34:31,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 650 to 630. [2023-11-06 22:34:31,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 630 states, 457 states have (on average 1.1575492341356675) internal successors, (529), 489 states have internal predecessors, (529), 91 states have call successors, (91), 68 states have call predecessors, (91), 81 states have return successors, (151), 92 states have call predecessors, (151), 91 states have call successors, (151) [2023-11-06 22:34:31,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 630 states to 630 states and 771 transitions. [2023-11-06 22:34:31,220 INFO L78 Accepts]: Start accepts. Automaton has 630 states and 771 transitions. Word has length 94 [2023-11-06 22:34:31,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:31,220 INFO L495 AbstractCegarLoop]: Abstraction has 630 states and 771 transitions. [2023-11-06 22:34:31,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 8.875) internal successors, (71), 4 states have internal predecessors, (71), 4 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (9), 3 states have call predecessors, (9), 4 states have call successors, (9) [2023-11-06 22:34:31,221 INFO L276 IsEmpty]: Start isEmpty. Operand 630 states and 771 transitions. [2023-11-06 22:34:31,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2023-11-06 22:34:31,230 INFO L187 NwaCegarLoop]: Found error trace [2023-11-06 22:34:31,231 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:31,231 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2023-11-06 22:34:31,231 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION === [timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2023-11-06 22:34:31,232 INFO L145 PredicateUnifier]: Initialized classic predicate unifier [2023-11-06 22:34:31,232 INFO L85 PathProgramCache]: Analyzing trace with hash 1984934984, now seen corresponding path program 1 times [2023-11-06 22:34:31,232 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-06 22:34:31,233 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14221490] [2023-11-06 22:34:31,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:31,233 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-06 22:34:31,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,451 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2023-11-06 22:34:31,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2023-11-06 22:34:31,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2023-11-06 22:34:31,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,502 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:31,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2023-11-06 22:34:31,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:31,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,517 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2023-11-06 22:34:31,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2023-11-06 22:34:31,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2023-11-06 22:34:31,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2023-11-06 22:34:31,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2023-11-06 22:34:31,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2023-11-06 22:34:31,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2023-11-06 22:34:31,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,701 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2023-11-06 22:34:31,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,704 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 14 proven. 12 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2023-11-06 22:34:31,705 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-06 22:34:31,705 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14221490] [2023-11-06 22:34:31,705 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [14221490] provided 0 perfect and 1 imperfect interpolant sequences [2023-11-06 22:34:31,705 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1647263038] [2023-11-06 22:34:31,706 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-06 22:34:31,706 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:34:31,706 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 [2023-11-06 22:34:31,707 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2023-11-06 22:34:31,740 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2023-11-06 22:34:31,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-06 22:34:31,901 INFO L262 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 9 conjunts are in the unsatisfiable core [2023-11-06 22:34:31,912 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2023-11-06 22:34:32,117 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2023-11-06 22:34:32,118 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2023-11-06 22:34:32,118 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1647263038] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-06 22:34:32,118 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2023-11-06 22:34:32,119 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [14] total 19 [2023-11-06 22:34:32,119 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036308640] [2023-11-06 22:34:32,119 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-06 22:34:32,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2023-11-06 22:34:32,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-06 22:34:32,121 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2023-11-06 22:34:32,122 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=293, Unknown=0, NotChecked=0, Total=342 [2023-11-06 22:34:32,122 INFO L87 Difference]: Start difference. First operand 630 states and 771 transitions. Second operand has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:34:32,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-06 22:34:32,416 INFO L93 Difference]: Finished difference Result 1084 states and 1346 transitions. [2023-11-06 22:34:32,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-06 22:34:32,418 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) Word has length 121 [2023-11-06 22:34:32,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2023-11-06 22:34:32,419 INFO L225 Difference]: With dead ends: 1084 [2023-11-06 22:34:32,419 INFO L226 Difference]: Without dead ends: 0 [2023-11-06 22:34:32,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 158 GetRequests, 139 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=61, Invalid=359, Unknown=0, NotChecked=0, Total=420 [2023-11-06 22:34:32,425 INFO L413 NwaCegarLoop]: 186 mSDtfsCounter, 62 mSDsluCounter, 944 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 65 SdHoareTripleChecker+Valid, 1130 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2023-11-06 22:34:32,426 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [65 Valid, 1130 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2023-11-06 22:34:32,426 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2023-11-06 22:34:32,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2023-11-06 22:34:32,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-06 22:34:32,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2023-11-06 22:34:32,428 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 121 [2023-11-06 22:34:32,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2023-11-06 22:34:32,428 INFO L495 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2023-11-06 22:34:32,429 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.75) internal successors, (86), 6 states have internal predecessors, (86), 3 states have call successors, (15), 3 states have call predecessors, (15), 5 states have return successors, (14), 5 states have call predecessors, (14), 3 states have call successors, (14) [2023-11-06 22:34:32,429 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2023-11-06 22:34:32,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2023-11-06 22:34:32,433 INFO L805 garLoopResultBuilder]: Registering result SAFE for location timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2023-11-06 22:34:32,447 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2023-11-06 22:34:32,641 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2023-11-06 22:34:32,643 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2023-11-06 22:34:38,817 INFO L899 garLoopResultBuilder]: For program point deactivatePumpEXIT(lines 199 206) no Hoare annotation was computed. [2023-11-06 22:34:38,818 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 199 206) the Hoare annotation is: (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse1 (not (= 1 ~systemActive~0))) (.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse3 (< ~waterLevel~0 2)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse0 .cse2 .cse3 .cse4) (or .cse0 .cse1 .cse5) (or .cse0 .cse3 .cse4 .cse5))) [2023-11-06 22:34:38,818 INFO L899 garLoopResultBuilder]: For program point deactivatePumpFINAL(lines 199 206) no Hoare annotation was computed. [2023-11-06 22:34:38,818 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__baseEXIT(lines 89 95) no Hoare annotation was computed. [2023-11-06 22:34:38,818 INFO L902 garLoopResultBuilder]: At program point processEnvironment__wrappee__baseFINAL(lines 89 95) the Hoare annotation is: true [2023-11-06 22:34:38,819 INFO L899 garLoopResultBuilder]: For program point L291-2(lines 291 295) no Hoare annotation was computed. [2023-11-06 22:34:38,819 INFO L895 garLoopResultBuilder]: At program point isLowWaterSensorDry_returnLabel#1(lines 981 989) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:34:38,819 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 123 147) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:34:38,820 INFO L895 garLoopResultBuilder]: At program point L137(line 137) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:34:38,820 INFO L895 garLoopResultBuilder]: At program point L133(line 133) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:34:38,820 INFO L899 garLoopResultBuilder]: For program point L131(lines 131 139) no Hoare annotation was computed. [2023-11-06 22:34:38,821 INFO L899 garLoopResultBuilder]: For program point L127(lines 127 144) no Hoare annotation was computed. [2023-11-06 22:34:38,821 INFO L895 garLoopResultBuilder]: At program point isLowWaterLevel_returnLabel#1(lines 282 300) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:34:38,821 INFO L895 garLoopResultBuilder]: At program point L142(line 142) the Hoare annotation is: (let ((.cse2 (= |old(~pumpRunning~0)| 0)) (.cse1 (= ~pumpRunning~0 0)) (.cse0 (not (= 1 ~systemActive~0)))) (and (or .cse0 (not (= ~methaneLevelCritical~0 0)) (and .cse1 .cse2)) (or (not .cse2) .cse1 .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:34:38,821 INFO L899 garLoopResultBuilder]: For program point L142-1(lines 123 147) no Hoare annotation was computed. [2023-11-06 22:34:38,822 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__methaneQueryEXIT(lines 123 147) no Hoare annotation was computed. [2023-11-06 22:34:38,822 INFO L899 garLoopResultBuilder]: For program point L291(lines 291 295) no Hoare annotation was computed. [2023-11-06 22:34:38,822 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 914 925) the Hoare annotation is: (let ((.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= |old(~methaneLevelCritical~0)| 0))) (.cse2 (= ~methaneLevelCritical~0 0)) (.cse1 (not (= ~pumpRunning~0 0))) (.cse6 (not (= 1 ~systemActive~0))) (.cse4 (= |old(~methaneLevelCritical~0)| ~methaneLevelCritical~0)) (.cse5 (< |old(~methaneLevelCritical~0)| 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse1 .cse4 .cse5 .cse3) (or .cse0 .cse2 .cse6) (or .cse1 .cse6 .cse4 .cse5))) [2023-11-06 22:34:38,822 INFO L899 garLoopResultBuilder]: For program point changeMethaneLevelEXIT(lines 914 925) no Hoare annotation was computed. [2023-11-06 22:34:38,823 INFO L899 garLoopResultBuilder]: For program point L918-1(lines 914 925) no Hoare annotation was computed. [2023-11-06 22:34:38,823 INFO L902 garLoopResultBuilder]: At program point L769(line 769) the Hoare annotation is: true [2023-11-06 22:34:38,823 INFO L899 garLoopResultBuilder]: For program point L769-1(line 769) no Hoare annotation was computed. [2023-11-06 22:34:38,823 INFO L899 garLoopResultBuilder]: For program point cleanupEXIT(lines 763 792) no Hoare annotation was computed. [2023-11-06 22:34:38,823 INFO L902 garLoopResultBuilder]: At program point L788(lines 763 792) the Hoare annotation is: true [2023-11-06 22:34:38,823 INFO L899 garLoopResultBuilder]: For program point L784(line 784) no Hoare annotation was computed. [2023-11-06 22:34:38,824 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 763 792) the Hoare annotation is: true [2023-11-06 22:34:38,824 INFO L899 garLoopResultBuilder]: For program point L777(lines 777 781) no Hoare annotation was computed. [2023-11-06 22:34:38,824 INFO L902 garLoopResultBuilder]: At program point L777-1(lines 777 781) the Hoare annotation is: true [2023-11-06 22:34:38,824 INFO L899 garLoopResultBuilder]: For program point L774(line 774) no Hoare annotation was computed. [2023-11-06 22:34:38,824 INFO L902 garLoopResultBuilder]: At program point L773-2(lines 773 787) the Hoare annotation is: true [2023-11-06 22:34:38,825 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 926 934) the Hoare annotation is: true [2023-11-06 22:34:38,825 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalFINAL(lines 926 934) no Hoare annotation was computed. [2023-11-06 22:34:38,825 INFO L899 garLoopResultBuilder]: For program point isMethaneLevelCriticalEXIT(lines 926 934) no Hoare annotation was computed. [2023-11-06 22:34:38,825 INFO L895 garLoopResultBuilder]: At program point L159(line 159) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 |old(~pumpRunning~0)|)) (.cse1 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse1 (and .cse0 (<= 1 |timeShift_processEnvironment_~tmp~2#1|)) .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse1 .cse3) (or .cse4 .cse1 .cse2) (or .cse4 .cse3 .cse5))) [2023-11-06 22:34:38,826 INFO L899 garLoopResultBuilder]: For program point L894(lines 894 898) no Hoare annotation was computed. [2023-11-06 22:34:38,826 INFO L895 garLoopResultBuilder]: At program point L894-2(lines 890 901) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse6)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse0 .cse2) (or .cse3 .cse0 .cse4) (or .cse0 .cse4 .cse1) (or .cse3 .cse2 .cse5)))) [2023-11-06 22:34:38,826 INFO L895 garLoopResultBuilder]: At program point L155(line 155) the Hoare annotation is: (let ((.cse6 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse6)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse1 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse6)) (.cse3 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse5) (or .cse3 .cse0 .cse2) (or .cse3 .cse0 .cse4) (or .cse0 .cse4 .cse1) (or .cse3 .cse2 .cse5)))) [2023-11-06 22:34:38,827 INFO L899 garLoopResultBuilder]: For program point L155-1(line 155) no Hoare annotation was computed. [2023-11-06 22:34:38,827 INFO L895 garLoopResultBuilder]: At program point L168(line 168) the Hoare annotation is: (let ((.cse6 (= |old(~pumpRunning~0)| 0))) (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (and (= ~pumpRunning~0 0) .cse6 (= |old(~waterLevel~0)| ~waterLevel~0))) (.cse0 (not .cse6)) (.cse5 (< ~methaneLevelCritical~0 1)) (.cse2 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse4 .cse1) (or .cse3 .cse4 .cse5) (or .cse0 .cse5 .cse2)))) [2023-11-06 22:34:38,827 INFO L895 garLoopResultBuilder]: At program point L168-1(lines 149 173) the Hoare annotation is: (let ((.cse4 (= ~pumpRunning~0 0)) (.cse1 (not (= 1 ~systemActive~0))) (.cse5 (not (= ~methaneLevelCritical~0 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse6 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse3) (or .cse0 .cse5 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse1 (<= 2 ~waterLevel~0) .cse5) (or .cse0 .cse1 .cse5 .cse2) (or .cse0 .cse3 .cse6))) [2023-11-06 22:34:38,827 INFO L899 garLoopResultBuilder]: For program point L391(line 391) no Hoare annotation was computed. [2023-11-06 22:34:38,828 INFO L899 garLoopResultBuilder]: For program point timeShiftFINAL(lines 65 88) no Hoare annotation was computed. [2023-11-06 22:34:38,828 INFO L899 garLoopResultBuilder]: For program point L69-1(lines 68 87) no Hoare annotation was computed. [2023-11-06 22:34:38,828 INFO L895 garLoopResultBuilder]: At program point L867(line 867) the Hoare annotation is: (let ((.cse7 (= ~pumpRunning~0 0)) (.cse5 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse4 (not (= 1 ~systemActive~0))) (.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and .cse7 .cse5)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5 .cse6) (or .cse7 .cse4 .cse6) (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7 .cse4 (<= 2 ~waterLevel~0) .cse2) (or .cse0 .cse4 .cse2 .cse5) (or .cse0 .cse1 .cse6 .cse3)))) [2023-11-06 22:34:38,828 INFO L899 garLoopResultBuilder]: For program point L867-1(line 867) no Hoare annotation was computed. [2023-11-06 22:34:38,829 INFO L899 garLoopResultBuilder]: For program point L157(lines 157 165) no Hoare annotation was computed. [2023-11-06 22:34:38,829 INFO L899 garLoopResultBuilder]: For program point L153(lines 153 170) no Hoare annotation was computed. [2023-11-06 22:34:38,829 INFO L895 garLoopResultBuilder]: At program point __automaton_fail_returnLabel#1(lines 387 394) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2) (or .cse3 .cse1) (or .cse0 .cse4 .cse2) (or .cse3 .cse4))) [2023-11-06 22:34:38,830 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 65 88) the Hoare annotation is: (let ((.cse7 (= |old(~waterLevel~0)| ~waterLevel~0))) (let ((.cse2 (not (= ~methaneLevelCritical~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse5 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (and (= ~pumpRunning~0 0) .cse7)) (.cse6 (< ~methaneLevelCritical~0 1)) (.cse3 (not (= 0 ~systemActive~0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse2 .cse5) (or .cse4 .cse5 .cse6) (or .cse0 .cse1 .cse6 .cse3)))) [2023-11-06 22:34:38,830 INFO L899 garLoopResultBuilder]: For program point L76-1(lines 76 82) no Hoare annotation was computed. [2023-11-06 22:34:38,830 INFO L899 garLoopResultBuilder]: For program point timeShiftEXIT(lines 65 88) no Hoare annotation was computed. [2023-11-06 22:34:38,830 INFO L895 garLoopResultBuilder]: At program point isPumpRunning_returnLabel#1(lines 218 226) the Hoare annotation is: (let ((.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (not (= 0 ~systemActive~0))) (.cse6 (= ~pumpRunning~0 0)) (.cse7 (= |timeShift_isPumpRunning_#res#1| 0)) (.cse3 (< ~methaneLevelCritical~0 1)) (.cse1 (not (= 1 ~systemActive~0))) (.cse4 (not (= ~methaneLevelCritical~0 0)))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse0 .cse4 .cse5) (or .cse0 (and .cse6 .cse7 .cse2) .cse3 .cse5) (or .cse1 (and .cse6 .cse7) .cse3) (or .cse1 .cse4))) [2023-11-06 22:34:38,830 INFO L899 garLoopResultBuilder]: For program point L873(lines 873 879) no Hoare annotation was computed. [2023-11-06 22:34:38,831 INFO L899 garLoopResultBuilder]: For program point timeShiftErr0ASSERT_VIOLATIONERROR_FUNCTION(line 391) no Hoare annotation was computed. [2023-11-06 22:34:38,831 INFO L899 garLoopResultBuilder]: For program point L869(lines 869 882) no Hoare annotation was computed. [2023-11-06 22:34:38,831 INFO L895 garLoopResultBuilder]: At program point L869-1(lines 861 885) the Hoare annotation is: (let ((.cse7 (= 1 ~systemActive~0))) (let ((.cse2 (= |timeShift___utac_acc__Specification1_spec__1_~tmp~11#1| 0)) (.cse4 (not (= ~methaneLevelCritical~0 0))) (.cse6 (not .cse7)) (.cse0 (not (= |old(~pumpRunning~0)| 0))) (.cse1 (= ~pumpRunning~0 0)) (.cse3 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse8 (< ~methaneLevelCritical~0 1)) (.cse5 (not (= 0 ~systemActive~0)))) (and (or .cse0 (and .cse1 .cse2 .cse3) .cse4 .cse5) (or (and .cse2 (<= 2 ~waterLevel~0)) .cse6 (and .cse1 .cse2 .cse7) .cse4 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse2)) (or .cse0 .cse6 .cse3 .cse8) (or .cse0 .cse6 .cse4 .cse3) (or .cse6 (and .cse1 .cse7) .cse8) (or .cse0 (and .cse1 .cse3) .cse8 .cse5)))) [2023-11-06 22:34:38,832 INFO L895 garLoopResultBuilder]: At program point L163(line 163) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse4 (< ~methaneLevelCritical~0 1))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse1 .cse3) (or .cse2 .cse0 .cse1) (or .cse2 .cse4 .cse3) (or .cse0 .cse4))) [2023-11-06 22:34:38,832 INFO L895 garLoopResultBuilder]: At program point L378(lines 329 379) the Hoare annotation is: false [2023-11-06 22:34:38,832 INFO L902 garLoopResultBuilder]: At program point runTest_returnLabel#1(lines 824 833) the Hoare annotation is: true [2023-11-06 22:34:38,832 INFO L899 garLoopResultBuilder]: For program point L366(lines 366 372) no Hoare annotation was computed. [2023-11-06 22:34:38,833 INFO L895 garLoopResultBuilder]: At program point L366-2(lines 360 373) the Hoare annotation is: (let ((.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse0 (= ~pumpRunning~0 0)) (.cse3 (= 0 ~systemActive~0)) (.cse5 (= ~methaneLevelCritical~0 0)) (.cse4 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2) (and .cse0 .cse5 .cse2 .cse3) (and .cse5 .cse4 .cse2))) [2023-11-06 22:34:38,833 INFO L895 garLoopResultBuilder]: At program point select_features_returnLabel#1(lines 1002 1008) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:34:38,833 INFO L902 garLoopResultBuilder]: At program point main_returnLabel#1(lines 837 859) the Hoare annotation is: true [2023-11-06 22:34:38,833 INFO L899 garLoopResultBuilder]: For program point L-1(line -1) no Hoare annotation was computed. [2023-11-06 22:34:38,833 INFO L899 garLoopResultBuilder]: For program point L350(lines 350 356) no Hoare annotation was computed. [2023-11-06 22:34:38,834 INFO L899 garLoopResultBuilder]: For program point L350-1(lines 350 356) no Hoare annotation was computed. [2023-11-06 22:34:38,834 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2023-11-06 22:34:38,834 INFO L895 garLoopResultBuilder]: At program point L375(lines 330 377) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-06 22:34:38,834 INFO L895 garLoopResultBuilder]: At program point L342(line 342) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-06 22:34:38,835 INFO L899 garLoopResultBuilder]: For program point L305(lines 305 311) no Hoare annotation was computed. [2023-11-06 22:34:38,835 INFO L899 garLoopResultBuilder]: For program point L305-1(lines 305 311) no Hoare annotation was computed. [2023-11-06 22:34:38,835 INFO L895 garLoopResultBuilder]: At program point setup_returnLabel#1(lines 817 823) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:34:38,835 INFO L899 garLoopResultBuilder]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2023-11-06 22:34:38,835 INFO L899 garLoopResultBuilder]: For program point L847(lines 847 854) no Hoare annotation was computed. [2023-11-06 22:34:38,836 INFO L899 garLoopResultBuilder]: For program point L847-2(lines 847 854) no Hoare annotation was computed. [2023-11-06 22:34:38,836 INFO L899 garLoopResultBuilder]: For program point L331(lines 330 377) no Hoare annotation was computed. [2023-11-06 22:34:38,836 INFO L899 garLoopResultBuilder]: For program point $Ultimate##0(line -1) no Hoare annotation was computed. [2023-11-06 22:34:38,836 INFO L895 garLoopResultBuilder]: At program point select_helpers_returnLabel#1(lines 1009 1015) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:34:38,836 INFO L899 garLoopResultBuilder]: For program point L360(lines 360 373) no Hoare annotation was computed. [2023-11-06 22:34:38,837 INFO L895 garLoopResultBuilder]: At program point L352(line 352) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse4 (= ~methaneLevelCritical~0 0)) (.cse0 (= ~pumpRunning~0 0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse4 .cse2 .cse3) (and .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2))) [2023-11-06 22:34:38,837 INFO L902 garLoopResultBuilder]: At program point L381(lines 320 385) the Hoare annotation is: true [2023-11-06 22:34:38,837 INFO L899 garLoopResultBuilder]: For program point L340(lines 340 346) no Hoare annotation was computed. [2023-11-06 22:34:38,837 INFO L899 garLoopResultBuilder]: For program point L340-1(lines 340 346) no Hoare annotation was computed. [2023-11-06 22:34:38,838 INFO L895 garLoopResultBuilder]: At program point L307(line 307) the Hoare annotation is: (let ((.cse3 (= ~methaneLevelCritical~0 0)) (.cse1 (= 1 ~systemActive~0)) (.cse0 (<= 1 ~methaneLevelCritical~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse2 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse5 (not (= 0 ~systemActive~0)))) (or (and .cse0 .cse1 .cse2) (and .cse3 .cse4 .cse2 .cse5) (and .cse3 .cse1 .cse2) (and .cse0 .cse4 .cse2 .cse5))) [2023-11-06 22:34:38,838 INFO L895 garLoopResultBuilder]: At program point stopSystem_returnLabel#1(lines 301 315) the Hoare annotation is: (let ((.cse0 (= ~pumpRunning~0 0)) (.cse1 (= |ULTIMATE.start_test_~splverifierCounter~0#1| 0)) (.cse2 (= 0 ~systemActive~0))) (or (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1 .cse2) (and .cse0 (= ~methaneLevelCritical~0 0) .cse1 .cse2))) [2023-11-06 22:34:38,838 INFO L899 garLoopResultBuilder]: For program point L332(lines 332 336) no Hoare annotation was computed. [2023-11-06 22:34:38,838 INFO L895 garLoopResultBuilder]: At program point valid_product_returnLabel#1(lines 1016 1024) the Hoare annotation is: (and (= ~pumpRunning~0 0) (= ~methaneLevelCritical~0 0) (= 1 ~systemActive~0) (= ~waterLevel~0 1)) [2023-11-06 22:34:38,839 INFO L895 garLoopResultBuilder]: At program point L116(line 116) the Hoare annotation is: (let ((.cse2 (not (= |old(~pumpRunning~0)| 0))) (.cse0 (not (= 1 ~systemActive~0))) (.cse1 (not (= ~methaneLevelCritical~0 0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 .cse1) (or .cse2 .cse0 (< ~methaneLevelCritical~0 1)) (or .cse2 .cse0 .cse1))) [2023-11-06 22:34:38,839 INFO L899 garLoopResultBuilder]: For program point L116-1(lines 97 121) no Hoare annotation was computed. [2023-11-06 22:34:38,839 INFO L899 garLoopResultBuilder]: For program point L971(lines 971 977) no Hoare annotation was computed. [2023-11-06 22:34:38,839 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 97 121) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse0 (not (= ~methaneLevelCritical~0 0))) (or (not (= |old(~pumpRunning~0)| 0)) (= ~pumpRunning~0 0) .cse0 (< ~methaneLevelCritical~0 1)))) [2023-11-06 22:34:38,840 INFO L895 garLoopResultBuilder]: At program point isHighWaterSensorDry_returnLabel#1(lines 967 980) the Hoare annotation is: (let ((.cse1 (= ~pumpRunning~0 0)) (.cse2 (= |old(~pumpRunning~0)| 0)) (.cse5 (= 1 ~systemActive~0))) (let ((.cse0 (not .cse5)) (.cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterSensorDry_#res#1| 1)) (.cse4 (and .cse1 (<= 2 ~waterLevel~0) .cse5 .cse2))) (and (or .cse0 (and .cse1 .cse2 .cse3) (not (= ~methaneLevelCritical~0 0)) .cse4) (or (not .cse2) .cse0 (and .cse1 .cse3) .cse4 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:34:38,840 INFO L895 garLoopResultBuilder]: At program point isHighWaterLevel_returnLabel#1(lines 263 281) the Hoare annotation is: (let ((.cse4 (= 1 ~systemActive~0)) (.cse3 (= |old(~pumpRunning~0)| 0))) (let ((.cse0 (and (= ~pumpRunning~0 |old(~pumpRunning~0)|) .cse4 .cse3 (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_#res#1| 0) (= |processEnvironment__wrappee__highWaterSensor_isHighWaterLevel_~tmp___0~0#1| 0))) (.cse1 (not .cse4)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse4 .cse3))) (and (or .cse0 .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2) (or (not .cse3) .cse0 .cse1 .cse2 (< ~methaneLevelCritical~0 1))))) [2023-11-06 22:34:38,840 INFO L899 garLoopResultBuilder]: For program point L189(lines 189 195) no Hoare annotation was computed. [2023-11-06 22:34:38,840 INFO L899 garLoopResultBuilder]: For program point processEnvironment__wrappee__highWaterSensorEXIT(lines 97 121) no Hoare annotation was computed. [2023-11-06 22:34:38,841 INFO L895 garLoopResultBuilder]: At program point L187(line 187) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (<= 2 ~waterLevel~0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-06 22:34:38,841 INFO L895 garLoopResultBuilder]: At program point L189-2(lines 182 198) the Hoare annotation is: (let ((.cse1 (not (= 1 ~systemActive~0))) (.cse0 (<= 2 ~waterLevel~0))) (and (or (and (= ~pumpRunning~0 0) (<= ~methaneLevelCritical~0 |processEnvironment__wrappee__highWaterSensor_activatePump_~tmp~3#1|) .cse0) (not (= |old(~pumpRunning~0)| 0)) .cse1 (< ~methaneLevelCritical~0 1)) (or .cse1 .cse0 (not (= ~methaneLevelCritical~0 0))))) [2023-11-06 22:34:38,841 INFO L899 garLoopResultBuilder]: For program point L187-1(line 187) no Hoare annotation was computed. [2023-11-06 22:34:38,841 INFO L899 garLoopResultBuilder]: For program point L272(lines 272 276) no Hoare annotation was computed. [2023-11-06 22:34:38,842 INFO L895 garLoopResultBuilder]: At program point L111(line 111) the Hoare annotation is: (let ((.cse0 (= |old(~pumpRunning~0)| 0)) (.cse3 (= 1 ~systemActive~0))) (let ((.cse1 (not .cse3)) (.cse2 (and (= ~pumpRunning~0 0) (= |processEnvironment__wrappee__highWaterSensor_~tmp~0#1| 0) .cse3 .cse0))) (and (or (not .cse0) .cse1 .cse2 (< ~methaneLevelCritical~0 1)) (or .cse1 (not (= ~methaneLevelCritical~0 0)) .cse2)))) [2023-11-06 22:34:38,842 INFO L899 garLoopResultBuilder]: For program point L272-2(lines 272 276) no Hoare annotation was computed. [2023-11-06 22:34:38,842 INFO L899 garLoopResultBuilder]: For program point L105(lines 105 113) no Hoare annotation was computed. [2023-11-06 22:34:38,842 INFO L899 garLoopResultBuilder]: For program point L101(lines 101 118) no Hoare annotation was computed. [2023-11-06 22:34:38,843 INFO L895 garLoopResultBuilder]: At program point activatePump__wrappee__lowWaterSensor_returnLabel#1(lines 174 181) the Hoare annotation is: (let ((.cse0 (not (= 1 ~systemActive~0)))) (and (or (not (= |old(~pumpRunning~0)| 0)) .cse0 (< ~methaneLevelCritical~0 1)) (or .cse0 (<= 2 ~waterLevel~0) (not (= ~methaneLevelCritical~0 0))))) [2023-11-06 22:34:38,843 INFO L899 garLoopResultBuilder]: For program point waterRiseEXIT(lines 902 913) no Hoare annotation was computed. [2023-11-06 22:34:38,843 INFO L895 garLoopResultBuilder]: At program point $Ultimate##0(lines 902 913) the Hoare annotation is: (let ((.cse1 (not (= ~methaneLevelCritical~0 0))) (.cse3 (not (= 0 ~systemActive~0))) (.cse0 (not (= ~pumpRunning~0 0))) (.cse4 (not (= 1 ~systemActive~0))) (.cse2 (= |old(~waterLevel~0)| ~waterLevel~0)) (.cse5 (< ~methaneLevelCritical~0 1))) (and (or .cse0 .cse1 .cse2 .cse3) (or .cse4 .cse1 .cse2) (or .cse0 .cse2 .cse5 .cse3) (or .cse0 .cse4 .cse2 .cse5))) [2023-11-06 22:34:38,843 INFO L899 garLoopResultBuilder]: For program point L906-1(lines 902 913) no Hoare annotation was computed. [2023-11-06 22:34:38,843 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmEXIT(lines 207 217) no Hoare annotation was computed. [2023-11-06 22:34:38,844 INFO L902 garLoopResultBuilder]: At program point $Ultimate##0(lines 207 217) the Hoare annotation is: true [2023-11-06 22:34:38,844 INFO L899 garLoopResultBuilder]: For program point isMethaneAlarmFINAL(lines 207 217) no Hoare annotation was computed. [2023-11-06 22:34:38,844 INFO L902 garLoopResultBuilder]: At program point L212(line 212) the Hoare annotation is: true [2023-11-06 22:34:38,844 INFO L899 garLoopResultBuilder]: For program point L212-1(line 212) no Hoare annotation was computed. [2023-11-06 22:34:38,847 INFO L445 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-06 22:34:38,850 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2023-11-06 22:34:38,891 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 10:34:38 BoogieIcfgContainer [2023-11-06 22:34:38,892 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2023-11-06 22:34:38,892 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2023-11-06 22:34:38,893 INFO L270 PluginConnector]: Initializing Witness Printer... [2023-11-06 22:34:38,893 INFO L274 PluginConnector]: Witness Printer initialized [2023-11-06 22:34:38,894 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 10:34:22" (3/4) ... [2023-11-06 22:34:38,896 INFO L137 WitnessPrinter]: Generating witness for correct program [2023-11-06 22:34:38,901 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure deactivatePump [2023-11-06 22:34:38,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__base [2023-11-06 22:34:38,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure changeMethaneLevel [2023-11-06 22:34:38,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure cleanup [2023-11-06 22:34:38,902 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneLevelCritical [2023-11-06 22:34:38,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure timeShift [2023-11-06 22:34:38,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__highWaterSensor [2023-11-06 22:34:38,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure waterRise [2023-11-06 22:34:38,903 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure processEnvironment__wrappee__methaneQuery [2023-11-06 22:34:38,904 INFO L361 RCFGBacktranslator]: Ignoring RootEdge to procedure isMethaneAlarm [2023-11-06 22:34:38,914 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 18 nodes and edges [2023-11-06 22:34:38,915 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2023-11-06 22:34:38,916 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2023-11-06 22:34:38,916 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:34:38,917 INFO L939 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2023-11-06 22:34:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:38,956 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && (((pumpRunning == 0) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:38,958 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && ((((((tmp == 0) && (2 <= waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:38,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (\result == 0))) || (methaneLevelCritical < 1))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:38,959 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical <= tmp)) && (2 <= waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:38,960 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:38,960 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:38,960 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:34:38,961 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (!((1 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:34:38,961 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:38,961 WARN L220 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:34:39,009 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:39,010 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && (((pumpRunning == 0) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:39,011 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && ((((((tmp == 0) && (2 <= waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) [2023-11-06 22:34:39,011 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (\result == 0))) || (methaneLevelCritical < 1))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:39,012 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((pumpRunning == 0) && (methaneLevelCritical <= tmp)) && (2 <= waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:39,012 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:39,012 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:39,012 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:34:39,013 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (!((1 == systemActive)) || (methaneLevelCritical < 1))) [2023-11-06 22:34:39,013 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) [2023-11-06 22:34:39,013 WARN L115 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) [2023-11-06 22:34:39,038 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.graphml [2023-11-06 22:34:39,039 INFO L149 WitnessManager]: Wrote witness to /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/witness.graphml.yaml [2023-11-06 22:34:39,039 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2023-11-06 22:34:39,040 INFO L158 Benchmark]: Toolchain (without parser) took 17749.54ms. Allocated memory was 140.5MB in the beginning and 281.0MB in the end (delta: 140.5MB). Free memory was 99.7MB in the beginning and 119.7MB in the end (delta: -20.0MB). Peak memory consumption was 121.9MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,040 INFO L158 Benchmark]: CDTParser took 0.38ms. Allocated memory is still 94.4MB. Free memory is still 47.7MB. There was no memory consumed. Max. memory is 16.1GB. [2023-11-06 22:34:39,041 INFO L158 Benchmark]: CACSL2BoogieTranslator took 590.25ms. Allocated memory is still 140.5MB. Free memory was 99.7MB in the beginning and 80.1MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,041 INFO L158 Benchmark]: Boogie Procedure Inliner took 82.73ms. Allocated memory is still 140.5MB. Free memory was 80.1MB in the beginning and 77.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,042 INFO L158 Benchmark]: Boogie Preprocessor took 39.75ms. Allocated memory is still 140.5MB. Free memory was 77.6MB in the beginning and 75.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,042 INFO L158 Benchmark]: RCFGBuilder took 774.86ms. Allocated memory was 140.5MB in the beginning and 192.9MB in the end (delta: 52.4MB). Free memory was 75.9MB in the beginning and 153.5MB in the end (delta: -77.6MB). Peak memory consumption was 13.7MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,043 INFO L158 Benchmark]: TraceAbstraction took 16106.20ms. Allocated memory was 192.9MB in the beginning and 281.0MB in the end (delta: 88.1MB). Free memory was 152.5MB in the beginning and 128.1MB in the end (delta: 24.3MB). Peak memory consumption was 158.6MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,043 INFO L158 Benchmark]: Witness Printer took 146.61ms. Allocated memory is still 281.0MB. Free memory was 128.1MB in the beginning and 119.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. [2023-11-06 22:34:39,046 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.38ms. Allocated memory is still 94.4MB. Free memory is still 47.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 590.25ms. Allocated memory is still 140.5MB. Free memory was 99.7MB in the beginning and 80.1MB in the end (delta: 19.6MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 82.73ms. Allocated memory is still 140.5MB. Free memory was 80.1MB in the beginning and 77.6MB in the end (delta: 2.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 39.75ms. Allocated memory is still 140.5MB. Free memory was 77.6MB in the beginning and 75.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 774.86ms. Allocated memory was 140.5MB in the beginning and 192.9MB in the end (delta: 52.4MB). Free memory was 75.9MB in the beginning and 153.5MB in the end (delta: -77.6MB). Peak memory consumption was 13.7MB. Max. memory is 16.1GB. * TraceAbstraction took 16106.20ms. Allocated memory was 192.9MB in the beginning and 281.0MB in the end (delta: 88.1MB). Free memory was 152.5MB in the beginning and 128.1MB in the end (delta: 24.3MB). Peak memory consumption was 158.6MB. Max. memory is 16.1GB. * Witness Printer took 146.61ms. Allocated memory is still 281.0MB. Free memory was 128.1MB in the beginning and 119.7MB in the end (delta: 8.4MB). Peak memory consumption was 8.4MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 49]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"MinePump.i","") [49] - GenericResultAtLocation [Line: 316]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [316] - GenericResultAtLocation [Line: 386]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [386] - GenericResultAtLocation [Line: 395]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [395] - GenericResultAtLocation [Line: 761]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [761] - GenericResultAtLocation [Line: 860]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [860] - GenericResultAtLocation [Line: 886]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"Environment.i","") [886] - GenericResultAtLocation [Line: 990]: Unsoundness Warning Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [990] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 391]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 11 procedures, 112 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 16.0s, OverallIterations: 11, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 4.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1474 SdHoareTripleChecker+Valid, 2.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1430 mSDsluCounter, 4698 SdHoareTripleChecker+Invalid, 1.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 3335 mSDsCounter, 421 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1724 IncrementalHoareTripleChecker+Invalid, 2145 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 421 mSolverCounterUnsat, 1363 mSDtfsCounter, 1724 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 401 GetRequests, 300 SyntacticMatches, 1 SemanticMatches, 100 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 262 ImplicationChecksByTransitivity, 1.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1357occurred in iteration=8, InterpolantAutomatonStates: 84, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.0s AutomataMinimizationTime, 11 MinimizatonAttempts, 129 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 51 LocationsWithAnnotation, 2589 PreInvPairs, 2868 NumberOfFragments, 1947 HoareAnnotationTreeSize, 2589 FomulaSimplifications, 1791 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 51 FomulaSimplificationsInter, 12023 FormulaSimplificationTreeSizeReductionInter, 5.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 3.2s InterpolantComputationTime, 817 NumberOfCodeBlocks, 817 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 804 ConstructedInterpolants, 0 QuantifiedInterpolants, 1538 SizeOfPredicates, 6 NumberOfNonLiveVariables, 629 ConjunctsInSsa, 18 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 124/138 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold - InvariantResult [Line: 149]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && (((pumpRunning == 0) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((((pumpRunning == \old(pumpRunning)) || (pumpRunning == 0)) || !((1 == systemActive))) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 301]: Loop Invariant Derived loop invariant: (((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) - InvariantResult [Line: 817]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 174]: Loop Invariant Derived loop invariant: (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: (((((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && (!((1 == systemActive)) || (methaneLevelCritical < 1))) - InvariantResult [Line: 1002]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 1016]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 890]: Loop Invariant Derived loop invariant: (((((((!((1 == systemActive)) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) && ((!((1 == systemActive)) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (1 == systemActive)))) && ((!((\old(pumpRunning) == 0)) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 1009]: Loop Invariant Derived loop invariant: ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (1 == systemActive)) && (waterLevel == 1)) - InvariantResult [Line: 282]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 981]: Loop Invariant Derived loop invariant: (((((pumpRunning == \old(pumpRunning)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (methaneLevelCritical < 1))) && ((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 861]: Loop Invariant Derived loop invariant: ((((((((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (tmp == 0)) && (\old(waterLevel) == waterLevel))) || !((methaneLevelCritical == 0))) || !((0 == systemActive))) && ((((((tmp == 0) && (2 <= waterLevel)) || !((1 == systemActive))) || (((pumpRunning == 0) && (tmp == 0)) && (1 == systemActive))) || !((methaneLevelCritical == 0))) || ((pumpRunning == \old(pumpRunning)) && (tmp == 0)))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || (\old(waterLevel) == waterLevel))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (1 == systemActive))) || (methaneLevelCritical < 1))) && (((!((\old(pumpRunning) == 0)) || ((pumpRunning == 0) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) - InvariantResult [Line: 837]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 218]: Loop Invariant Derived loop invariant: (((((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || (\old(waterLevel) == waterLevel)) || (methaneLevelCritical < 1)) && ((!((\old(pumpRunning) == 0)) || !((methaneLevelCritical == 0))) || !((0 == systemActive)))) && (((!((\old(pumpRunning) == 0)) || (((pumpRunning == 0) && (\result == 0)) && (\old(waterLevel) == waterLevel))) || (methaneLevelCritical < 1)) || !((0 == systemActive)))) && ((!((1 == systemActive)) || ((pumpRunning == 0) && (\result == 0))) || (methaneLevelCritical < 1))) && (!((1 == systemActive)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (methaneLevelCritical <= tmp)) && (2 <= waterLevel)) || !((\old(pumpRunning) == 0))) || !((1 == systemActive))) || (methaneLevelCritical < 1)) && ((!((1 == systemActive)) || (2 <= waterLevel)) || !((methaneLevelCritical == 0)))) - InvariantResult [Line: 329]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: ((((!((1 == systemActive)) || (((pumpRunning == 0) && (\old(pumpRunning) == 0)) && (\result == 1))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || !((1 == systemActive))) || ((pumpRunning == 0) && (\result == 1))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 773]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 330]: Loop Invariant Derived loop invariant: (((((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (splverifierCounter == 0)) && (0 == systemActive)) || ((((pumpRunning == 0) && (methaneLevelCritical == 0)) && (splverifierCounter == 0)) && (0 == systemActive))) || (((methaneLevelCritical == 0) && (1 == systemActive)) && (splverifierCounter == 0))) || ((((pumpRunning == 0) && (1 <= methaneLevelCritical)) && (1 == systemActive)) && (splverifierCounter == 0))) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: (((((((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0)) || !((1 == systemActive))) || !((methaneLevelCritical == 0))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) && ((((!((\old(pumpRunning) == 0)) || (((((pumpRunning == \old(pumpRunning)) && (1 == systemActive)) && (\old(pumpRunning) == 0)) && (\result == 0)) && (tmp___0 == 0))) || !((1 == systemActive))) || ((((pumpRunning == 0) && (2 <= waterLevel)) && (1 == systemActive)) && (\old(pumpRunning) == 0))) || (methaneLevelCritical < 1))) - InvariantResult [Line: 763]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 824]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 320]: Loop Invariant Derived loop invariant: 1 RESULT: Ultimate proved your program to be correct! [2023-11-06 22:34:39,096 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_f0f96fd7-60a1-4c32-8a60-67ad6134b65d/bin/uautomizer-verify-WvqO1wxjHP/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE